Privacy Policy

Last updated: October 2026

elixar.io is a browser-based game published by RexTeq. This page explains how game progress, browser storage and optional advertising operate.

Game data

Our game processes an alchemist nickname, position, scores, essence, equipped skins, and arena actions in order to run matches. Other connected players can see your chosen nickname, in-game avatar, and game-related statistics. Players may register a verified email account to protect their paid gems. Registration stores your email, a memory-hard salted hash of your password, hashed session tokens, and time-limited hashed email-verification/password-reset tokens. We never need or store the plaintext account password.

A randomly generated guest profile token is stored in your browser local storage. The multiplayer server stores a cryptographic hash of that token alongside your earned Star Gems, best single-run score, unlocked cosmetics and equipped skin. This allows returning visitors using the same browser to recover their cosmetics while the server's stored profile data remains available. Verified email accounts can be accessed on multiple devices. Guest profiles remain available for free play, but guests cannot start new real-money purchases. Linked account wallets are recovered through account sign-in or password reset.

Solo mode stores cosmetic progress and settings locally in your browser, separately from the online profile. Short-term connection tickets may be stored in session storage for reconnecting to a match.

Server and hosting data

Our hosting and networking providers necessarily process network addresses and connection information to deliver the game, provide security, and diagnose technical problems. Game sessions and arenas are held in server memory and expire when they end. The guest cosmetics database remains on our server until it is removed or the hosting storage is reset.

Advertising

When Google AdSense is activated, Google and other third-party advertising vendors may use cookies, web beacons, IP addresses or other identifiers to serve ads, measure performance and prevent invalid activity. Third-party vendors, including Google, may serve ads based on your prior visits to this and other websites. Google uses advertising cookies to serve ads based on visits to this site and other sites.

To manage personalized advertising, visit Google My Ad Center. To learn more, see how Google uses information from partner sites.

Display ads appear only in the scrolling main menu, and an optional Google H5 Games interstitial may be offered after a player dies when they choose to start another round. Ads never cover active gameplay. Google determines whether an interstitial is served. For visitors in locations where consent is required, a suitable Google-certified consent management platform needs to be configured before personalized advertising can be served.

Virtual currency

Star Gems in this build are used only for cosmetic skins. They may be purchased with real money through Stripe after verified account registration. Gems cannot be cashed out, transferred, or redeemed for goods outside the game. Skins do not modify damage, movement, or other competitive mechanics.

Account emails and payments

When account emails are enabled, a transactional email provider (Resend) processes your address to deliver verification and password-reset links. Stripe processes payment information and provides payment references used to validate and reconcile purchases. The server stores gem balances, order amounts, purchased quantities, transaction status and receipt references to provide purchases and resolve disputes. The site operator must publish its actual contact information, retention practices and customer privacy choices before accepting payments.

Your choices

You may play solo or as an online guest without registering, but paid Star Gem purchases require a verified email account. You can reset a registered account password using your verified email. Clearing browser storage deletes local solo progress and tokens but does not automatically erase your server account or paid purchase history. For account deletion, payment records, privacy or recovery inquiries, contact the operator; mandatory record-retention obligations may apply. For privacy and data inquiries, contact RexTeq through its official website at rexteq.com.

This policy describes the default elixar.io software. The site operator should review this policy for accuracy, add any additional services in use, and ensure local legal requirements are satisfied before enabling advertising.