Privacy Policy
Draft — retention periods await sign-off
Effective 30 August 2026 · Last updated 30 August 2026
This policy covers the game Monouchi: The Field, on every platform it ships on. It does not cover this website — how monouchi.com itself handles data is described separately in the website privacy notice.
Who we are
Monouchi: The Field is published by Banana Fana LLC, a limited liability company organised in the United States. Banana Fana LLC is the data controller for everything this policy describes.
For anything in this policy — questions, requests, complaints — write to hello@monouchi.com. Every message is read.
The short version
The game collects nothing unless you join the optional leaderboard. If you join, we receive the name you typed, a random identifier created on your device, and your run results — and our server briefly keeps a hashed form of your network address to stop flooding. That is the whole list. There are no ads, no analytics, no accounts, and no third-party code of any kind in the game.
What we collect, and when
Until you join the leaderboard: nothing
The leaderboard is the game's only network feature, and it is opt-in. After your first finished run the game asks once whether you want to join, with a name of your choosing. Decline, and it never asks again, and nothing about any run ever leaves your device. The game is fully playable — every mode, every difficulty — without joining, and you lose nothing by declining.
If you join: three things, sent together
When you choose a display name and a run ends, the game submits the run to our leaderboard server. Each submission contains exactly:
| Sent | What it is | Why |
|---|---|---|
| Display name | The name you typed — 2 to 16 characters, passed through an automated filter. | Shown beside your scores, publicly, to everyone. |
| Client id | A random identifier generated on your device the first time the game needs one. | Keeps the board to one row per player, and lets the game mark your own row. |
| Run result | Kills, wave reached, time survived, difficulty, and a short build identifier. | The score itself, and telling a scoring change from a cheat. |
The display name is published. Anyone who opens the leaderboard, on any platform, can see it. Do not use your real name or anything that identifies you. The name is user content under our Terms of Use and may be filtered, hidden, or removed.
The client id is not a device identifier. It is a random value created by the game itself, stored only in the game's local storage. It is not derived from your device, its hardware, or any advertising identifier; it is not the advertising ID and is never used for advertising; and deleting the app (or, on the web, clearing site data) destroys it — a reinstall produces a new one, unconnected to the old.
Together, the name and client id are pseudonymous, not anonymous: they identify no person by themselves, but they deliberately link your runs to one board entry over time — that is what makes the board one row per player. We never attempt to connect them to a real identity.
If a submission cannot be sent — no network, server unreachable — the game keeps up to ten finished runs on your device and sends them when it can. Nothing is queued, and nothing is sent, for a player who has not joined.
Reading the board
Opening the leaderboard requests the current standings from our server. Like any network request, the server sees your IP address for the duration of the request; the request also carries the client id stored by the game, if one exists, so that your own row can be marked in the reply. The server does not store anything from a board request.
On our server: a hashed network address
When — and only when — a run is submitted, our server computes a salted SHA-256 hash of the submitting IP address and stores that hash with the run. It exists for one purpose: rate limiting. The server accepts at most 10 submissions per client id and 40 per hashed address in any 60-second window, so nobody can flood the board. The raw IP address is never stored, the hash cannot practically be reversed, and it is never returned to anyone — including you.
Everything travels over HTTPS. The server is written and operated by us and runs on Cloudflare infrastructure — see who we share it with.
What we do not collect
Everything, apart from the section above.
- No third-party analytics and no third-party code of any kind — no SDK from anyone runs inside the game.
- No advertising and no tracking. The game shows no ads, reads no advertising identifier, and links nothing you do to any other company's data.
- No accounts and no login. There is nothing to sign up for and nothing to sign in with.
- No location, no contacts, no photos, no microphone, no camera — the game never asks for, reads, or requests permission for any of them.
- No purchases — the game contains nothing to buy.
- No crash reporting, no push notifications, no social login.
- No device profile. No device model, operating system version, locale, or screen size is collected.
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it for advertising of any kind.
Stored on your device
The game keeps its settings in local storage on your device: difficulty, camera zoom, the battlefield-clarity setting, the audio mute, and the two volume levels. These never leave the device.
The leaderboard keeps four things there too: your chosen name, the client id, the remembered refusal if you declined, and the queue of up to ten finished runs awaiting a network. Of these, only the name, the client id, and the queued runs are ever transmitted — as described above, and only if you joined. The refusal never leaves the device.
Deleting the app removes all of it. On the web, clearing the browser's site data does the same.
Who we share it with
Nobody. No third party receives your data from us — not for analytics, not for advertising, not for anything.
