Privacy and cookie policy

Last updated: 27 October 2026

This policy describes how Fieldcraft Games, the developer and publisher of Field of Command, handles personal data across fieldofcommand.com, the game, its Steam demo and Playtest, the newsletter and related game services. The game is played on Steam, and Steam is how the game knows who you are: there are no game accounts.

1. Controller

Fieldcraft Games is the data controller. For any data-protection query: [email protected].

2. Legal basis

UK data protection law asks us to have a legal basis for each use of personal data. These are ours. Cookies, browser storage and marketing email also follow the Privacy and Electronic Communications Regulations (PECR).

• Contract: to run Multiplayer when you choose to play it: lobbies, matches and putting you back into a match after a disconnection. It uses your Steam ID, your Steam name and your match records.
• Consent: for in-game telemetry, which stays off until you turn it on; for the newsletter; for optional website analytics; and for the screenshot, save and logs you choose to attach to a bug report. You can withdraw consent at any time: in the game's Settings, with the unsubscribe link in any email, with Cookie settings in the site footer, or by emailing us. Withdrawing does not undo what was done before.
• Legitimate interests: to keep our services secure and fair. That covers rate limiting by IP address, the check that a bug report comes from a person, and preventing abuse of online play. It also covers counting how many visitors decline analytics, counting in total how often the links in our emails are followed, and keeping an unsubscribed address marked so that we do not email it again. You can object to any of these by emailing us.
• Legal obligation: to answer data protection requests and keep a record that we did.

3. What we collect

Playing the game

• Steam identifies you. Your Campaign and Skirmish progress is saved on your computer and synced between your computers by Steam Cloud; we do not hold it.
• If you play Multiplayer we receive your Steam ID and Steam name, checked with Steam. On our servers we keep a player record (your Steam ID and Steam name) and your match records (map, side, outcome, duration, times).
• Before the game moved to Steam it had its own accounts. We still hold the data from those accounts (email address, saved campaigns and careers). It is no longer used and will be deleted.

In-game telemetry

Telemetry is off unless you turn it on. When you first start the game we ask once, and the switch starts off. You can change it at any time in Settings. While it is off, nothing is recorded or sent, and turning it off discards anything not yet sent. When it is on, the game sends us:

• A random session ID and a random player ID created on your computer. Neither is your Steam ID or your name.
• The game version, operating system and browser engine, screen size, graphics card and display settings.
• What happens in play: battles started and finished, the map, faction and mode, the formations and support you use, multiplayer lobby steps, how long things took, frame rate and loading times, and errors the game hits.

We use it only to find bugs and make the game run better. We never sell it or use it for advertising.

Newsletter

• Your email address, only if you sign up with a form on this website. Signing up puts you on the list at once, and we send one welcome email. If you enter an address that is already on the list, we send it one email saying so, at most once an hour. We record when you signed up and which wording you agreed to.
• Our emails load their images from fieldofcommand.com, which receives the normal connection details when your mail app shows them. We do not track whether you open an email. Some links in a dispatch pass through our own server so that we can count, in total, how many times each link was followed. That count is not tied to you or to your address.

Site & infrastructure

• IP addresses, held briefly for rate limiting (up to one hour).
• Google Analytics 4, only after you accept optional analytics. It records page views and clicks on Steam links and external links, including link labels and destinations. Google says it uses IP addresses temporarily for routing and coarse location, then discards them before logging.
• Microsoft Clarity, only after you accept optional analytics. It records page structure and interactions such as clicks and scrolling. Input fields are masked by default; other page text follows the masking mode configured for the project.
• If you accept optional analytics, we keep a short label for the site that sent you here (for example a search engine or a campaign tag) in session storage for the current tab. It is not used as an account identifier.
• If you decline, we record a rejection event to count these choices. It contains a SHA-256 hash of the request IP address, your browser's user agent, and the time, and is kept for 90 days. No analytics cookies are set.

