Privacy
Innocent Chicks and your data, in plain words
Innocent Chicks is made by Scourgeyworks. Scourgeyworks doesn't sell your data, shows no ads and uses no trackers or analytics in the game.
This policy covers:
- The game, played in your browser at play.innocentchicks.com, and any downloadable version of it.
- This website, www.innocentchicks.com, including the shop.
Scourgeyworks is the data controller for both, based in the United Kingdom, and registered with the UK Information Commissioner's Office. Questions about your data go to support@scourgeyworks.com.
What the game collects
You can play as a guest or with an account. A guest gets a random name such as Guest#ABCD, and nothing about the guest is saved once the game ends.
| What | Details | When |
|---|---|---|
| Account | Username, email address, whether the email is verified, password (stored only as a secure hash), when the account was created and last used | You create an account |
| Sign-in with Google, Discord or Steam | Your ID with that service. Google and Discord also share your email address; Steam doesn't | You choose to sign in that way |
| Profile and progress | Chosen avatar, avatar border and card deck, items you own, coins and Golden Eggs | As you play |
| Match records | Who played in each match, who won, and when it started and ended | Each finished match |
| Purchases | For Golden Eggs bought in the game: the Stripe payment reference, which pack, the amount and currency, when it was paid, and whether it was later refunded or charged back. For older shop orders: the order number used to redeem them and how many eggs were added. Decks bought with Golden Eggs, and when | You buy Golden Eggs or a deck, or redeem a shop order |
| Chat and voice | Chat messages and voice go to the other players in your game. They aren't stored or recorded | You chat or talk |
| Technical data | Your IP address, and server logs that can include your username, player ID and email address | Every connection |
The game saves your settings and sign-in on your device. It doesn't ask for your real name, address, phone number or location.
Why this data is used (the legal basis)
Each use rests on a basis under UK and EU GDPR Article 6:
| Use | Legal basis |
|---|---|
| Running your account, matches, chat and voice; keeping your items, coins and Golden Eggs; sending verification and password-reset emails | Performing the contract with you (Article 6(1)(b)) |
| Selling Golden Eggs, redeeming shop orders, handling refunds and chargebacks, and keeping purchase records | Contract (Article 6(1)(b)) and legal obligations such as tax records (Article 6(1)(c)) |
| Server logs, preventing cheating and abuse, and keeping the game and website secure | Legitimate interests in a safe, fair and working game (Article 6(1)(f)) |
| Settings and sign-in saved on your device | Strictly necessary storage under PECR and the ePrivacy rules, so no consent banner is needed |
The only emails sent are account verification and password reset; there's no marketing mail. No decisions with legal or similarly significant effects are made about you automatically.
Voice chat
Voice chat connects you directly to the other players in your lobby, so they can see your IP address. It joins automatically when you enter a lobby, and your browser or device will ask before using your microphone.
- You can mute yourself at any time, or turn on "mute on join" in settings.
- Even while muted, you stay connected to the other players, so your IP address is still visible to them.
- If a direct connection isn't possible, voice goes through Scourgeyworks' relay server (turn.innocentchicks.com) instead. The relay passes the sound on and doesn't record it.
- Voice is never recorded or stored by Scourgeyworks.
Who sees it, and who helps
Other players in your game or lobby see your username, avatar, avatar border, chat messages and voice. Through voice chat they can also see your IP address.
Service providers store or handle data only to run the game and the shop:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Stores accounts, progress and match records | EU (Ireland) |
| Hetzner | Runs the game server and voice relay | Germany |
| Scaleway | Hosts the web game's files | France |
| Cloudflare | Hosts www.innocentchicks.com, delivers the web game and protects both sites | Worldwide network |
| Resend | Sends verification and password-reset emails | United States |
| Stripe | Runs the shop checkout and takes payments | United States / Ireland |
| SureCart | Ran the shop before Stripe; checks older order numbers when they are redeemed in the game | United States |
| Google, Discord, Valve (Steam) | Confirm who you are, only if you sign in with them | United States |
Each provider works under a data processing agreement, apart from Google, Discord and Valve, which run their own sign-in services under their own privacy policies. Scourgeyworks never sells your data or shares it for advertising.
Transfers outside the UK and EU
The game's data is stored in the EU, but some providers above are in the United States or work worldwide. Those transfers are protected by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or by the EU–US Data Privacy Framework and its UK Extension where the provider is certified.
How long it is kept
| Data | Kept for |
|---|---|
| Server logs | 30 days, then deleted |
| A game in progress | Up to 2 hours after the room was last active |
| Guest players | Nothing is kept once the game ends |
| Verification and password-reset links | Expire after 24 hours and 1 hour |
| Account, profile, items and progress | Until you delete your account |
| Golden Egg purchases and shop redemptions | Linked to your account until you delete it; the payment record itself is kept, no longer linked to you, as long as tax and accounting law requires |
| Match records | Kept for game statistics; once your account is deleted they no longer link to you |
| Shop orders and payment records | As long as tax and accounting law requires |
| Settings and sign-in on your device | Until you sign out or clear them |
This website, the shop, and cookies
The game sets no cookies. In your browser it saves only what it needs to work:
- your sign-in, so you stay logged in
- your settings, such as volume, language and controls
- downloaded language fonts and the game's own files, so it loads faster next time
- whether you dismissed the "add to home screen" tip
On www.innocentchicks.com:
- No accounts, no statistics: the website is a set of plain pages. It has no logins, no visit statistics and no tracking.
- Shop and Golden Eggs: checkout is run by Stripe on its own payment page, both for the printed deck and for Golden Eggs bought in the game. Stripe tells the game which account paid so the eggs can be added. You give your name, email, billing or delivery address and payment details there, and the card itself is handled by Stripe, never seen by Scourgeyworks. Stripe uses its own cookies on that page to process the payment and prevent fraud.
- Discord: the website links to the Innocent Chicks Discord server. The server is run by Discord, and its own privacy policy applies when you use it.
- Cookies: the website itself sets no cookies.
- Cloudflare hosts and protects both sites and may set a security cookie to tell people from bots.
There's no advertising on either site, and neither the game nor the website has analytics or tracking.
Your rights
To use any of these, email support@scourgeyworks.com from your account's email address, or give your username. Scourgeyworks replies within one month.
- Access and portability: get a copy of your data in a format you can reuse.
- Correction: fix anything that's wrong.
- Deletion: delete your account yourself in the game, under Settings → Delete account, or ask by email. It removes your account, items, coins, Golden Eggs and sign-in links straight away.
- Restriction: ask for your data to be paused rather than used.
- Objection: object to uses based on legitimate interests, such as security logs.
If you're unhappy with the answer, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.
Children
Innocent Chicks isn't meant for children under 13, and signing in with Steam requires you to be at least 13. If you believe a child under 13 has an account, email support@scourgeyworks.com and it will be deleted.
Keeping it safe
Everything between the game and its servers is encrypted in transit (HTTPS and secure WebSockets). Passwords are stored only as bcrypt hashes, never in readable form. The servers sit behind firewalls, and only Scourgeyworks can reach them.
Who is responsible, and contact
Scourgeyworks is the controller for Innocent Chicks, based in the United Kingdom, and registered with the Information Commissioner's Office. Contact: support@scourgeyworks.com. Our full contact details are available on request at that address.
If this policy changes in a way that matters, the change will be shown in the game or on this page before it applies.
Last updated 17 October 2026.