Legal

Privacy Policy

Effective August 28, 2026 at 12:00 AM EDT

What we collect, why, and how we protect the project. Official play is not a UGC platform.

This Privacy Policy explains what information Doors collects, why we collect it, how we share it, and your choices. It applies to the Doors game and website at doorsfps.com (the "Service"). Doors is operated from the State of Indiana, United States. By using the Service, you acknowledge this policy. Our Terms of Service govern use of the Service; if there is a conflict about data practices, this Privacy Policy controls for privacy topics.

Short version: we use data to run multiplayer, accounts (via Clerk), ranked play, coins, and optional billing (via Stripe); we use Google Analytics for audience and product analytics and Google Ads, the OpenAI Ads Measurement Pixel and Meta Ads (including Facebook Ads) and its Meta Pixel for advertising and conversion measurement; and we may use error tools like Sentry to fix bugs. We do not sell your personal information for money. Official play is not a user-generated-content product: we do not collect player-uploaded maps through the game, and community servers are not something a player browses or stumbles into.

Who we are

Controller / operator: the operator of Doors at doorsfps.com, based in Indiana, USA. Privacy questions and requests: contact@doorsfps.com.

What we collect

Depending on how you play, we may process:

• Account & user management (Clerk) — If you sign in, Clerk processes authentication and account data (for example OAuth provider info, session tokens, email/phone if you use those sign-in methods, and profile fields Clerk stores). We store a link between your Clerk user id and your Doors username, progression, and coin-related records for ranked profiles, parties, and purchases.
• Gameplay & ranked stats — Match results, kills, deaths, scores, Skill Score (SS), Match Making Score (MMS), XP, coins earned per match, wins/losses, map names, and related match history needed for leaderboards, fair matchmaking, and currency grants.
• Coins & cosmetic purchases — Your coin balance, earn history from official matches, and in-game spends on permanent equipment (mesh styles, player/gun tints). This is virtual-currency activity on your account, separate from real-money receipts.
• Billing & payments (Stripe) — If you buy coin packs or direct paid cosmetics with real money, Stripe processes the payment. Stripe may collect payment method details, billing name/address, and fraud signals under its own privacy policy. We may receive and store limited billing metadata needed to fulfill the purchase — for example Stripe customer/payment ids, product or pack type, amount, currency, status, timestamps, and which Clerk-linked Doors account received the coins or cosmetic entitlement. We do not store your full card number on our game servers.
• Connection data — IP address, browser/device basics, and connection metadata required to connect you to game servers and protect the service (rate limits, abuse prevention, fraud). Multiplayer cannot work without a network path to you.
• Bot protection (Cloudflare Turnstile) — On certain forms (for example feedback), we use Cloudflare Turnstile to distinguish humans from bots. Turnstile may run in the background (including invisible mode) and process client-side signals such as IP address, TLS fingerprint, browser user-agent, and sitekey/origin. Cloudflare processes those signals to protect our site and to improve Turnstile. Details are in Cloudflare's Turnstile Privacy Addendum.
• Local settings — Graphics, audio, controls, and display name preferences stored in your browser's localStorage on your device. These stay on your machine unless you clear site data.
• Diagnostics & product analytics — We use first-party analytics and tools such as Sentry to capture crashes, performance issues, and product signals that help us fix bugs and improve features. These tools may receive technical data (error stacks, browser type, approximate region, release version, anonymous visitor/session ids, campaign parameters, and gameplay events such as menu use, game joins, and match completion).
• Google Analytics, Google Ads, OpenAI Ads & Meta/Facebook Ads — We use Google Analytics to understand visits and use of the Service. We use Google Ads, the OpenAI Ads Measurement Pixel, and Meta Ads (including Facebook Ads) and the Meta Pixel to attribute visits to advertising and measure results. Depending on the service and event, Google, OpenAI, or Meta may receive page URLs and views, timestamps, referrers, browser/device information, IP address or approximate location, cookie or local-storage identifiers, ad-click and campaign parameters, and conversion details. Measured conversions may include account creation, joining or finishing a game, campaign progress, checkout, and purchases. Purchase events may include an item, value, currency, and transaction/order id, but not full payment-card details. Google Ads may receive pseudonymous account or visitor identifiers. For signed-in users, the OpenAI pixel may receive normalized, SHA-256-hashed email and Doors account identifiers for conversion matching; hashing does not make those identifiers anonymous. Meta may associate Pixel activity with Facebook, Instagram, or other Meta accounts and use it for measurement, ad delivery, personalization, and audience services under its policies. If we enable Meta advanced matching, Meta may also receive hashed contact or account identifiers. Learn how Google uses information from sites that use its services in Google's partner-sites notice and review the OpenAI Privacy Policy, and review the Meta Privacy Policy.
• Messages you send us — If you email contact@doorsfps.com, we receive whatever you include (bugs, suggestions, billing help). If you attach a map file, that is email to our staff for possible official consideration — not an in-game upload.

