What is counted,
and what is not.

Visits are counted, if you agree

The site can count visits with Google Analytics: which pages get opened, roughly where from, on what kind of device. It exists to tell whether any of this is useful to anyone. It is not used to follow a person around, and nothing measured here is sold or handed to an advertiser.

Nothing is loaded until you say yes. A banner asks on your first visit, refusing costs exactly one click like accepting, and until you accept there is no request to Google at all, which you can check in your browser's network tab. Refusing is not a setting that hides the tracking: the script is simply never put on the page.

If you accept, Google Analytics writes cookies named _ga and _ga_ followed by the property id. They hold a random number so a second visit is not counted as a first one, they last up to two years, and Google processes what they carry on its own account as well as ours.

You can change your mind at any time with the Cookies button in the footer. Refusing after having accepted deletes those cookies and reloads the page without the script. Either way the site behaves identically: nothing here is gated behind being measured.

No account, nothing to sign up for

There is no login, no profile, no database of readers. The site never asks for your name or your address, and the only way to tell it anything is the report form below, which you use on purpose or not at all.

Apart from the analytics cookies above, the site sets no cookie of its own.

What stays in your browser

Four small things are kept in your browser's local storage, and none of them leaves your device: your answer to the cookie banner so you are not asked twice, a marker saying you have already seen the guided tour so it does not open again, the kit you last assembled in Requisition so it is still there when you come back, and the contact you typed in the report form so you do not retype it.

The target you set, the plate, the helmet and the hit zone, lives in the address bar instead, so a page can be shared exactly as you configured it. It is part of the link, not a record kept about you.

Clearing your browser data removes all of it, analytics cookies included, and the site works as if you were new.

If you send a report

The report form sends what you type, and only that: your message, the kind you picked, the page you were on, and the contact you choose to leave. It goes straight to the maintainer and is not stored on a server here.

The contact field is optional. Leave it empty and there is no way to reach you, which is fine; leave a handle and you may get an answer. Your address is used to reply and for nothing else.

Your IP is counted for an hour to stop the same person sending fifty reports by accident. It is held in memory, never written down, and never included in the message.

Who else sees a request

The site is served by Vercel, which keeps technical server logs as any host does: IP address, browser, page requested. We do not read them to identify anyone and cannot connect them to anything else.

Fonts come from Google Fonts and weapon renders from an object store, both of which see the request that fetches them. Reports go to Discord, because that is where the maintainer already reads.

Google, for the analytics above, acts as a processor on data that can be sent outside the EU under its standard framework.

Your rights

You have a right of access, correction and erasure over personal data concerning you. In practice there is little to exercise them on: unless you have sent a report with a contact, nothing here names you, and the analytics figures are read as totals, never as a list of people.

If you did send a report and want it deleted, say so through the same form and it will be removed.