Bug reports

• The category, title and description you enter.
• Game version, build target, browser or desktop platform, GPU, viewport, language, timezone and the game screen or battle context.
• Recent technical errors and a short, redacted log. Tokens, secret query values and email-like text are removed before upload.
• Client-reported player, career, posting and session identifiers when available. These are diagnostic hints only.
• An optional screenshot and an optional current campaign save or single-player battle snapshot, only when you leave those boxes selected and confirm the report.
• Sending a bug report may pass a Cloudflare Turnstile check, which confirms the report comes from a person. Cloudflare receives your IP address and browser details for that check.

Technical logs and saves are stored privately. Screenshot links use a long random address, but anyone who receives that address can view the screenshot until it is deleted.

We do not collect real names, addresses, phone numbers, or payment information.

4. How we use it

• Run Multiplayer lobbies and matches, reconnect you after a disconnection, and prevent abuse of online play.
• Send the welcome email and the newsletter only if you have signed up. Every email carries a one-click unsubscribe link.
• Use telemetry, when you have turned it on, and aggregate analytics to fix bugs and improve the game and site.
• Investigate, reproduce and fix problems that players choose to report.

We do not sell, rent, or trade personal data.

5. Retention

• Multiplayer records (your player record and match records): kept for 3 years after your last match, then deleted or anonymised.
• Earlier game accounts: no longer used, and to be deleted.
• In-game telemetry: 90 days.
• Newsletter: your email address is kept while you are subscribed, with the consent record that shows when you agreed. After you unsubscribe we keep your address, marked unsubscribed, so that we do not email you again. Ask us and we delete it.
• IP addresses: up to one hour.
• Google Analytics: event-level data retention follows the GA4 property setting, which allows 2 or 14 months.
• Microsoft Clarity: playback data is retained for 30 days; click and heatmap data for up to 9 months. Labeled or favorited sessions can remain for up to 9 months.
• Cookie rejection events: 90 days.
• Bug-report screenshots, logs and saves: 90 days.

6. Processors

• Cloudflare: hosts the site, the game backend and in-game telemetry (Pages, Workers, D1) and sends newsletter email. Policy
• Google: Google Analytics 4, only after you accept optional analytics. Policy
• Microsoft: Clarity session analysis on the marketing site, loaded only after you accept optional analytics. Policy
• GitHub: stores the readable bug-report summary in our private project repository. Full logs and saves are not copied there. Policy

These processors may transfer data to the US under UK ICO-approved Standard Contractual Clauses. Steam is run by Valve, which identifies you, hosts Steam Cloud saves and runs Steam lobbies and friends under its own privacy policy: Policy.

7. Cookies and browser storage

Google Analytics and Microsoft Clarity load only after you accept optional analytics. Declining changes nothing else about the site. You can change your choice at any time using Cookie settings in the site footer. Rejecting stops further analytics and removes first-party analytics cookies accessible to this site.

8. Your rights

Under UK GDPR you can request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You can also withdraw any consent you have given.

To exercise a right: email [email protected]. We respond within 30 days.

For a bug report: include the report number shown after submission so we can locate its summary and diagnostic attachments.

To unsubscribe from the newsletter: click the unsubscribe link in any email.

To stop telemetry: turn it off in Settings in the game.

9. Security

Traffic is encrypted with TLS. Rate limiting, Cloudflare DDoS protection, and a web application firewall guard public endpoints. We do not store payment data.

10. Automated decisions

We do not carry out automated decision-making with legal or similarly significant effects. Rate limiting is the only automated control and does not fall within that definition.

11. Children

The game and site are not directed at children under 13. If you believe data from a child has been collected, contact us for deletion.

12. Changes

When this policy changes we update the date above. Continued use after a change indicates acceptance.

13. Complaints

You can lodge a complaint with the UK Information Commissioner's Office:

ico.org.uk/make-a-complaint · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

14. Contact

[email protected]

We aim to respond to all queries within 30 days.