WormArena is provided by Natroli LLC. This policy explains the data used by our game and website. Updated October 27, 2026.
Data we use
- Account information: your chosen player name, email address, account identifier, password hash and sign-in tokens. Registration requires an email for verification, account recovery and requested account services. You can play without registering; online guest play uses a generated guest identity. Guests use free skins and do not receive account-only features or daily rewards. Custom-skin orders require a verified account email for confirmations and delivery.
- Gameplay: online arena participation, scores, kills, survival time, match outcomes, earned coins and daily-reward dates and streaks. Your player name and live arena activity are visible to other players. There is no player-to-player chat.
- Skins and orders: coin purchases of skins, ownership, custom-skin orders, design instructions and revision history. Where checkout is available, Android purchases use Google Play, Apple purchases use the App Store, and website purchases use Stripe. These providers handle payment methods; WormArena does not receive your payment-card or bank details. Our server verifies product identifiers, signed transactions or purchase tokens, order references, subscription periods and status, and an obfuscated account identifier to credit coins and membership benefits, restore account purchases, prevent duplicate claims and reconcile renewals and refunds. Store test purchases are kept separate from live payment records.
- Support: messages and reference images that you choose to submit to website support. These are private to your account and authorized support staff.
- Technical information: app version, platform, limited error categories and sanitized code locations help us find faults. Our own error reports exclude account details, passwords, full log messages and advertising identifiers. Network addresses are processed to provide the connection and protect against abuse.
Why we use it
We use this information to operate the game, maintain accounts and purchases, deliver requested emails and custom skins, answer support requests, protect the service and diagnose faults. We do not sell personal data, run behavioral advertising or request access to contacts, precise device location, microphone or camera. Billing services may process a country or approximate region from network or store information; this does not use GPS. Please do not put real names, contact details or other personal information in your public player name or design descriptions.
Service providers and security
Our hosting, email-delivery and private backup providers process data to provide these services for Natroli LLC. Android and Apple billing use Unity In-App Purchasing with Google Play or Apple. Website checkout uses Stripe. These providers process purchase and subscription information to operate checkout, restoration, renewals and refunds. Unity processes purchase events and operational information such as installation and session identifiers, device and operating-system details, locale, approximate region, errors and performance information to operate and monitor its service. Our native app integrations do not enable advertising identifiers or behavioral advertising. Purchase and technical service records are still processed. We do not use Unity direct-to-consumer checkout or pass your WormArena email to Unity. See Unity's privacy policy and Google's privacy policy, Apple's privacy policy and Stripe's privacy policy. Game and website connections use encrypted HTTPS or WSS. Access to private account and support records is restricted. Other players see your chosen player name and gameplay, not your email or support messages.
Retention and account deletion
Account, gameplay, ownership, order and support records are retained while your account is active. Request account and data deletion on this website. From the game, open Your account, choose Support, then use the website's Delete account and data link. No app installation is required to submit the request.
After you confirm with your password, your account is disabled and sessions are revoked. Automatic cleanup normally removes its records and uploaded references within 10 minutes. Coins, skins and unfinished orders are lost. This cleanup covers records held by Natroli LLC. Apple, Google Play and Stripe transaction records and Unity service records are governed by those providers' retention and deletion practices; deleting a WormArena account does not automatically erase records held independently by them. Deleting a WormArena account does not cancel an active App Store or Google Play subscription; manage or cancel it with the store before deletion. Website subscriptions are queued for cancellation. Contact website support for help with a privacy request involving a service provider. Other players' match histories retain their own results with your identity removed.
WormArena's own anonymous, aggregated fault reports contain no account identifier and are removed after 30 days. Short-lived security counters expire separately. We retain a restricted deletion record containing only the random account identifier, internal user number and deletion dates to prevent deleted data from being reintroduced by delayed records or a backup restore.
Restricted financial records retain transaction references, product, dates, currency, amounts and adjustment status for accounting and refund reconciliation. Apple purchase records are detached from the deleted player account; an anonymous store-account token and transaction references remain to prevent a delayed purchase or restore from crediting a different account.
Restricted server backups rotate within seven days. Private release snapshots containing player records are scheduled for retirement after seven days, with source code and artwork preserved separately. Cleanup failures are monitored; an unavailable device or backup provider can delay a scheduled cleanup. These snapshots are not used as active player records. Verified deletion records must be reapplied before restored account data is returned to service. Copies of emails already delivered to your own mailbox remain under your control.
Match connection information
For new online matches, we store the server-observed connection IP address and an approximate country derived from it with match history. We use this information for service security, understanding game usage and future country-based game features. Country is inferred from the network address, may be affected by VPNs or mobile networks, and does not use GPS. We resolve countries locally using IP Geolocation by DB-IP; player IP addresses are not sent to that provider for lookups. Match connection records follow gameplay-history retention and account deletion. Temporary admission records used to link a connection to its match expire after seven days.
Questions and help
Use WormArena website support for account and privacy questions. If you have forgotten your account details, use account recovery. Parents or guardians may use the same support route for questions about a child's account.