Black Range (playblackrange.com) is a browser-based 1v1 first-person shooter developed and operated by the Black Range team ("we", "us", "our"). This Privacy Policy explains what data we collect, why we collect it, and your rights regarding that data.
1. Data We Collect
We collect the minimum data necessary to operate the Game:
Session Identifier — a random, non-personally-identifiable ID generated in your browser to associate your gameplay within a single session. This is not linked to any account or personal identity.
Gameplay Statistics — wins, losses, shots fired, shots hit, accuracy, and round outcomes. These are tied to your session ID for leaderboard and matchmaking purposes.
Connection Metadata — your IP address is used for WebSocket (Colyseus) routing and connection management. It is held in server memory during your session and is not written to persistent storage. We also collect browser type (User-Agent) and round-trip latency measurements for lag compensation.
2. Browser APIs & Local Storage
The Game uses the following browser features:
Session Storage — we store your session ID and a reconnection token in your browser's sessionStorage. This data is automatically cleared when you close the browser tab. It is never sent to third parties.
Pointer Lock API — when you enter a match, the Game requests pointer lock to capture mouse movement for aiming. You can exit pointer lock at any time by pressing Escape.
WebSocket Connections — the Game maintains a persistent WebSocket connection to our Colyseus game server for real-time multiplayer communication. This carries only gameplay data (inputs, positions, hit events).
We do not use cookies, localStorage, or any browser-based tracking or fingerprinting technologies.
3. Data We Do NOT Collect
Names, email addresses, phone numbers, or any personally identifiable information.
Payment or credit card information.
Device fingerprints or hardware identifiers.
Location data beyond what is implicit in your IP address.
Cookies for tracking, analytics, or advertising.
4. How We Use Data
Operate real-time multiplayer matchmaking and game sessions via Colyseus.
Maintain leaderboard rankings and player statistics.
Perform server-side lag compensation for fair hit detection.
Detect and prevent cheating, exploits, or abuse.
Debug and improve game performance.
5. Data Storage & Retention
All gameplay statistics and session data are stored in server memory (RAM) only. Data is not written to any database or file system and is lost when the server restarts. We may introduce persistent storage in the future to support features like player profiles or season statistics; this policy will be updated accordingly before any such change.
6. Wallet & Blockchain Data
The Game plans to integrate the $XHAIR token on the Solana blockchain. When this feature launches:
Wallet connections will be handled by third-party providers (e.g., Phantom, Solflare). We never request, store, or have access to your private keys or seed phrases.
Your public wallet address may be associated with your in-game session for the purpose of processing token stakes and payouts.
All blockchain transactions are recorded on the public Solana ledger and are outside our control once submitted.
We do not store your wallet address on our servers beyond the duration of your active session.
7. Third-Party Services
The Game currently does not use third-party analytics, advertising, or tracking services. When blockchain features are introduced, the following third-party services may be involved:
Solana wallet providers (Phantom, Solflare, etc.) — governed by their own privacy policies.
Solana RPC nodes — for submitting and reading on-chain transactions.
We will update this section when additional third-party integrations are added.
8. Your Rights (GDPR / CCPA)
Since we do not collect personally identifiable information and all data is stored in volatile memory, there is no persistent personal data to access, modify, or delete. However, if you believe we hold any data associated with you:
Right of Access — you may request details of any data we hold.
Right to Deletion — you may request deletion of your data. Since session data is cleared on server restart or tab close, this is effectively automatic.
Right to Object — you may object to specific data processing activities.
California Residents (CCPA) — you have the right to know what personal information is collected and to request its deletion. We do not sell personal information.
To exercise any of these rights, contact us using the information below.
9. Children's Privacy
The Game is not intended for children under 13 years of age. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has provided us with data, please contact us and we will take steps to remove it.
10. Changes to This Policy
We may update this Privacy Policy when we add new features (such as blockchain integration) or change our data practices. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.
11. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, you can reach us at:
This document does not constitute legal advice. We recommend consulting a qualified attorney for compliance with specific jurisdictions. If you require a professionally reviewed version for regulatory purposes, please contact us.