What we do not collect (on purpose)

• No in-game chat or voice — Doors has no text chat, voice chat, or player-to-player messaging inside the game client. We therefore don't store chat logs or voice recordings from matches.
• No sale of personal data for money — We do not sell your personal information to data brokers or advertisers for monetary consideration.
• No in-game third-party ads — We do not show third-party ads inside Doors or provide free-form gameplay records to data brokers. We do send the limited events described above to Google Ads, OpenAI Ads, and Meta Ads to measure campaign results.
• No player-upload / UGC pipeline — The game does not accept map uploads, screenshots-as-content, or other player-made files into official servers. There is no public workshop or community-map browser. Official maps exist on our servers because Doors installed them after our own review.

Official maps vs. community servers

Official matches use maps Doors selected, reviewed, and installed. A player cannot submit a map and have it become part of the game. The map builder writes a file on your computer; it does not publish anything.

Community / custom servers are a separate, technical option. They are not listed next to official modes. Joining one means typing an exact IP address and port the host gave you and the join password they set. Kids playing official modes will not wander into someone else's custom maps. What a community host logs on their own machine is outside our control — prefer official servers when that matters to you. We are not responsible for third-party privacy practices on those hosts.

How we use information

• Provide, operate, secure, and improve the Service
• Provide accounts (Clerk), parties, rankings, coins, cosmetics, and anti-abuse measures
• Process optional real-money purchases (Stripe), credit coin packs, fight fraud, and handle billing support or disputes
• Diagnose outages, crashes, and performance problems
• Improve maps, balance, economy, and features
• Respond when you contact us
• Enforce our Terms, protect rights and safety, and comply with law and payment-network rules
• Establish, exercise, or defend legal claims

Legal bases & U.S. context

We process information as needed to provide the Service you request, to operate our business, for security and fraud prevention, to comply with law, and based on our legitimate interests in running a stable multiplayer game (balanced against your rights). Where consent is required by law for a specific activity, we will seek it. This Service is operated from the United States; U.S. and Indiana law primarily shape our practices.

Sharing

We share data only when needed to operate Doors or as described here:

• Clerk — authentication, sessions, and user management
• Stripe — payment processing and fraud prevention for coin pack purchases; Stripe receives the billing data required to charge you and may act as an independent controller for that processing
• Infrastructure providers — e.g. Cloudflare (site delivery / DNS), cloud hosts for authority and game processes
• Cloudflare Turnstile — bot detection on selected forms; Cloudflare may process client-side signals as described in the Turnstile Privacy Addendum. We use Turnstile only for security and abuse prevention, not for advertising.
• Error/analytics vendors — e.g. Sentry for crash and performance monitoring
• Google — Google Analytics for audience and product analytics, and Google Ads for advertising attribution, conversion measurement, campaign reporting, and optimization
• OpenAI — the OpenAI Ads Measurement Pixel for advertising attribution, conversion measurement, campaign reporting, and matching hashed identifiers to ad interactions
• Meta — Meta Ads (including Facebook Ads) and the Meta Pixel for advertising attribution, conversion measurement, campaign reporting and optimization, ad delivery, and audience services
• Public leaderboards — your username and ranked stats may be visible to other players (we do not publish your coin balance or payment history as a public wallet display)
• Professional advisors — lawyers, accountants, or insurers under confidentiality when needed
• Business transfers — if we sell, merge, finance, or transfer assets related to Doors, personal data may be transferred as part of that transaction, subject to this policy or a successor policy
• Legal & safety — if required by law, legal process, or to protect people, our rights, or the Service from harm, fraud, or security threats

Community-hosted servers you join (only by typing an address a host gave you, not from our official list) are run by third parties. What a community host logs on their own machine is outside our control. We are not responsible for third-party privacy practices.

Cookies & similar tech

We and our providers (especially Clerk for sign-in, Stripe during checkout, Cloudflare Turnstile for bot protection, Google Analytics, Google Ads, OpenAI Ads, Meta Ads and the Meta Pixel, and error/analytics tools) may use cookies, local storage, pixels, tags, or similar technologies for sessions, preferences, payments, security, analytics, advertising attribution, ad delivery, audience services, and conversion measurement. Google Analytics commonly uses first-party cookies such as _ga to distinguish visitors and sessions; Google Ads may use cookies or ad click identifiers to connect an ad interaction to a later conversion; and Meta may use cookies or identifiers to associate Pixel activity with ad interactions and Meta accounts. Our own analytics and ad helpers also use local and session storage for pseudonymous visitor/session ids, campaign attribution, and conversion deduplication.

