Privacy Policy
Last updated: 23 September 2026. Tinpot Wars ("we") is a personal project operated by an individual, not a company. It is a sister game to AI Slop Wars, run by the same person. Contact: privacy@aislopwars.com.
One account, two games
Tinpot Wars and AI Slop Wars share one sign-in system and one database. If you have an account on either, you have it on both. Deleting your account (below) deletes it for both games.
What we collect
- Account details from the sign-in provider you choose (Google or GitHub): your name, email address, profile picture and which provider you used.
- What you build: the tank and driver descriptions you type, the tanks and driver programs the AI builds from them, their names and colours, which AI model built each one, and which tank and driver you have paired up.
- A log of every drafting attempt: the exact text you typed, the model, whether it worked, the error if it did not, how many tokens it used and how long it took. We keep this to prevent abuse, to stop the same request being paid for twice, and to measure how well each model plays.
- Daily usage counts: how many drafts you have made today, to enforce the daily limit.
- Technical data: standard request logs kept by our hosting provider (IP address, browser, timestamps).
The public model leaderboard is built from matches between tanks we drafted ourselves. It records AI models, not people, and matches involving your own tank are not recorded on it.
Tinpot Wars does not ask for a marketing preference, and it does not send analytics events.
The AI that builds your tank
When you draft, the description you type is sent through OpenRouter to the provider of the model you pick (for example Anthropic, Google, Mistral, DeepSeek, Meta's model hosts or OpenAI). Those providers handle it under their own privacy policies. We pay for these requests; you do not connect your own AI or key.
How we use it
We may use the information we collect for any lawful purpose, including but not limited to:
- Running your account, your garage and your matches.
- Showing your tanks, their names and the model that built them to anyone who opens a match they are in.
- Analysing usage, measuring performance, comparing AI models, and developing new features, products and services.
- Preventing abuse, such as overuse of drafting.
- Creating aggregated, anonymised or de-identified data. Once information is in that form it is no longer personal information, and we may use, publish, license or sell it for any purpose without restriction and without further notice to you.
Sharing and disclosure
We may disclose your information to service providers and subprocessors who work on our behalf, and to any party where we believe disclosure is required by law, necessary to enforce our terms, or appropriate to protect our rights, safety or property.
We may also disclose or transfer your information, including as part of any merger, acquisition, financing, reorganisation, bankruptcy or sale of assets, in which case it would be subject to the acquirer's practices.
Where permitted by applicable law and by the terms of the sign-in provider you used, we may share or sell personal information as those terms are defined under that law. See "Retention and your choices" below for how to opt out. We do not sell or transfer data obtained through Google Sign-In except as permitted by the Google API Services User Data Policy, including its Limited Use requirements.
Who processes it
- Supabase — authentication and database, hosted on AWS in the United States (us-east-1).
- Cloudflare — hosting and request logs.
- OpenRouter and the provider of the model you pick — only the descriptions you draft with.
We do not send email from Tinpot Wars. If that changes we will update this page first.
International transfers
Our infrastructure is in the United States. If you use the site from outside the US, your data is transferred to and processed there.
Retention and your choices
We keep your information for as long as we consider it necessary for the purposes described in this policy, or as required by law. You can delete your account at any time with "Delete my account" in the garage. That removes your account, your tanks, your drivers and your drafting log from the live database, and it deletes your AI Slop Wars account and data too, because they are the same account. It does not reach provider backups, server logs, or any aggregated or de-identified data already derived from your activity, which we may retain and continue to use indefinitely.
To access or correct your data, email privacy@aislopwars.com.
If you are in the EU or UK (GDPR / UK GDPR), you have the right to access, correct, delete, restrict or object to processing of your data, and to receive it in a portable form. Our legal basis is legitimate interest or contractual necessity for running the game. You may complain to your local data protection authority.
If you are in California (CCPA / CPRA), you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of your personal information. To opt out, email privacy@aislopwars.com with the subject "Do Not Sell or Share". We honour Global Privacy Control signals where we are required to. We will not discriminate against you for exercising these rights.
Security
We take reasonable steps to protect your information, but no method of transmission or storage is completely secure. We cannot guarantee the security of your information and you provide it at your own risk.
Children
Tinpot Wars is not intended for anyone under 16. We do not knowingly collect their data. If you believe a child under 16 has an account, email us and we will delete it.
Changes
We may change this policy at any time and at our sole discretion. Changes take effect when posted here, and we will change the date above. Continuing to use Tinpot Wars after a change means you accept the updated policy. Where applicable law requires notice or fresh consent for a particular change, we will obtain it.