Legal
Privacy policy
The short version: Warmasters has no accounts, no analytics and no servers of ours. The game collects nothing about you and the only network it touches is the one that completes a purchase. This website does not track you either — though it does have contact forms, and this explains exactly what they do with what you type.
Last updated 11 August 2026
Who we are
Warmasters is made and published by Studio Bastion, United Kingdom. For anything in this policy, write to hello@studiobastion.com.
The game
What the app collects
Nothing. Warmasters has no user accounts, no login, no telemetry and no analytics SDK. It does not contact any server of ours, because we do not run one. It plays entirely offline — the only time it uses the network at all is to complete or restore an in-app purchase (see Purchases below).
What the app stores on your device
The game writes its own data to your device's app storage so it can remember where you were:
- Saved battles and campaign progress
- Your settings — chosen ruleset, display names, audio preferences
- Which add-on packs you own, so purchased content unlocks without re-checking
- Any content you author in the app's own tools, if a build exposes them
On Mac and Windows this is written to an ordinary file in your user folder, so you can back it up, copy it or delete it like any other file. On phones and tablets it lives in the app's own storage.
This data never leaves your device unless you deliberately export and share a save file. Deleting the app deletes it.
Purchases
Add-on packs are sold as one-off, non-consumable in-app purchases through Apple's App Store and Google Play. Those stores process the payment, hold your billing details and issue receipts. We never see, receive or store your card details, address or store account.
To check what you own — and to make Restore Purchases work when you change device — the app uses RevenueCat, a purchase-management service. RevenueCat receives the store receipt and an app-generated identifier for your install, and returns the list of product ids you own. That identifier is not linked to a name, email or account, because the game has none of those. RevenueCat's handling is covered by its own privacy policy.
This is the only third party the game talks to, and it is only contacted around a purchase or a restore. If you never buy an add-on, the app makes no network requests at all.
The Mac and Windows builds carry no billing SDK and contact nothing whatsoever.
Crash reports
We do not operate a crash-reporting service. If your operating system offers to send Apple or Google a crash report and you accept, that report goes to them under their policies; we may see aggregate, anonymised crash counts in the store consoles, which contain nothing that identifies you.
This website
No tracking
This site sets no advertising or analytics cookies, runs no tracking pixels, and has no third-party advertising. We run no mailing list and never send marketing. The site does have contact forms, and what they collect is set out under the forms on this site below.
What is stored in your browser
One item, in your browser's local storage: wm-ruleset, which remembers whether you last looked at the Classic or Tabletop rules on the interactive demos, so the page opens the way you left it. It is not an identifier, it is never sent anywhere, and clearing your browser data removes it. See the cookie policy for detail.
Fonts
The site loads its typefaces (Cinzel, Spectral and IBM Plex Sans Condensed) from Google Fonts. Requesting a font from Google's servers transmits your IP address and browser user-agent to Google, as any request to any server does. Google states it does not use these requests to build advertising profiles; their handling is covered by the Google Privacy Policy.
Hosting logs
Our hosting provider keeps standard server access logs — IP address, timestamp, page requested, user agent — for security and troubleshooting, as effectively every web host does. We do not analyse them for marketing and do not combine them with anything else.
The forms on this site
The site has forms for player support, bug reports, tester requests, press enquiries and launch notice. Using one is entirely optional — every form is also a plain email link, and you are welcome to write to us directly instead.
What a form collects
Only what you type into it, which depends on the form: your name and email address, and then the details relevant to that request — the device and OS version, the campaign and mission, the ruleset you were playing, your outlet if you are press, and your message. There is no field we do not show you, and nothing is gathered in the background.
Where it goes
Straight to our inbox as an email. It is not stored in a database, a CRM or a mailing list — there is no such thing on this site. The lawful basis is our legitimate interest in answering people who contact us, and for the launch notice it is your consent, which you give by ticking the box and can withdraw at any time by replying to us.
How long we keep it
Support, bug, tester and press messages are held for as long as it takes to deal with them, plus a reasonable period for follow-up, and are deleted on request. A launch-notice address is held only until the release email goes out, and is deleted afterwards — it is one message, not a subscription.
Who processes it on the way
Two services handle a form submission, and neither is used for tracking or advertising:
- Cloudflare Turnstile checks that a human is submitting the form, so the inbox is not buried in spam. It is loaded only when you actually open a form — if you never open one, your browser never contacts Cloudflare. It receives your IP address and some technical signals about the browser session in order to make that judgement. Turnstile is designed as a privacy-preserving alternative to a CAPTCHA: it does not use your data for advertising and does not track you across sites. See the Cloudflare Privacy Policy.
- Resend delivers the resulting email to us. It handles the message in transit as an email provider does. See the Resend Privacy Policy.
To limit abuse, the server also counts recent submissions per visitor for one hour. It stores a one-way hash of the IP address rather than the address itself, and the record is discarded after that.
Email you send us directly
If you write to us by email rather than using a form, the same applies: we hold the message and your address for as long as it takes to deal with it, we do not add you to any marketing list, we do not sell or share your address, and we will delete the correspondence on request.
Children
Warmasters is a fantasy war game intended for a general audience. It requires no account and collects no personal data from anyone, of any age. In-app purchases can be restricted using the parental controls built into iOS and Android.
Your rights
Under UK and EU data protection law you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. The game itself holds no personal data at all, so in practice these rights concern messages you have sent us through a form or by email — write to hello@studiobastion.com and we'll act on it.
If you believe we've handled your data improperly, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes materially — for example if a future version of the game ever adds online play — the date at the top will change and the change will be described in the updates.