You can clear or block cookies and site data in your browser, use the Google Analytics Opt-out Browser Add-on, and manage Google advertising choices in My Ad Center. You can manage how Meta uses activity from ad partners in Meta Ad Preferences. The Analytics add-on does not itself opt you out of Google Ads, OpenAI Ads, or Meta Ads measurement. Browser privacy settings or content blockers may limit pixels and tags. Blocking essential technologies may break sign-in, purchases, feedback submission, or gameplay. See the Google Privacy Policy and the OpenAI Privacy Policy and the Meta Privacy Policy for provider-specific information and choices.

Cloudflare Turnstile & privacy

We use Cloudflare Turnstile to help protect forms and the Service from automated abuse. Depending on configuration, Turnstile may show a widget or run entirely in the background with no visible UI (invisible mode). As a condition of using invisible mode, we incorporate by reference Cloudflare's Turnstile Privacy Addendum (available at cloudflare.com/turnstile-privacy-policy), which describes the signals Turnstile processes and how Cloudflare uses them. Cloudflare's main privacy policy also applies except where the Addendum is more specific.

Retention

We keep account, ranked history, coin balances, and in-game purchase records while your account is active and as long as we need them for the ladder, economy integrity, security, fraud prevention, or legal reasons. Billing metadata and payment records may be kept longer where tax, accounting, chargeback, or fraud rules require it. Diagnostic events are retained according to our tooling defaults and our need to debug issues. Google Analytics, Google Ads, OpenAI Ads, and Meta Ads data are retained according to our settings with those providers and their applicable policies. When we no longer need data, we may delete, aggregate, or de-identify it. Residual copies may remain in backups for a limited period.

Your choices & requests

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of certain personal information, or to object to certain processing. Email contact@doorsfps.com to make a request. We will respond as required by applicable law. We may need to verify your identity (for example via your signed-in Clerk account) and may deny or limit requests where the law allows (including fraud prevention, legal holds, public leaderboard integrity, and backup systems). Account deletion may not erase information we must keep, and may end your license to coins and cosmetics without refund (see Terms).

Kids & families (COPPA)

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us and we will take reasonable steps to delete it where required. See For Parents. Account providers (Clerk / social logins) and payment providers (Stripe) have their own age rules. Optional real-money coin packs and paid cosmetics require a signed-in account and a payment method; parents should control payment methods on devices kids use.

Official play does not include player-made maps or a UGC feed. See Section 7 of the Terms of Service and For Parents for how official maps and community servers work.

Security

We use reasonable technical and organizational measures appropriate to a small multiplayer service (HTTPS, authenticated ranked joins, least-privilege design). No online service is perfectly secure. You use the Service at your own risk. Please use strong sign-in options and do not share account credentials. We are not liable for unauthorized access beyond our failure to use reasonable care, to the extent such limit is allowed by law (see also the Terms' liability limits).

International users

The Service is operated from the United States. Servers and vendors may process data in the United States or other countries that may have different data-protection rules than your home country. By using Doors, you understand your information may be transferred to, stored in, and processed in the United States and other locations where we and our providers operate. If you do not want that, do not use the Service.

U.S. state privacy notices

Residents of certain U.S. states may have additional rights regarding personal information (access, deletion, correction, portability, or appeal). We do not sell personal information for money. Depending on the law that applies, disclosures to Google Ads, OpenAI Ads, or Meta Ads for advertising measurement, ad delivery, or audience services may be considered "sharing," targeted advertising, or a "sale" even when no money changes hands. To exercise an applicable right or ask us to limit this processing, email contact@doorsfps.com. You can also use the browser and provider controls described above. We will not discriminate against you for exercising rights granted by law. If we deny a request, you may appeal by replying to our decision email; if still unresolved, you may contact your state attorney general where applicable.

Do Not Track

Some browsers send "Do Not Track" signals. The Service does not currently respond to DNT signals in a uniform way because there is no consistent industry standard.

Changes

We may update this policy as features, vendors, or laws evolve. The effective date at the top will change when we do. Continued use after the effective date means you accept the updated policy. If changes materially reduce your rights under law that requires notice, we will take additional steps as required.

Contact

Privacy questions, data requests, or concerns: contact@doorsfps.com. Operator location: Indiana, United States.