ODIN’S COMMAND

YOUR OPERATOR. YOUR LEGACY.

Privacy Policy

Effective November 1, 2026

Your operator starts private. You choose whether to join the member directory. We use your sign-in information to provide your account, not to sell advertising.

Who we are

Odin’s Command is an airsoft profile and loadout platform operated by Alphalight Capital. This notice covers odinscommand.com and its Odin’s Command service. For privacy questions or requests, contact support@odinscommand.com.

Information we collect

Please keep location information broad. Do not upload sensitive personal information, a child’s real name, photo, email or birth date, or another person’s photo without permission.

How we use information

We use information to authenticate you, send requested sign-in codes, save and retrieve your operator across devices, provide profile, loadout, and daily challenge features, calculate mission scores and XP awards, apply your visibility choices, answer support requests, prevent abuse, and maintain the service. Google account information is used for sign-in, account identification, security, and related support. We do not request access to your Gmail messages, Google Drive files, contacts, or calendar.

What other members can see

Profiles begin private. If you choose directory visibility in Settings, signed-in adult operators can see your callsign, role, bio, squad selection, and level or XP. You may separately enable junior viewers in Settings; parent-approved junior operators then see your callsign, role, level and squad, with your bio hidden. Existing adult listings stay adult-only unless this option is enabled. Your email, portrait, home region, inventory notes and inactive loadouts remain private. A separate player-card sharing option shows your short callsign, active loadout name/type and selected gear names/categories, plus applied preview cosmetic editions and artwork, to your selected directory audience. You can switch back to private in Settings. People who have already viewed a listing may retain their own copies.

Private means hidden from other members; authorized administrators and service providers may access information when needed to operate, secure, or support the service.

Service providers and sharing

We use Cloudflare to host the website and store operator records, Supabase to handle authentication and related account information, Google when you choose Google sign-in, and Resend to deliver sign-in emails. These providers process information needed for their services. Email sent to our support address is handled through our business email provider, Microsoft 365 through GoDaddy.

We do not sell your personal information or share it for targeted advertising. We may disclose information when reasonably needed to comply with law, respond to lawful requests, investigate abuse, or protect users and the service. Information may be processed in the United States and other countries where our providers operate.

Browser storage

The site uses browser local storage to keep your sign-in session and related authentication state. The demo also saves its sample profile and preferences in your browser. Earlier prototype data may remain there until you clear it. The application does not currently include advertising trackers or third-party marketing analytics scripts. Our infrastructure providers may process technical information for security and service operation. Sign out on shared devices; clearing site storage also removes browser-held session and demo data.

Retention, export and deletion

We retain your active operator information while you use your profile, unless you delete it or request removal. You can edit your profile, change directory visibility, and export an operator backup in Settings.

Delete my operator in Settings removes the active operator record, including its portrait, gear, loadouts, mission attempts, shooting-range and gym training records, XP award records, private family records and directory entry. It does not delete your separate authentication record or sign you out. To request deletion of that sign-in record or other personal information, email support@odinscommand.com from your registered email address. We may need to verify ownership before acting. You can also revoke Google access through your Google Account settings; revoking access does not itself delete your operator.

Backups, security logs, email delivery records, and records needed for legal or security purposes may remain after active data is removed, subject to the relevant provider’s retention processes. We do not promise immediate erasure of every backup. Exported files and copies on your own devices remain under your control.

Your choices and requests

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to certain processing. Contact us using the address above to make a request or raise a concern. You may also contact your applicable privacy regulator. We will handle requests as required by applicable law.

Parents and private junior access

Adult operator and Parent Command accounts are for people aged 18 or older. Parents can register in Parent Command without creating an operator. The initial junior pilot is available through verified parent accounts, with live KWS verification, the current parent notice and launch configuration required. A KWS Test result never authorizes child access.

Once enabled for the US pilot, an adult parent or legal guardian must complete live adult verification and separately consent to the current Parent Notice for each child before a private junior profile is created. That notice describes the information, uses, providers, retention and controls for this limited experience. We store a fictional operator name, optional short callsign, generated login ID, hashed access code, XP, parent association and consent record; junior session tokens are stored as hashes. We do not request a child’s real name, email, birth date, photo or precise location. Hosting providers may process technical and security information as described above.

