Your privacy in Little Soldiers

ccognitions · Updated October 7, 2026.

The two local modes work without an account. When the server is available, online modes require signing in, and matches with friends require an accepted friendship. The guided tutorial simulates an online match locally against a trainer and does not require an account. There are no advertisements or commercial tracking. When web purchases are enabled in the shop, Payphone processes one-time payments for diamond packs. Google Play integration for Android is still awaiting activation and testing.

Local progress

Fictional paper bills, appearances, decorations and local results are stored on this device (IndexedDB on the web). A cache speeds up future loading. Paper bills have no monetary value. Local economy and decorations are not synchronized between devices. Clearing site data removes this progress; private browsing, insufficient storage or changing domains may prevent its recovery. Language and tutorial preferences are also stored locally.

Account and multiplayer

The server stores a stable ID, public name, public friend code, deck, friend requests and friendships, online matches and victories. It stores password, session and recovery hashes, never these secrets as readable text. The client stores a session credential on this device to restore sign-in when you return. Sessions expire after at most 30 days and are revoked by signing out, password recovery or account deletion. Do not share your browser profile or device with people you do not trust.

The server receives placements and attacks to validate rules and coordinate devices. Active matches are held in memory; technical results are retained for operation and diagnostics. Other players see your name and the information necessary to play or manage friendships, never passwords, sessions or recovery codes. Friendships require acceptance.

Account balance and collection

When you sign in, your paper bill and diamond balances, acquired items, decorations and their positions are saved on the server, separately from guest progress. Redemption and reward records prevent duplicates. If Android purchases are enabled, Google will process payments: we do not receive card or bank account details. We verify receipts and retain their fingerprints for credits and refunds; pending receipts are encrypted until confirmation is complete.

Web purchases through Payphone

The final price is shown before opening Payphone. Diamonds are virtual goods for use in the game, cannot be transferred and cannot be redeemed for money. Payphone receives the payment information you enter in its form; the game does not receive or store your card details. We share the amount, currency, reference and an order identifier with Payphone. We retain orders, transaction identifiers and status, and associated deliveries to verify purchases, prevent duplicates and handle refunds. Pending purchase identifiers are stored on this device to recover interrupted purchases. Account deletion removes its link to retained orders. Confirmed refunds may remove the corresponding diamonds and leave an outstanding balance if they have been spent. If you paid but did not receive diamonds, contact support with the transaction identifier; do not pay again or send card details. Use the same contact for refund requests, which will be handled in accordance with applicable rights.

Optional Google sign-in

If “Continue with Google” is enabled, selecting it loads Google Identity Services and Google receives the technical information required for sign-in. We verify its response and link your Google identifier to your player ID. We do not receive your Google password or merge accounts by email. Google operates under its privacy policy. Google sign-in is not loaded to play locally.

Hosting

The web and server providers receive technical data, such as IP addresses and requests, to operate and protect the service. Public account connections use HTTPS. Passwords, private codes and Google credentials are not recorded in game logs. Signing in does not upload local progress.

Deletion and recovery

From your profile you can sign out or delete your account by confirming your password. Deletion removes your profile, friendships, deck, statistics, balance and collection and revokes sessions. Receipt fingerprints are retained without a player link to prevent reuse. If you created your account with Google, set a password using your private recovery code. Save that code when registering and do not share it. Technical results and operational logs are managed separately; contact support to request their review. Backups must be protected and rotated before publishing the online service.

To delete local progress, clear the site's data; on Android, use Settings → Apps → Little Soldiers → Storage → Clear data. This is irreversible and does not delete your online account.

Support

Contact marcelo.rui11@gmail.com for information, corrections, recovery or deletion. We receive your email and the information you share through Gmail and retain the conversation as needed to address it and meet applicable obligations. Do not send passwords or private codes. Audio: Kenney, CC0. Responsible party: ccognitions.