One company processes data on our behalf: Cloudflare, Inc. hosts the leaderboard server, so every leaderboard request passes through Cloudflare's infrastructure and the data described above is stored on it. Cloudflare acts strictly as our processor, on our instructions, under an agreement that requires it to protect your data to at least the standard this policy describes. Cloudflare is a hosting provider here, not a recipient for its own purposes.
Publishing your chosen name and scores on the leaderboard is publication to other players at your request — it is not a transfer of your data to any third party.
Consent, and how to withdraw it
Everything the leaderboard collects, it collects because you chose to join — consent is the legal basis for all of it (where the GDPR or UK GDPR applies, Article 6(1)(a)). Nothing is pre-ticked, and the game works identically if you never join.
Withdrawing is as easy as joining: open Settings and choose Leave the board. From that moment nothing further is sent. Withdrawing does not make the earlier submissions unlawful — it stops everything from then on. Entries already on the board stay until you ask us to delete them, which you can do at any time.
How long we keep it, and how to delete it
Leaderboard entries — your name, client id, and run results — are kept for as long as the board is live, because the board is a standing record of scores. Any entry is removed on request, at any time: see the data deletion page.
Hashed network addresses are kept for at most 30 days and then deleted. They exist only to enforce a 60-second rate-limit window, so even that period is generous.
Entries hidden after player reports are withheld from the board but retained, so a wrong report can be reversed. A hidden entry is still deleted on request like any other.
Data stored on your own device stays until you delete the app or clear site data — it is yours, and we cannot reach it.
To have your entries deleted, email hello@monouchi.com or follow the data deletion page. We act on verified requests within one month, and usually much sooner. Deleting an entry removes the whole stored record, including its hashed address.
Children
Monouchi: The Field is a game of realistic sword violence. It is not directed to children and is not intended for anyone under the age shown in its store rating. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe a child has submitted a name to the leaderboard, email hello@monouchi.com and we will delete the entry promptly.
Your rights, wherever you are
Whatever your jurisdiction says, we honour these on request, from anyone: tell you what we hold about you, correct it, delete it, or give you a copy. One address serves all of it: hello@monouchi.com.
European Economic Area
If the GDPR applies to you, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection, and the right to withdraw consent at any time without affecting the lawfulness of what came before. Providing leaderboard data is entirely optional; declining has no consequence — the game is identical without it. We make no automated decisions about you. You also have the right to lodge a complaint with your supervisory authority.
When you join the board you provide your information directly to us in the United States. Where Cloudflare processes it for us, that processing is covered by an agreement incorporating the European Commission's Standard Contractual Clauses; you can request a copy (with commercial terms redacted) by email.
United Kingdom
If the UK GDPR applies to you, you have the same rights as set out for the EEA above: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. You additionally have the right to complain directly to us as the controller under section 164A of the Data Protection Act 2018 — write to hello@monouchi.com and we will respond — and the right to complain to the Information Commissioner's Office (ico.org.uk).
Your information is processed in the United States. Regulations under Article 45A of the UK GDPR exist for transfers to certain United States organisations; we do not rely on them. Instead, where Cloudflare processes data for us, that processing is covered by contract terms incorporating standard data protection clauses, and you can request a copy by email.
California
The categories we collect are listed in full under what we collect; the categories of third parties we share with number zero. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we offer the same access, deletion, and correction rights to California residents as to everyone else, without discrimination. To exercise them, email hello@monouchi.com.
Brazil
If the LGPD applies to you, we process leaderboard data on the basis of your consent (Article 7(I)). You may confirm what we process, access it, correct it, have it anonymised or deleted, and revoke consent, by email. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).
Canada
We collect leaderboard data only with your consent, use it only for the purposes this policy describes, and provide access and correction on request, consistent with PIPEDA's fair information principles. Complaints may also be raised with the Office of the Privacy Commissioner of Canada.
Do Not Track
Some browsers send a “Do Not Track” signal. The game does not track anyone — there is no cross-site or cross-service tracking to switch off — so the signal changes nothing, and the game does not respond to it: every player already gets the behaviour Do Not Track asks for.
Changes to this policy
This policy describes what the game does today. If that changes — if a future version collects something new — we will update this page, move the effective date, and give notice in the game before the change takes effect. The effective date at the top is the date the current text took effect; the “last updated” line moves with any edit, including editorial ones.
Contact
Banana Fana LLC — publisher of Monouchi: The Field. Questions, access requests, deletion requests, and complaints all go to the same address.
This policy covers the game. For how monouchi.com itself uses cookies and analytics, see the website privacy notice.