BATTLE 2P

i

Controls

Move: Left/Right   Rotate: Up (CW) / Ctrl (CCW)   Soft Drop: Down   Hard Drop: Space   Hold: C   Arena target: 1-5. All rebindable in Options.

Controller: Move: D-pad or left stick   Rotate: A/Y (CW) / B/X (CCW)   Soft Drop: Down   Hard Drop: D-pad Up   Hold: bumpers or triggers   Pause: Start. Plug in or pair any standard controller and press a button - no setup needed.

T-Spins

A T-Spin is a line clear made by rotating a T-piece into a slot so tight it could only have gotten there by spinning, not sliding - the game checks that at least 3 of the 4 corners around the T's center are blocked at the moment it locks. Set one up by leaving a T-shaped notch (usually against a wall) and rotating the piece in as the last move. T-Spins send far more garbage than a normal clear of the same size - see the Combat Rules tab for exact numbers.

Back-to-Back (B2B)

Clearing a Quad Clear (4 lines) or any T-Spin keeps a bonus active as long as the next clear is also a Quad Clear or T-Spin. Break the streak with an ordinary 1-3 line clear and the bonus resets. Chaining them stacks extra attack on top of each clear's own damage.

Garbage

Lines you clear become attack lines sent to opponents' boards as garbage. Clearing lines of your own cancels incoming garbage before it lands, so attacking is also how you defend. Battle modes default to Bomb Garbage - see the Garbage tab for how bombs and the other garbage types work.

• BOMB GARBAGE: Default in Battle 2P, 2P+, 6P and AI Arena. Attack lines contain red glowing bomb blocks. Detonate a bomb by locking any block adjacent to it. Bombs chain-react - connected bombs all explode together, wiping out entire rows!

• HOLE GARBAGE: Used in Sprint 4P Race. Lines arrive with a single empty column hole. Clear using standard line-clearing rules. Incoming lines can be cancelled by sending your own attacks.

• SOLID GARBAGE: Alternative option available in Battle modes. Lines arrive as completely filled rows - no gap and no bomb. Solid rows cannot be cleared by normal line clears; they stack permanently. Use with caution.

StackFall Arena is a hobby project. This is a plain description of what's stored and why, not a legal document.

Guest play

Playing without an account still creates a player record - a random ID and the name you type - so scores and match history can be saved. Nothing about you personally is collected. This ID lives in your browser's local storage; clearing it or switching browsers loses access to that history.

Creating an account

An account stores your chosen name, a password (hashed - we never store or see it in plain text), and your play data (levels, stars, match results, leaderboard scores, and your game settings so they follow you to other devices). Email is optional. We first send it a link to confirm it's yours: until that's opened the address is stored but nothing else is sent to it, and a confirmed address you change keeps working until the new one is confirmed. Once confirmed, it's used for three things: password reset; security notices when your password or email address changes (the email notice goes to the old address); and game notes - when another player takes 1st place from you in the Daily Challenge or pushes you out of an all-time top 10, and a reminder when your Daily Challenge streak is about to end. Those notes are only emailed when you're not playing (the in-game bell covers the rest), and each can be turned off with the unsubscribe link in the email or under Options > Email Notifications. If you don't provide one, there is no way to recover the account if you forget the password.

We also keep a fingerprint of the IP address an account was created from: a keyed hash, not the address, which can't be turned back into it without a secret key only the game's server holds. It lets us limit how many accounts one connection can make and spot one person running several, and it's removed when the account is deleted. Sign-in attempts, password reset requests and name checks keep the same kind of fingerprint for up to a day, to slow down password guessing. A successful sign-in's is kept for 90 days, so someone else's wrong guesses can't lock you out on a connection you've signed in from before.

Country flag

Your flag is the country your connection was in when you last signed in, as reported by our hosting provider (Cloudflare) - never your IP address or anything more precise. It's stored on your account and shown next to your name on leaderboards, your profile and in online rooms. Without an account the flag comes from your current connection and isn't stored.

Online multiplayer

Your chosen display name and current level/stars are visible to whoever you're matched or playing with. Chat messages you send in a room are visible to the other players in that room and are not stored after the room closes. When you report a player, the room's recent chat is saved with the report and kept for 90 days after the report is resolved. Staff can keep private notes on an account for moderation.

Feedback

When you send feedback, we keep what you write together with the game version, your browser, your screen and window size, what you were doing in the game, any recent error messages, your account if you're signed in, and a hashed fingerprint of your IP address (only to limit how many can be sent in a day). The form lists all of this before you send it. Only the people who run the game see it. Closed feedback is deleted 180 days after it was last updated.

Cookies, local storage & analytics

What the game needs is kept in your browser's local storage, not cookies: your sign-in session and player name, your guest ID, your settings (controls, sound and look), personal bests, the room setups and leaderboard filters you last used, and your analytics choice below. None of it is used for tracking. Clearing this site's data in your browser removes it. The game's fonts are served from this site.

Google Analytics runs only if you accept it. It counts visits - your country, device and browser, and the site that sent you here - and the games started and finished (which mode; whether solo, against the AI, online or the Daily Challenge; how it ended and how long it took), so we can see how many people play and what they play. It sets cookies named _ga to tell repeat visits apart, and Google processes this under its own privacy terms. It isn't told who you are: no account details, nothing you type, and not the page's link codes (a password reset or friend link). Google signals and ad personalisation are switched off. Until you accept, nothing loads from Google; turning it off stops it and removes its cookies.

Google Analytics in this browser: OFF

What we don't do

No ads, no ad tracking, no selling data, and nothing shared with third parties beyond Google Analytics if you accept it. Error reports (if the game crashes) may include the same kind of IP fingerprint, used only to rate-limit abuse - never your raw IP.

Your account

You can sign out at any time from the account button at the top left of the main menu. You can delete your account from Player Profile → Account. It's deleted 14 days later unless you sign back in. Matches you played stay in other players' history under a "Deleted player" name.

Questions about your data: privacy@stackfallarena.win