Privacy

What Scourgeyworks collects, in plain words

Short version: Decapsulation keeps your Steam ID, your in-game name and your progress so the game can save it, and shows your name on leaderboards. Nothing is sold, there are no ads and no trackers, and you can delete your account from the game's settings at any time. Scourge of the Space Invaders keeps your game on your phone, plus a cloud save and your high score in your own Google account if you use Google Play Games.

Decapsulation (the Steam game)

• Signing in. You sign in with Steam; there is no separate password. Steam tells the game servers your Steam ID, your Steam profile name and whether you own the game, and the servers make you a game account linked to that Steam ID.
• Your progress. Your account saves your in-game name, your debug logs (the in-game currency), your items, weapons, mastery and loadouts, daily quests, your house and pets, the towns you have visited or bookmarked (with any labels you type), and your arcade scores.
• What other players see. Your in-game name, appearance and pet, in matches and in the town. In the town, people there also see your house and your best arcade scores. Your name appears on the arcade leaderboards and the Hall of Fame, and the best runs (a recording of the buttons pressed) can be watched by anyone from the Hall of Fame. Your Steam ID and account id are never shown.
• Your Steam friends. To show a friends-only leaderboard, the game sends the Steam IDs on your friends list to the game servers with the request. They are used for that answer and not stored.
• Voice chat. The microphone is open by default; you can switch to push-to-talk or turn voice down in Settings → Audio. In matches your voice goes through the game servers to players near you; in the town it goes straight to the other players in that town over Steam. Voice is never recorded or stored.
• Connections. The game servers see your IP address when you connect. It is used to run the connection and to limit how fast requests can arrive, and it is not kept with your account. In the town your game connects to the other players' games through Steam, which can let their game see your IP address.
• Server logs note your in-game name and account id when you join a match, so problems can be traced and fixed. Server logs, including the connection logs that hold IP addresses, are deleted after 30 days.
• Not collected. No analytics, no ads, no trackers, no real-money purchases inside the game (the game itself is bought on Steam), and no email address. Steam's own data is covered by Valve's privacy policy.

Scourge of the Space Invaders (Android)

• No account, no servers. The game has no Scourgeyworks account and sends nothing to Scourgeyworks. There are no ads, no analytics, no crash reporting and no tracking, and it never asks for your location, contacts, camera or advertising ID.
• On your phone. Your progress, ship designs and settings are saved on your phone and are erased when you uninstall the game. The live wallpaper runs on your phone too and sends nothing anywhere.
• Cloud save, if you use Google Play Games. While you are signed in to Play Games, the game saves a copy of your progress to the hidden app area of your own Google Drive: your pilot name (whatever you typed), credits, experience, skills, inventory, ship and AI designs, and some settings. Google stores it; Scourgeyworks cannot see it. You can delete it from Google Drive: Settings → Manage apps → Space Scourge → Options → Delete hidden app data.
• High score. Your best score goes to the Google Play Games leaderboard under your Play Games name. Turn this off in the game's Settings → Submit Scores.
• Purchases go through Google Play, which handles the payment under Google's privacy policy. Scourgeyworks never receives your card or payment details.
• Google Play services, which the game uses for Play Games, can send Google its own diagnostic and usage data. That is covered by Google's privacy policy.
• Permissions: internet and network state (for Play Games and purchases), vibration, billing, and the live wallpaper.

The Decapsulation arcade in your browser (arcade.scourgeyworks.com)

• A random guest id. The first time you play, your browser makes a random id and keeps it in its own storage. It is sent with your runs so your best scores stay yours. It is never shown to anyone. Clearing the site's data in your browser makes you a brand-new guest.
• Your runs. Each ranked run sends its score and the inputs you pressed, so the game servers can replay it and check the score is real.
• A name and a flag, only if you want. After a top-100 run you may type a name (3 to 12 letters and numbers) and pick a country flag; both appear publicly on that game's leaderboard. Skip it and you show as "Anonymous".
• Playing online with someone. Online two-player games connect your browser directly to the other player's, so each of you can see the other's IP address. To set that connection up, your browser contacts Cloudflare's and Google's connection servers, which see your IP address too. The game servers only hold the room while it is open.
• Your IP address reaches the game servers with each request; it is used to limit how fast requests can arrive and is not kept with your scores.
• No cookies, no analytics, no ads, and no sign-in.

This website (www.scourgeyworks.com)

• No cookies, no analytics, no trackers, no scripts, no ads.
• Like every website, your browser's request (including your IP address) reaches the site's hosting and Cloudflare, which protects and speeds up the site. It is not used to identify you.

