Last updated October 16, 2026

Privacy & your choices.

Friday Fighters is operated by LMG. Solo play and private online rooms do not require an account. Ranked matchmaking requires Google sign-in. Questions or privacy requests: ajwestfield8889@gmail.com.

Game settings on your device

The browser stores your controls, volume and other settings locally. It also remembers completed-match counts and your donation-prompt dismissal or “don’t ask again” preference. Clearing this site’s browser data resets those settings. The donation prompt is optional and never unlocks gameplay.

Hosting, audio and online play

Vercel hosts the site and Convex serves shared audio and public game settings. These services receive request information such as IP address and browser details under their own policies. Owner uploads and configuration are stored in Convex; public recordings are available to players. The site owner’s access key is kept in session storage when the owner unlocks the editing tools and is cleared on sign out.

PeerJS handles online-room signaling. Google and Cloudflare STUN services help establish direct connections. Online players’ network addresses may be visible to the other player through WebRTC. There is no paid TURN provider or in-game private messaging system.

If a ranked direct connection fails, the game can relay gameplay messages through Convex over an encrypted connection. This temporarily stores a small, bounded buffer of controls, selections and synchronization messages so the opponent can receive them. Access is limited to the matched players using separate temporary connection credentials. Acknowledged messages are replaced as play continues; inactive buffers are normally removed within about eight minutes, with longer delays possible during cleanup backlogs. This does not record a microphone, camera or private chat.

Online matchmaking

Online matchmaking does not require sign-in, a name or an account. To keep one search or match per browser, the game stores a random private credential in your browser's local storage; the server stores only a SHA-256 hash of it with a generated placeholder name that is not shown to other players. There are no public wins, losses, ratings or leaderboards. Queue entries expire when searching stops, and match connection records are removed after about a day. Earlier ranked profiles, including any Google account link (the account's stable identifier only, never your password, email address or photo), remain stored until deletion is requested through the contact above.

The game shows aggregate counts of players online, in games and searching for ranked matches. A random browser credential stored locally helps avoid counting duplicate tabs. If you have used online matchmaking, its browser credential (or an earlier signed-in session) also links presence to that profile so the same profile on multiple devices is not counted twice. The server stores only hashed presence credentials, a short-lived tab identifier and basic activity state; no names or individual activity are exposed in public counts. Presence expires after about 75 seconds without an update and expired entries are removed shortly afterward. Local two-player matches count two players; computer opponents and automated showcases do not add players. Anonymous counts are estimates by browser, not verified identities. These operational counts are separate from traffic analytics and do not change saved game records.

Game traffic and owner reporting

We count game page views and completed matches using our existing Convex service. A random browser-session identifier is kept in session storage; it is not linked to a name, email or advertising identifier. Short-lived deduplication records are removed after about two days. Daily totals, coarse device category and referring platform are retained for up to 400 days. Full referring URLs and IP addresses are not saved in these analytics records. Do Not Track and Global Privacy Control opt-outs are respected. Blocking analytics does not affect gameplay.

The private owner dashboard uses Google sign-in and a secure, HTTP-only session cookie. Only the verified owner email can access reports. Separately authorized, read-only Google AdSense access supplies revenue and site-review information; Google tokens stay on the server and can be disconnected from the dashboard.

Optional support payments

QR codes are generated locally; your donation link is not sent to a QR-code service. The support button opens Buy Me a Coffee, where their payment processing and privacy terms apply. Friday Fighters does not collect card numbers, bank details or payment credentials. Payments are voluntary creator support, not a claim of charitable tax deductibility.

Advertising

Advertising is optional. No Google advertising code is loaded while ads are disabled. Automatic menu ad requests use Google AdSense in restricted data processing mode for contextual, non-personalized ads. Google may use cookies or other identifiers for delivery, measurement and security, subject to applicable consent choices. Google’s certified European consent message handles applicable visitors; when available, use “Privacy & cookie settings” in the game menu to change your choice. Ads can serve only after Google approves the site, and no ad clicks are required to play. A donation prompt is not an advertising-consent prompt.

See how Google uses information for advertising and Google’s ad choices.

External services

Learn more from Vercel, Convex and Buy Me a Coffee. External social links use those services’ own policies. Contact LMG for questions about this site.