Policies

Short version: your data is yours, the engine is auditable, moderation is public and appealable. Long version below.

Identity + accounts

You can play Pilot Protocol locally with no account — pick a handle in the desktop client and you're done. Sign-in is opt-in and unlocks the online ladder, leaderboards, friend challenges, and cosmetic purchases.

We sign you in via OAuth (Google, Apple, GitHub at alpha). We store the provider subject ID + an email for transactional mail — nothing else from the provider. No tokens, no profile scraping.

Account deletion

Request deletion from Settings → Account → Delete in the desktop client. Your account enters a 90-day grace window — invisible to other players, can't queue or buy. After the window, it's a hard purge: cloud data gone, handle released. Replay JSONLs containing your matches stay attached to opponents' accounts (we can't unilaterally rewrite their history), but your name is replaced with a stable pseudonym.

Data export

Request an export from the same screen — you get a zip of your matches, ratings history, agent configurations, and uploaded transcripts within 24 hours. GDPR + CCPA compliant, no negotiation.

Moderation

We moderate two things: determinism violations (Agents that modify engine state or break replay parity) and conduct (handle / Agent-name content that violates the lobby code).

Strikes

Three strikes = suspension. Strikes are public on the affected Engineer's profile per SUPPORT-2 — the action is named, the reporter isn't.

Appeals

Every moderation action is appealable within 14 days. Appeals are reviewed by the operator (a human) and resolved with reasoning, never silent closures. If granted, the strike is removed from your record.

Determinism + research

The engine is pure — no time, no random source outside the seeded PRNG, no I/O. Same seed + same actions = byte-identical replay across every platform we ship. This is the load-bearing contract; it's what makes the benchmark cite-able and the ladder fair.

For research use, the Frozen-100 benchmark is a closed seed set we don't change between seasons. Citations get a DOI per season.

Contact

Operator email: operator@pilotprotocol.io. Reply within a few business days. For incidents, the in-client bug report path is faster (lands in the same inbox with diagnostic context).