TPOT Games

Privacy policy

Last updated 21 October 2026

Who we are

TPOT Games is TPOT GAMES LTD, a company registered in England and Wales (company number 17491482), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We make Estate Wars and are responsible for your data, and we're registered with the Information Commissioner's Office (registration number ZC264175). If you have a question about your data, email support@tpotgames.com.

What we keep and why

• Your TPOT account. Your TPOT name, your password (stored scrambled, so nobody can read it), your email if you give one, and your Google or Apple account ID if you sign in with one of them. If you sign in with Apple and hide your email, we get the forwarding address Apple gives us. We need these to run your account and to send your verification and reset codes. If you set up your profile, we also keep the portrait, colour and banner you picked from our own sets and your tagline. Other players see your portrait, colour and tagline on your boss's profile in the game. Only you see the banner.
• Your game. Your boss name and gang, your estates and everything you do in the game, your crew and your in-game mail.
• How the game is played. To see what works and where players get stuck, we keep, with your account, which days you play and roughly for how long, and count which actions you take (and which the game turns down) and which screens you open. Staff only see these added up across all players.
• Visits to our website. We count page views, which site sent you to us and how many different visitors come each day. To tell visitors apart we use a scrambled form of your IP address and browser that changes every day, so it can't be traced back to you or matched across days. No cookies are used for this.
• Chat. The messages you post. Other players can see them. Each channel keeps only its most recent messages.
• Comments. What you post under our news and Dev Log posts, shown with your boss name. Anyone can read them.
• Reports and feedback. What you send us, and reports other players make about you, so staff can deal with them.
• Blocks. The players you block, so their chat and comments stay hidden from you. They aren't told. Unblock them in Settings or on your account page.
• Security. We use your IP address to stop abuse, such as too many sign-in attempts. We keep it only in memory, except in our staff log for a few security events, such as a request to delete an account.
• Second accounts. Our terms allow one account per person. To spot second accounts, we keep a scrambled form of your IP address and of a random ID for your device for 30 days. Staff never see the address or the ID, only which accounts share one. Nothing happens to an account because of it alone: staff check first.
• Purchases. You pay for diamonds through Stripe on the web, or through Apple or Google in the apps. Your card number and security code go to them and never reach us. For each purchase we keep what you bought, the price and tax, the payment reference, the country of your billing address and the country your card is from. For web payments we also keep a code Stripe gives each card, which can't be turned back into the card number, and a scrambled code made from the email you give at checkout, so a card or buyer that charged back can't buy again. If you buy on the web from the UK, we email your receipt to the address you give at checkout. For the web store, we look up which country your IP address is in, on our own server with DB-IP's database, and keep that country (not the IP address) with your account as your store country, so prices show in your currency and the right checkout opens. Your IP address isn't sent anywhere for this; the country it's in goes to Stripe with each web payment, as a record of where you bought from, and the web store doesn't sell in countries where Stripe doesn't handle the tax. Your store country changes when you pay with a card and billing address from another country, when you first played from a country the web store doesn't sell in and later play from one it does, or when a UK checkout payment isn't taken because the card or billing address is from elsewhere. The law requires us to keep sales records for tax.
• The playtest list. Your email, if you put your name down.
• Notifications. Only if you turn them on. For each phone or browser that gets them, we keep the push address or token it gives us, so we can send to it. We also keep which notifications you picked and when we last sent you one, so we don't send too many. Turn them off in Settings, or sign out on that device, and we delete its address or token.

We don't track you across other sites or apps, we don't use analytics, and we never sell your data. There are no ads on any device: see No ads, ever.

Who else handles it

• Fly.io hosts our servers and backups in London.
• Stripe takes web payments. The diamonds may be sold to you through Onelink, Stripe's payment service (always if you buy from outside the UK, the Channel Islands, the Isle of Man and Gibraltar), which then handles the payment under its own privacy policy. Apple and Google take payments in their apps, under their own privacy policies.
• Brevo sends our emails.
• Google or Apple, if you choose to sign in with them.
• If you turn on notifications, the push service of your phone or browser delivers them: Google (Firebase, for the apps and Chrome), Apple, Mozilla (Firefox) or Microsoft (Edge), under their own privacy policies. They get the push address or token. In the apps, Google's Firebase also sees the notification's text. In a browser the text is encrypted so only your browser can read it.

No ads, ever

Estate Wars has no ads on the website, on Android or on iPhone, and it never will. We don't support ad tracking: the game has no ad networks, no advertising IDs and no data brokers. Ad companies make their money by farming as much data as they can about people, and we won't hand you over to them.

On your device

We keep you signed in by saving a sign-in token in your browser's storage, along with a few game settings such as sound, and a random ID for the device (see Second accounts above). We don't use advertising or tracking cookies.

Some news and Dev Log posts have YouTube videos. The video's preview picture comes from YouTube when the page opens. The video itself only loads from YouTube when you press play, and YouTube's own privacy policy then applies to it.

How long we keep it

• Your account and game stay until you delete your account. You can do that any time: in the game (Settings, then Delete account) or on your account page. We wipe everything 7 days later unless you sign back in before then, except our staff log (below). Our backups roll over within 2 days after that.
• Our staff log keeps a record of moderation and security events, such as chat filter hits (with what was said), mutes, bans, deleted comments and requests to delete an account, with the IP address involved. We keep it after an account is deleted, so staff can deal with abuse and repeat offenders.
• Accounts whose email was never verified are removed after a day.
• The days you played and for how long are kept for up to 13 months, or until you delete your account. The daily website visitor codes are deleted the next day.
• Purchase records are kept for 6 years for tax. If you delete your account, we keep them without your name on them. For up to 30 days after an account is deleted, we also keep a record of what it sent to other players, so a refund or chargeback can still be followed up.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it. Email support@tpotgames.com and we'll reply within a month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Age

Estate Wars is for players aged 18 and over. If we find an account belongs to someone younger, we delete it.

Changes

If we change this policy, we'll update this page and the date at the top.