Enter the Arena Now
Create an account to keep your progress on this device safe and play under the same name everywhere.
⚠ No password set. Add one so you can log back in from another device or after clearing your browser data.
Self-hosted servers: all boosts are free to claim. Sign in to make them persist across devices.
Talk to nearby players! Your voice is heard by anyone within about 30 meters. The closer you are, the louder you sound.
Walk up to someone to chat. Move away and their voice fades out automatically.
Click the button above to turn your mic on or off.
STATUS: OFFInformation per § 5 TMG / § 18 MStV.
[TODO] with real operator data.[TODO: Legal name / company]
[TODO: Street and number]
[TODO: ZIP, City, Country]
Email: [TODO]
Phone: [TODO]
[TODO or remove if not applicable]
[TODO: Name and address if different from operator]
We are not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board.
Contents on these pages are created with care. We assume no liability for the accuracy, completeness, or topicality of the contents. As a service provider we are liable for our own content according to general laws (§ 7 TMG). According to § 8–10 TMG we are not obliged to monitor transmitted or stored third-party information.
Content created by the operator is subject to copyright. Reproduction, editing, distribution, and any kind of exploitation outside the limits of copyright law require written consent.
Information per Art. 13 GDPR.
[TODO: Name / company]
[TODO: Address]
Email: [TODO]
Server logs. IP, user-agent, timestamp, requested resource — basis Art. 6(1)(f) GDPR. Retention max. 14 days.
Guest accounts. Random account ID + auto name (e.g. Guest-1a2b) in browser localStorage and database — Art. 6(1)(b).
Registered accounts. Display name, optional email, bcrypt password hash, timestamps — Art. 6(1)(b).
Game state. Level, XP, kills, saves, leaderboard (name + score visible to others), inventory — Art. 6(1)(b).
Multiplayer. Position, rotation, hit/death events in real time. Voice chat uses WebRTC: audio peer-to-peer, only SDP/ICE through our server, never recorded — Art. 6(1)(b)/(a).
Transactional email. Reset / verify links delivered via SMTP provider [TODO]. Tokens expire after at most 60 minutes.
| Key | Storage | Purpose | Lifetime | Category |
|---|---|---|---|---|
arena.authToken | localStorage | Session token (JWT) | 30 days | Necessary |
arena.consent.v1 | localStorage | Your consent choices | 12 months | Necessary |
arena.settings.* | localStorage | Audio / graphics / control prefs | persistent | Functional |
Review or revoke choices any time via the tab.
Self-service from inside the game: export via GET /api/account/export, delete via DELETE /api/account.
Passwords stored as bcrypt hash (cost ≥ 10). Auth via short-lived signed JWTs (HS256). Transport TLS-encrypted. Rate-limiting on sensitive endpoints.
No automated decision-making within the meaning of Art. 22 GDPR takes place.
These terms govern the use of Arena Wars (“the Service”) provided by the operator listed in the Imprint tab.
The Service is intended for users aged 16 or older. Minors must obtain parental consent before creating an account.
You must not:
Display names, chat messages, and voice transmissions are your responsibility. By transmitting them you grant the operator a non-exclusive right to display them to other players inside the Service as required for operation.
The Service is provided “as is”. Maintenance, updates, or outages may occur at any time without prior notice.
The operator is liable without limitation for intent and gross negligence and for damages from injury to life, body, or health. For slight negligence the operator is liable only for breach of essential contractual obligations and limited to typically foreseeable damages. Statutory product-liability claims remain unaffected.
You may delete your account at any time via the in-game menu or DELETE /api/account. The operator may terminate accounts that violate these terms with immediate effect.
German law applies, excluding the UN CISG. Mandatory consumer-protection provisions of the user's country of residence remain unaffected. Place of jurisdiction for merchants is the operator's seat. Should individual provisions be invalid, the remainder stays in force.
We only use storage that is strictly necessary by default. You can grant or revoke optional categories below at any time.
Minimum 8 characters. Use a password you do not reuse elsewhere.
…