FORTFIGHT.← Back to game
Your information

Privacy Policy

Last updated: · Policy version: 2026-10-02

This policy explains what information is used when you play FORTFIGHT, create an account or save your progress. FORTFIGHT is operated by NullBin, through NullBin Games and NullBin Studios.

Playing as a guest also saves information. Your browser holds a guest identifier, and the server saves the progress associated with it. An optional NullBin account lets you access linked FORTFIGHT progress after signing in on another device.

1. About this policy

This policy covers FORTFIGHT at fortfight.nullbin.org and its game servers, including the version opened through NullBin Games. Your shared NullBin Games account is also covered by the NullBin Games Privacy Policy. External websites, including Discord, have their own policies.

2. Information we handle

  • Account information: a username and password when you register or sign in; an internal account ID, session information and a record of accepting the terms. Passwords are sent over HTTPS to authenticate with NullBin Games and are stored by that service as salted password hashes, not as plaintext FORTFIGHT profile fields. Registration does not ask for an email address.
  • Player profile and progress: your guest/player ID, chosen player name, level, XP, earned F-Coins, owned and equipped cosmetics, loadout, presets, quest claims and gameplay statistics. When you link an account, we save the connection between that account and your FORTFIGHT profile.
  • Match information: the movement, aiming, firing and other inputs needed to run the match; positions, weapons, health, scores, results, party and private-room participation, and connection timing. The server uses this information for gameplay and validation. Match simulation does not make a permanent recording of every frame or input.
  • Technical and security information: network/IP addresses, request times, browser and device information sent with requests, connection errors, and operational or abuse-related events. Hosting and security providers also process requests needed to deliver and protect the game.
  • Support information: information you choose to provide when contacting the NullBin team. Please do not send your password, session identifiers, payment details or other unnecessary sensitive information.

The game does not require access to your microphone, camera, contacts or precise device location to play.

3. How we use information

We use this information to authenticate accounts, preserve progress, connect players, run matches, calculate rewards and leaderboards, restore interrupted connections, resolve support requests, and protect the service against cheating, unauthorized access and abuse. We also use service performance information to find errors and improve loading and reliability.

Account credentials and saved progress are not used to build advertising profiles. FORTFIGHT currently has no real-money checkout; its F-Coins are earned through gameplay.

4. Cookies and browser storage

  • Account sessions: essential, HTTP-only session cookies are used for authenticated sign-in. They are sent to the server rather than read by the game's JavaScript.
  • Guest progress: a guest session identifier is stored in local storage so the server can recognize your saved profile. Clearing it can make unlinked guest progress inaccessible. Keep browser data and shared devices secure.
  • Preferences: local storage saves controls, sensitivity, aim-assistance choices, graphics/audio settings and your mobile HUD configuration.
  • Moving from the Games site: when you first open the dedicated FORTFIGHT domain, a restricted bridge can read your existing guest identifier and settings from the NullBin Games origin and transfer them to FORTFIGHT. It accepts messages only from the dedicated FORTFIGHT site.
  • Cloudflare: Cloudflare delivers and protects the site. Security challenges may use essential cookies such as cf_clearance or __cf_bm, depending on the protection enabled for a request. Cloudflare performance analytics may collect page-view and loading measurements. Its Web Analytics does not use analytics cookies; security cookies are a separate function.

You can clear or block cookies and local storage in your browser. Doing so may sign you out, reset settings or prevent guest progress from being restored. See Cloudflare's cookie information and Web Analytics information.

5. Public information and service providers

Your player name, selected appearance, match activity and scores are visible to other players. Leaderboards show player names and gameplay statistics. Choose a public name that does not reveal your real identity or contact information.

NullBin Games and FORTFIGHT share the account identity and session information needed for a shared sign-in and linked progress. The FORTFIGHT profile does not contain your account password hash.

We do not sell your account or gameplay information. Hosting providers and Cloudflare receive information needed to host, route, secure and monitor the service. Information may also be disclosed where required by law or reasonably necessary to protect players and the service. Provider processing and storage may take place in countries other than your own; see Cloudflare's Privacy Policy for its practices.

6. Retention and your choices

Profiles and account associations are retained to preserve your progress until they are removed. Sessions expire or are revoked, and live match state is temporary. Operational logs, security records and backups may remain for service operation, recovery, abuse prevention or legal requirements; they are not all removed immediately when a live profile is removed.

You can change your display name and preferences in the game and sign out of an authenticated account. Clearing browser data removes locally stored information, but does not by itself delete server records or your shared NullBin Games account.

Depending on applicable law, you may have rights to access, correct, obtain a copy of or request deletion of your information. Use the contact route below for a request or help with a shared account. We may need to verify your control of the account or profile before acting. Never provide your password or session identifier as proof in a public channel.

7. Age requirements

Accounts are intended for players who are at least 13 and meet any higher minimum age required in their country to use this service independently. If you are below that minimum, do not create an account or submit personal information. Where required, an eligible minor needs a parent or guardian's permission to agree to the terms.

We do not offer a parental-consent registration flow for younger children. If you believe a child below the minimum age has supplied personal information, contact NullBin so the information can be reviewed and appropriate action taken.

8. Security

The service uses HTTPS, password hashing, restricted account sessions and server-side gameplay validation. These measures reduce risk; they do not guarantee that information is completely secure. Do not share account credentials, browser session identifiers or private room codes with people you do not trust.

9. Updates to this policy

Changes will be published on this page with an updated date. Significant changes may also be highlighted in the game or the NullBin community. This policy describes information practices; it does not replace consent or other rights required by applicable law.

10. Contact NullBin

For privacy questions, account assistance, access or deletion requests, contact the NullBin team through the existing NullBin Studios community and ask for a private support conversation. Do not post personal information or credentials in public channels. You can also find the community link on the NullBin Studios site.