Cookie & Ads Policy

Last updated: August 2026

1. Overview

WarWing uses local storage (browser-side key-value storage) and loads third-party scripts when you play on CrazyGames. This policy explains what data is stored, why, and how you can control it. We do not use traditional HTTP cookies. All persistent data is kept in your browser's localStorage and can be cleared by you at any time.

2. Strictly Necessary Storage

These items are required for the game to function. They are stored in your browser's local storage and are loaded automatically on every visit.

Key	Purpose	Type	Retention
`ww_name`	Remembers your pilot callsign between sessions.	First-party, local storage	Until cleared
`ww_color`	Remembers your chosen plane colour.	First-party, local storage	Until cleared
`ww_side`	Remembers your preferred team (Allies / Axis / auto).	First-party, local storage	Until cleared
`ww_binds`	Remembers your custom keyboard controls.	First-party, local storage	Until cleared
`ww_layout`	Remembers your keyboard layout preference (QWERTY / AZERTY).	First-party, local storage	Until cleared
`ww_vol_music`	Remembers your music volume setting.	First-party, local storage	Until cleared
`ww_vol_sfx`	Remembers your sound-effects volume setting.	First-party, local storage	Until cleared
`ww_tutorial_done`	Records that you have completed the first-flight tutorial.	First-party, local storage	Until cleared
`ww_token`	Session token for your optional WarWing account (login).	First-party, local storage	Until logout or cleared
`ww_skin`, `ww_decal`	The paint scheme and nose art you have chosen for your aircraft.	First-party, local storage	Until cleared
`ww_class`, `ww_mode`	The aircraft type and the game mode you last picked, so the menu comes back the way you left it.	First-party, local storage	Until cleared
`ww_lang`	Your chosen interface language, when you override the automatic one.	First-party, local storage	Until cleared
`ww_record`	Your service record while playing without an account: victories and defeats, kills and deaths, merit and rank, whether you have finished flight training, the date of your last daily bonus, and your unspent War Scrap balance. This exists so that playing as a guest still counts for something. It holds no name, no email address and no identifier of any kind - it is a tally, kept in your own browser.	First-party, local storage	Until cleared

While you play as a guest, none of the above is sent to us. It stays in your browser until you clear it, or until you choose to create an account or sign in - at which point your record and your unspent War Scrap are transferred onto that account so that they are not lost, and the local balance is cleared.

3. Consent-Dependent Storage

The following items are only stored after you choose ACCEPT ALL in the cookie banner. If you select ESSENTIAL ONLY, they are never written.

Key	Purpose	Type	Retention
`ww_consent`	Records your consent choice (`essential` or `all`) and timestamp.	First-party, local storage	Until cleared
`ww_anon`	A random anonymous ID used to log your consent choice server-side. This ID is not linked to your identity. Under the latest GDPR rules (Article 7), we are required to keep a record of consent - including when and how it was given - to demonstrate that valid consent was obtained. The anonymous ID allows us to maintain this record without collecting additional personal data.	First-party, local storage	Until cleared

4. Advertising

WarWing shows advertisements on the menu and death screen - never during active gameplay. There are two scenarios:

4.1 On www.warwing.io (self-hosted)

We display advertisements served by Google AdSense in the side rails of the menu and death screen - never during active gameplay. Google AdSense uses cookies and device identifiers to measure ad performance and, with your consent, deliver personalised ads. With your consent (ACCEPT ALL), Google and its partners may use cookies to show you ads based on your activity and interests. Without consent (ESSENTIAL ONLY), you still see ads, but they will not be personalised and Google's ad-personalization cookies will not be used.

We use Google Consent Mode v2 to communicate your consent choices to Google. By default, all ad storage and personalization signals are set to denied. When you choose ACCEPT ALL, the following signals are set to granted:

ad_storage - allows cookies for advertising.
ad_user_data - allows sending user data to Google for ads.
ad_personalization - allows personalized ad delivery.
analytics_storage - allows analytics cookies.

For visitors in the European Economic Area (EEA), United Kingdom, and Switzerland, Google's certified Consent Management Platform (CMP) may also display a consent dialog that complies with the IAB Transparency and Consent Framework (TCF) v2. This overlay appears automatically and handles vendor-level consent for Google and its ad technology partners.

4.2 On CrazyGames

When you play WarWing on CrazyGames, the CrazyGames platform serves its own ads and manages its own consent flow. Our cookie banner and Google AdSense are not loaded on CrazyGames. CrazyGames' ad and data practices are governed by their own Privacy Policy.

4.3 Cloud saves on CrazyGames

On CrazyGames only, WarWing uses the platform's Data module to mirror the same settings and service record described in section 2 - your pilot name, paint, controls, language, and your guest record including your unspent War Scrap - so that your progress follows you between devices. Nothing extra is collected to do this: it is the identical set of values that would otherwise sit only in your browser.