Junior profiles stay private unless the parent separately approves optional directory and squad sharing and the child chooses to share. This release has no junior chat, advertising, purchases or child-to-child messaging, and includes an independent dashboard with a private operator card, gear inventory, loadouts, sample-operation and sample-squad preferences, progression history, Recon Challenge, training gym, Zombie Siege and shooting range. Game results and limited daily XP remain private; unlimited practice awards no XP. We store game type, start time, random game setup and completed score summaries. Shot/action transcripts are checked during submission and are not retained on the server; an unfinished Siege transcript may remain in the current browser tab until saved or the tab closes. Recon Challenge stores generated scenes/questions and submitted answers. Gym records store training and collection times and permanent Conditioning progress. Gear/loadout names and notes, operator role and sample preferences are stored privately. Use fictional names and equipment descriptions; do not add real names, photos, contact details or location. Parents may review or export a child’s active record, reset access codes, immediately revoke access or delete the active profile through Parent Command. Parent Command deletion removes its active junior, dashboard, gear, training, mission/game, consent, verification and session records. Deleting an adult operator does not delete the separate Parent Command records or authentication account. The original founder family record remains a separate adult-managed historical record unless deleted with the adult operator.

Live KWS requests send the authenticated parent email, US region, English language and a random reference; no child details are sent. KWS handles verification on its own service. We retain request status, email hash, account association, timestamps and a transaction hash. Uncompleted requests expire after 24 hours and are purged after seven days when Parent Command is used. Minimal successful verification records remain with the parent account. Junior sessions expire after 12 hours; hashed login rate-limit records expire after a day and are purged when the junior service is used. We retain active junior profiles, completed game summaries and consent while the parent maintains them. Unfinished game attempts are purged after seven days when the games are used. Provider backups, logs and necessary legal or security records are subject to the retention limits described above. Contact support@odinscommand.com for privacy questions or if you believe a child has used adult access without authorization.

Private parent-verification integration test

The founder administrator may explicitly request a Test verification email through Epic Kids Web Services (KWS). Only the configured administrator email, a synthetic US location, English language and a random request reference are sent; no child details are included. KWS handles the verification steps on its own service. We store the Test request status, account association, timestamps and a hash of the returned transaction reference. Raw verification documents, raw webhook bodies and parent email addresses are not stored in this Test table. These records are removed when the operator is deleted or purged after seven days when the Test service is accessed; Test requests expire after 24 hours. This integration test does not record parental consent or enable child access.

Security and changes

We use authenticated access and other technical safeguards to protect account information, but no online service is completely secure. Protect your email and Google account and do not share login codes. We may update this notice as the service changes. The effective date will reflect updates; material changes will be communicated on the site or through an appropriate account notice.

Optional junior directory and squad sharing

A verified parent may separately allow their child to choose directory visibility and join a shared squad by invitation code. The signed-in directory includes adult operators and parent-approved junior operators. The junior’s fictional callsign, role, level, rank and squad name are shared. Under the updated optional sharing notice, the child may also enable a player card showing their short callsign, active loadout name/type and selected gear names/categories, plus applied cosmetic editions and artwork. Squad members, including adults, can see these fields on their roster even if the directory listing is private. No sign-in ID, access code, real name, age, email, photo, location, gear notes, inactive loadouts, parent association or individual activity history is shared. We store the permission and its notice version, verification reference and timestamps, visibility choice and membership. Permission is optional and can be withdrawn in Parent Command; withdrawal removes the active listing and membership without ending private play. Child deletion removes the active permission and membership. Other participants may have copied previously shared information. Adults can create squads, share invitation codes and dissolve their squads. No messaging, squad competition scoring or leaderboards are enabled. Read the separate notice within Parent Command before approving sharing. Contact support@odinscommand.com for privacy or content concerns.

Ad Rewards design preview

The current rewards screen is a design preview: it loads no advertising SDK, sends no data to ad providers, accepts no payments and does not award career XP or usable game items. For signed-in adult operators and juniors whose parents approve the updated optional saved-collection notice, we store preview claim IDs, random reward outcomes, timestamps, daily claim slots, item-piece counts, cosmetic activation/exchange records and a separate sample collection linked to that operator account. These records demonstrate the five-claim limit, ten-minute cooldown and reveal flow across devices. They remain until the operator is deleted or the preview is retired; they may be cleared before launch. Deleting the adult operator removes its active preview records. Approved junior collections and applied cards save on our server across sessions and devices. No information is sent to advertisers. Parents can review/export these records and delete them by deleting the junior or Parent Command. Withdrawing optional sharing hides the card and disables collection access while preserving saved items for reapproval. Earlier browser-session previews are not imported into saved collections. Live ads, provider data practices, memberships and any changes to junior consent will be disclosed before activation.