Privacy Policy – Up the Keep
Updated 28 October 2026
This Privacy Policy covers Up the Keep: Castle Battles – the Android app on Google Play (com.upthekeep.game), the Android app offered on our website (uk.upthekeep.game), and the game and website at upthekeep.com.
They are made by Cowl Labs Ltd, the data controller: company 17514515, registered in England and Wales, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Contact: support@upthekeep.com
Up the Keep records how battles go, never who you are, so the territories can be balanced fairly. There is no account, no sign-in, no advertising and no analytics company. We never ask for your name, email address, contacts, location or anything else that says who you are, and we never sell anything about you.
Information we collect
1. Your game, kept on your own device
Your three campaign banks – territories taken, stars, upgrades, your keep's name – and your settings are saved in your browser on your own phone, tablet or computer. They are not sent to us, apart from the little the battle results below carry. The Android app opens the game in Chrome, so it shares Chrome's copy on that phone.
2. Battle results, sent when a battle ends
When a battle ends, or is left after its first twenty seconds, the game sends one short line about it: the territory and difficulty, whether it was won, lost or left, how long it took, how many men were lost and killed, how much of your keep was left, the size of your army, how often each order and power was used, which Armory upgrades you held, which try at that territory it was, and the game's version.
The line carries no name, account or address. Each campaign bank makes up a random six-letter results number the first time it is needed and puts it on its lines, so one bank's battles can be followed from territory to territory. It is not tied to anything else, and you can see it in the game: SETTINGS, under the RESULTS switch. You can switch the battle results off there at any time.
3. Bug reports, only when you press BUG
From the game (BUG, or REPORT on the pause panel), a report holds what you typed, a picture of the game screen if you attach one, where you were in the game (the territory, the time, your ore and army, the last few things that happened), your bank's results number, your screen size, your browser's name and version, and the game's version. From the front page of upthekeep.com it holds what you typed, the page you were on, your screen size and your browser's name, and no picture. If our server cannot be reached, a report from the game waits in your browser and is sent the next time the game can reach it.
4. Save codes, only when you press SEND
SEND puts one bank's progress on our server under a six-letter code, so you can carry it to another device with LOAD. It holds the game's progress and nothing about you.
5. Your connection's address and the server's logs
Like every website, our server sees the internet address (IP address) your connection comes from. The game uses it for one thing: to stop one connection sending too much at once. Only a scrambled form of it is kept, in a short list that forgets it after about ten minutes, and it is never written into the battle results, the bug reports or the save codes.
The web server also keeps a log of each request, as every web server does: the address, the time, the page or file asked for, the page that linked to it and the browser's name, and a second log of requests that went wrong.
Cookies
The game and the website set no cookies of their own. Cloudflare, which protects the site (see below), can set a strictly necessary security cookie when it checks for automated traffic.
How we use it
- Battle results show where players win, lose and give up, so the territories can be made fairer.
- Bug reports are read to find and fix what went wrong.
- Save codes move your progress to the device you choose.
- Addresses and server logs are used only to run the site and protect it from abuse.
We use this information because we have a legitimate interest in making the game work and keeping it running (UK GDPR Article 6(1)(f)). Nothing is used for advertising, profiling or any decision about you.
Who we share it with
We do not sell, rent or give your information to anyone. Two companies handle it as part of running the game:
- Cloudflare, Inc. – our network provider. Every request to upthekeep.com, including each result or report the game sends, passes through Cloudflare on its way to our server, so Cloudflare sees your connection's address and what was asked for. It processes this to deliver and protect the site, under Cloudflare's privacy policy.
- Google – if you install the app from Google Play, Google handles the download and updates under Google's privacy policy, and gives us only anonymous totals and crash reports through Google Play Console.
The game's pictures, music and typefaces all come from our own server; no page asks Google Fonts, an advertiser or anyone else for anything.
How long we keep it
- Battle results: 90 days, then deleted automatically.
- Bug reports and their pictures: 12 months, then deleted automatically from the server. While we work on a problem we keep a copy of its report in our private development records; we delete those copies too when you ask.
- Save codes: until the code is used, or 7 days, then deleted automatically.
- Server logs: about two weeks (14 daily copies), then deleted automatically. They can be read only by the server's administrator.
- Connection addresses in the game's short list: about ten minutes, and only in scrambled form.
- Your banks stay on your device until you wipe them or clear the site's data.
Your choices and deletion
- Stop the battle results: in the game, open SETTINGS and tap RESULTS so it reads OFF. Nothing is sent after that, and anything waiting to be sent is dropped.
- Have your results and bug reports deleted: write to support@upthekeep.com with the results number shown in SETTINGS (each bank has its own; open the bank first). We delete every battle result and every bug report carrying that number, with their pictures, within 30 days and tell you when it is done. For a bug report sent before 28 October 2026, which carries no number, tell us roughly when you sent it and what it said.
- Delete your game: WIPE a bank on the front screen, or clear this site's data in your browser (for the Android app, Chrome's site data for upthekeep.com). Wiping a bank also gives it a new results number.
You also have the right to ask what we hold about you, to have it corrected, to object to its use and to complain to the UK Information Commissioner's Office (ico.org.uk). Because we hold no names or contact details, the results number is how we find what belongs to you.
Children
Up the Keep is meant for players aged 13 and over and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has sent us something that identifies them – for example in the words of a bug report – write to us and we will delete it.
Security
Everything between your device and the site travels over an encrypted connection (HTTPS). The battle results, bug reports, save codes and logs are not public and can be read only by the server's administrator and the people making the game.
Changes to this policy
If this policy changes, the new version is posted on this page with a new date at the top.
Contact
Cowl Labs Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom · support@upthekeep.com