When you are signed in to CrazyGames these values are stored against your CrazyGames profile; when you are not, they remain local to the browser. We never receive your CrazyGames password, and we store no CrazyGames identifier of our own beyond the username needed to carry your record across devices. Clearing your data on the platform, or using the in-game reset, removes the mirrored copy as well.

5. Third-Party Services

Provider	Purpose	When loaded	More info
CrazyGames SDK v3	Game lifecycle events, ads, invites, user identity on their platform.	Always loaded from `sdk.crazygames.com`. Only active when embedded on CrazyGames or localhost. Disabled on all other domains.	SDK docs
Google AdSense	Serve and measure menu-screen advertisements on www.warwing.io. Uses Consent Mode v2 signals.	Only on www.warwing.io (not on CrazyGames). Loaded after SDK init confirms not on CrazyGames. Personalized ads only after consent.	Google ad technologies

6. Server-Side Data

When you make a consent choice, we log the following on our server:

Your anonymous browser ID (ww_anon) - a random string, not linked to your identity. Required under GDPR Article 7 to maintain a demonstrable record of consent.
Your WarWing account ID - only if you are logged in at the time.
Your consent choice (essential or all).
A timestamp.

We deliberately do not log your IP address (data minimisation). This log is kept to demonstrate compliance with GDPR consent-record requirements.

If you create a WarWing account, we store the username, email, and an opt-in flag you provide. Passwords are hashed. Account data is retained until you request deletion.

6.1 Anonymous audience measurement

On www.warwing.io (not on CrazyGames, which does its own analytics) we keep a simple, anonymous count of how the game is used. For each visit we record only:

when the visit started and how long it lasted;
whether the visitor was logged in.

To measure a visit's length we use a temporary id that exists only in your browser's memory for the life of the tab and is discarded when you close it. It is never stored on your device (no cookie, no localStorage) and is never sent to us again on a later visit. We store no IP address, and the stored rows carry no cookie, device id or account id - so a visit cannot be traced back to you or to any other visit.

Because this data is anonymous and aggregate and nothing is placed on or read from your device, it is not personal data and is not a “cookie” - under GDPR (Recital 26) and the ePrivacy audience-measurement provisions it does not require your consent. It runs whatever your ad-consent choice is, and is described here purely for transparency. Unique-visitor figures come only from registered accounts, never from tracking guests.

7. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and the ePrivacy Directive, you have the following rights:

Right to be informed - this policy fulfils that obligation.
Right of access - you may view all personal data we hold about you.
Right to rectification - you may correct an inaccurate username. For security and traceability reasons, your email address cannot be changed once your account is created; if your email is no longer accessible, you may delete your account and create a new one.
Right to erasure - you may permanently delete your account and all associated data.
Right to withdraw consent - you can withdraw your ad-consent at any time via the in-game Settings tab (Privacy > Manage Options) or by clearing your browser's local storage for this site.
Right to object - you may object to processing based on legitimate interests.
Right to data portability - you may download your data in a machine-readable format.

You do not need to email us to exercise these rights. Use the self-service forms below on this page. You will need your username, email, and password (the same ones used at account creation) to authenticate each action. If you have lost your password, unfortunately it cannot be recovered (by design).

8. Self-Service Account Management

Use the forms below to view, download, edit, or delete your account data. Each action requires your username, email, and password for verification.

What would you like to do?

9. Contact Form

If you need to contact us about a matter that cannot be handled through the self-service forms above, you may submit a request using the form below. Requests are saved on our server as tickets.

Requirements:

You must have a WarWing account to submit a request.
You must provide your username, email, and password every time you submit. These must match your account credentials.
You can submit one request every 7 days. If you have submitted a request in the last 7 days, you must wait before submitting another.
Spam or abuse of the contact form will result in a permanent ban and may be reported to legal authorities.
You must acknowledge that you are willingly sending this information and that you should not include any sensitive or important personal information in the message.

Submit a Request

Username Email Password Subject Message

By checking the box below, I acknowledge that I am willingly submitting this information, and I understand that I should not include any sensitive, confidential, or important personal information in this form. I understand that spam or abuse of this form will result in a permanent ban and may be reported to legal authorities.

I acknowledge and agree to the above

10. How to Clear Your Browser Data

All client-side data is stored in your browser's local storage. You can clear it at any time:

Chrome / Edge: Settings → Privacy and security → Site settings → warwing.io → Clear data.
Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data → warwing.io → Remove.
Safari: Preferences → Privacy → Manage Website Data → warwing.io → Remove.
Any browser: Open the developer console (F12) and run localStorage.clear() on this site.

11. Children's Privacy

WarWing does not knowingly collect personal data from children under 16. Account creation requires an explicit opt-in and a generated password. If a child has created an account without parental consent, the account can be deleted at any time using the self-service Delete Account form in Section 8 above.

12. Changes to This Policy

We may update this policy as our ad integration evolves or as legal requirements change. The "last updated" date at the top of this page reflects the most recent revision. Continued use of WarWing after a change constitutes acceptance of the updated policy.