Privacy
BLACK COMPANY is playable without an account. This page describes what the game and its server at black-company.net store, and why.
Playing without an account
- By default, companies, autosaves and graphics settings stay in your browser or app storage. Cloud saves are uploaded only when you enable the optional account feature and press upload.
- Exported save files are created on your device and go wherever you put them.
- No advertising or third-party tracking scripts. Anonymous play counts are optional and off by default.
Signing in with Google or Apple
If you choose to sign in, the server stores:
- the sign-in provider and the account identifier it issues for this game;
- the display name and email address the provider shares;
- when the profile was created;
- a session record (only a one-way hash of the session token) that expires after 14 days or when you sign out.
This data is used only to keep you signed in, and by the operator to handle support and deletion requests. It is not sold, shared or used for marketing. Signing in alone does not upload your saves. Passwords are never seen by this game; authentication happens with Google or Apple, under their own privacy policies.
Purchases
The Full License is sold through Xsolla, which acts as merchant of record: Xsolla processes the payment and handles payment details, taxes, receipts and refunds under its own privacy policy. This game never receives card or billing details. When you buy, the server passes Xsolla your account's random identifier and your IP address (for fraud checks and regional pricing), and keeps a purchase record: that identifier, the product, Xsolla's order number, amount, currency, country and status. Purchase records are kept for accounting and refunds, also after an account is deleted, when they stay linked only to the random identifier.
Cookies
Two strictly necessary cookies are used only when you sign in: a session cookie and a short-lived cookie (up to 10 minutes) that protects the sign-in flow.
Analytics and advertising measurement
On black-company.net we use Google Analytics 4 to understand which
parts of the site and game people use (for example pages viewed,
buttons pressed, game milestones such as starting a company, and
checkout steps) and to measure our advertising. It sets first-party
cookies (_ga, _ga_* and, if you accept ad
measurement, _gcl_*). In the European Economic Area, the
United Kingdom, Switzerland and South Korea, and wherever your location is unknown,
nothing from Google is loaded unless you press “Accept”. Elsewhere,
analytics runs with advertising storage off until you accept, and you
can press “Decline” to turn it off. You can change your choice at any
time with “Cookie settings” at the bottom of the page. Browsers that
send Global Privacy Control never get advertising storage. We never send
Google your name, email address, account identifier or save contents.
When a payment completes, our server tells Google Analytics the order
reference, product, amount and currency, linked to the analytics
identifier of the visit that started the checkout (only if analytics
was on). Google processes this data as described at policies.google.com/technologies/partner-sites. The apps and
the desktop version do not use Google Analytics.
Network data
The site is delivered through Cloudflare, which processes connection data such as IP addresses to deliver and protect traffic. The game server keeps an IP address in memory for about one minute to limit abusive sign-in requests; it does not write IP addresses to its logs.
Deleting your data
Open Settings → Account in the game and delete your profile. This permanently removes your profile and every session from the server immediately. Local saves can be removed from Settings → Save & Load or by clearing your browser or app data.
Children
The game is not directed at children under 13, and accounts are optional.
Changes
If this policy changes, the effective date above will change with it.
Optional global rankings
If you choose to publish a completed campaign, its starting settings and action history are sent to our server to recalculate the result. We do not retain that action history. We store your best verified result linked to your account: the in-game company and CEO names, industry, difficulty, starting conditions, score, operating profit, completion time and company summary. These game names and results are public on the rankings website; your account name and email are not included. Signing in alone does not publish a record. Deleting your account also deletes its ranking records.
Optional counts
Off by default. Only milestone, language, screen category and trial variant are counted. No account, company, save or full URL is sent. A random tab identifier deduplicates counts for up to 48 hours; aggregate counts are kept for 30 days. Turn this off to stop future events.
Account backups
Account backups are optional and manual. Choosing Upload sends the complete save, including in-game company/CEO names and action history, to this game server, linked to your account. Three slots retain up to three versions each. You can delete a slot; deleting the account also deletes all its cloud versions. Signing in does not upload automatically. Loading first preserves the current company locally. Native sign-in tokens are stored in iOS Keychain or encrypted with Android Keystore; they are not stored in WebView localStorage.