Privacy
This site
This site sets no cookie, runs no analytics, loads nothing from a third party, and sends nothing anywhere. The fonts are served from here. Search runs in your browser against an index served from here. The host's server logs are the host's (Render).
The game
The men's calls are the only part of the game that talks to anything: a commander answering on the net, your own crew on the intercom, a man who comes to see you in camp. Each call is one request. What is in it depends on which way the call goes.
Through our service
The shipped game has no key of its own. It sends each call to our service, which holds the key and makes the model call for you. The request carries, in its headers, your Steam session ticket (in a development build, a development token instead) and the game's version number; and in its body, which kind of call it is, which tank is being played, the men's fixed prompt block, the persona block for the man being played, the messages of the call, the shape the answer must take, and the call's token limit and effort setting.
The service checks the ticket with Steam, so Valve sees the ticket and answers whether it is valid and whether the account owns the game; that answer is remembered in memory for a few minutes so the next call need not ask again. The service then forwards to Anthropic the two blocks, the messages, the answer's shape, the token limit and the effort: nothing that identifies you goes with them.
What the service keeps: a ledger of each Steam account's spend for the month (the account id, the month, the dollars spent and the number of calls), which is how the monthly budget works; and one log line per call, carrying the time, a pseudonym of the account (a hash of the Steam id, salted when the service is configured with a salt, never the id itself), the kind of call, its status, the token counts, the cost, the time it took, and the game's version. It keeps no prompt, no persona, no message and no reply.
With your own key
A build that finds an Anthropic key in its environment skips our service and calls Anthropic directly: the two blocks, the messages, the answer's shape, the token limit and the effort, under your key and Anthropic's terms. Nothing reaches us at all.
Otherwise
With the scripted commanders nothing leaves the machine. The campaign, the camp, the map and the report never do, whichever way the commanders are played.