Privacy policy
Last updated: 25 September 2026
This policy covers every game made by DeskMoth. DeskMoth is a trade name of CS Endeavor LLC; "we" means CS Endeavor LLC. Today there is one released game: Backwall.
The short version
We keep only what the game needs to work: your account, your gamertag, your progress and what you own. No ads, no tracking. We don't sell or share your data with anyone. You can delete everything, any time.
Your account
Every player gets an account automatically the first time they open the game. There is no sign-up screen. If you never sign in, you are a guest, and your account has no email address attached.
What we store
- An account id. It is generated at random, not made from anything about you.
- Your gamertag.
- Your game progress and records.
- Your in-game credit balance.
- Items you own, plus boosts and reward tokens.
- Your email address, only if you sign in with Google. Google verifies it; we use it only so that one email maps to one account. Guests have no email attached.
Reporting and blocking
You can report or block another player. A report stores the reporting player's account id, a fixed reason chosen by the game (never text a player types) and the time, on the reported player's account. Up to 50 reports are kept. A report is recorded, not acted on automatically, and no one is banned by it.
Blocking stores a list of account ids on your own account, so matchmaking never pairs you with those players again.
What other players see
When you are matched with someone in Quickplay, they see your gamertag and level.
What we don't do
No ads. No tracking. No chat. Players can't write messages or post anything; the only thing you type is your gamertag. We don't sell or share your data with anyone.
Analytics
We use Cloudflare Web Analytics to count page views and see where visitors come from, on our websites and on the web version of our games. It sets no cookies and does not follow you between sites.
Code from other companies
The only code from another company in our games is:
- Google's sign-in. Signing in is handled by Google: they verify your account and return a verified email address, which is all that reaches us. Google's sign-in code is loaded from Google when the game starts, so the sign-in button is ready when you want it. As part of how it works, it sets a small cookie (
g_state) on your device. - The 3D graphics library (Three.js). It is loaded from cdnjs, a public code service run by Cloudflare.
- Cloudflare Web Analytics, described above.
Loading code from another service means your device contacts that service directly, so, as with any web request, it sees your IP address.
Where your data is held
Our games run on Cloudflare (Cloudflare Workers and Durable Objects), and your account data is stored there. Cloudflare sees IP addresses in order to deliver requests, and keeps short-term operational logs, as any host does. Our own code never reads or stores your IP address.
What's saved on your phone
The game keeps some things in your browser's local storage on your device: your account key, settings, game progress, your credit balance and cached pictures from the shop. This is how the game remembers you and stays quick.
Deleting the app, or clearing the site's data, removes that copy from your phone. It does not delete your account on our server. That only happens when you delete your account.
Purchases
Purchases are not currently available. When they are, Apple and Google handle the payment, and we never see or store card details.
Children
Our games are for a general audience and are not aimed at children under 13.
Deleting your account
You can delete your account from inside the game, or by email. See deskmoth.com/delete-account. Deletion removes:
- your account and everything in it: progress, credits, items, records
- your gamertag, which becomes available for anyone to use
- the link between your account and your sign-in email
We keep no backups of game data.
One thing remains outside your account: if you reported another player, or another player blocked you, your account id may still appear in their records. That id no longer refers to anything. The account it pointed to is gone, and it was never based on anything about you.
If this changes
Rewarded advertising may be added in future. If it is, this policy and our app store listings will be updated before it ships. Whenever this policy changes, the date at the top changes too.
This website
deskmoth.com sets no cookies. It loads Cloudflare Web Analytics, described above, and nothing else.