Innocent Chicks

The Innocent Chicks website and online game are covered on innocentchicks.com.

Why this data is used (the legal basis)

• To run the games you choose to play. Your account, progress, leaderboard entries, what other players see, voice relay and the friends leaderboard are needed to provide the game itself. The legal basis is performance of a contract (UK GDPR and EU GDPR, Article 6(1)(b)).
• To keep the games safe and fair. Server logs, limiting how fast requests can arrive, and the replay check that confirms a score is real rely on a legitimate interest in security and fair play (Article 6(1)(f)). You can object to this; see Your choices.
• The browser arcade's guest id is kept in your browser because ranked play, which you start yourself, cannot work without it. That makes it strictly necessary storage, so no consent is asked for it (the UK's PECR and the EU's ePrivacy rules).
• Signing in with Steam is required to play Decapsulation online. The browser arcade and Scourge of the Space Invaders need no sign-in, and a leaderboard name is always optional.
• No automated decisions with legal or similarly significant effects are made about you. The replay check only decides whether a score counts on a leaderboard.

Where it is kept, and who helps

• Supabase stores the game accounts and leaderboards, in the European Union (Ireland).
• Hetzner runs the game servers, in Germany, the United States and Singapore; you play on the one nearest you.
• Scaleway (France) hosts the browser arcade and this website, and Cloudflare protects them and handles the site addresses.
• Valve runs Steam, which handles sign-in, buying the game, friends and the town's player-to-player connections.
• Google runs Google Play, which handles Scourge of the Space Invaders' purchases, cloud saves and leaderboard.

Supabase, Hetzner, Scaleway and Cloudflare handle the data only to provide their service, under a data processing agreement with Scourgeyworks. Valve and Google are responsible for their own services under their own privacy policies. None of it is sold or shared for advertising.

Data outside the UK and EU. Game accounts are stored in the EU, which UK law recognises as giving adequate protection. Some data leaves the UK and EU: the game servers in the United States and Singapore handle the players who connect to them, and Supabase and Cloudflare are US companies. Where that happens, the data is protected by the providers' data processing agreements, which rely on the European Commission's Standard Contractual Clauses with the UK's addendum, or on the EU–US Data Privacy Framework and its UK extension.

How long it is kept

• Your Decapsulation account and progress are kept until you delete your account.
• Scourge of the Space Invaders' saves stay on your phone until you uninstall the game, and in your Google account until you delete them there.
• A run's recording is kept only while it stays in a top 100 (or is a recent weekly champion); after that it is deleted.
• Server logs are deleted after 30 days.
• Browser arcade guests' unfinished runs are cleared out regularly.

Your choices

• Delete your account in the game: Settings → UI → Delete account. Your account and everything saved with it is deleted straight away and cannot be brought back. You keep the game on Steam; if you play again, you start with a brand-new account. You can also ask by email.
• Change your name from your profile card in Decapsulation.
• Scourge of the Space Invaders: uninstall to erase what is on your phone, delete the cloud save in Google Drive (Settings → Manage apps → Space Scourge → Options → Delete hidden app data), and stop sending scores in the game's Settings → Submit Scores.
• Keep your arcade games private: Settings → UI → "Let others watch my arcade games" → Nobody. Nobody can watch you play, and your runs keep no recording for the Hall of Fame.
• Get a copy of your data, correct it, or remove a name or score (including a browser arcade name): email support@scourgeyworks.com with the game, the name and roughly when you played.

Your rights. Under UK and EU data protection law you can ask to:

• see the data held about you (access), and get a copy in a machine-readable file (portability);
• correct it if it is wrong, or have it deleted;
• restrict its use while a question about it is sorted out;
• object to its use for security and fair play (the legitimate interest above).

Email support@scourgeyworks.com to use any of them; you will get an answer within one month. If you are unhappy with how your data is handled, you can complain to the UK's Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.

Children

Decapsulation is not made for children under 13, and Steam itself requires its users to be at least 13. If you think a child under 13 has a Decapsulation account, email the address below and it will be deleted. Scourgeyworks receives no personal data from any player of Scourge of the Space Invaders, whatever their age; Play Games and its cloud save are Google's, under Google's own rules for children.

Who is responsible, and contact

Scourgeyworks, based in the United Kingdom, is responsible for the data described on this page (the “controller”), and is registered with the UK's Information Commissioner's Office. Questions or requests about your data: support@scourgeyworks.com. If this page changes, the date below changes with it.

Last updated 8 October 2026.