Privacy
Gas & Steel has no accounts, no sign-up and no server of its own. Everything you build stays on your device unless you deliberately move it somewhere else.
What the app stores
Your rigs, your squadrons and your display preferences are saved in your browser’s local storage, on the device you are using — as is the small amount of bookkeeping the Google Drive connection needs, described below. They are not sent anywhere. Nobody but you can see them, and that includes us.
The consequence is worth stating plainly: clearing your browser’s site data deletes your collection, and some browsers do that on their own for sites you have not visited in a while. That is why the app asks you to keep a backup file.
Files you export
Exporting writes a file to your device. Where it goes afterwards is entirely up to you. We do not upload it, keep a copy, or know that you made one.
Links you share
A share link carries the rig or squadron inside the link itself, in the part after the hash mark. Browsers do not send that part of an address to the server, so the content of a share link never reaches our host, and never reaches us. It does reach whoever you send the link to, and anyone they pass it on to, so treat a share link as public.
Google Drive
Connecting your Google Drive is optional, and nothing about it happens unless you ask for it. If you do connect it, the app asks Google for the narrowest access there is: permission to see and change only the files it creates itself. It cannot see the rest of your Drive and it does not ask to.
It writes one file, holding the same collection you would get from the export button, into your own Drive under your own storage. You can open it, move it, copy it or delete it exactly like any other file, and it stays yours if you stop using the app entirely.
The permission Google issues is held in memory for that session only. It is never written to storage, never included in an export, and never sent anywhere except to Google — there is no server here to send it to. You can withdraw the permission at any time from your Google account’s security settings.
Connecting does tell the app the email address of the Google account you connected, and the app keeps it on your device so it can show you which account the file is going to. That is the whole of what it is for. It is not recorded anywhere outside the Drive connection, never sent to us — again, there is no server here — and it is forgotten when you disconnect. We have no access to it, to your Drive, or to the rest of your Google account.
Analytics and tracking
No analytics script runs on these pages. No advertising, no tracking cookies, and no third-party scripts of any kind — the site’s own security policy forbids loading them, which is a stronger guarantee than a promise.
The only numbers we look at are the request counts Cloudflare keeps for any site it serves, described below. We add nothing to them, and they say nothing about who you are.
Hosting
These pages and the builder are served by Cloudflare Pages. Like any web host, Cloudflare receives and briefly logs the ordinary details of a request — your IP address, the page asked for, your browser’s description — in order to serve it and to block abuse. That is handled under Cloudflare’s own privacy policy, and we add nothing to it from this end.
The testing password
While the builder is in testing it is behind a single shared password. It is not an account: there is no username, no record of who used it, and nothing tied to you.
Your choices
We hold no data about you to request, correct or delete, because we collect none. What exists is on your own device and, if you connect it, in your own Drive — both of which you can clear yourself without asking us.
Contact
Questions about any of this: redfoxstudiodeveloper@gmail.com.
Last updated 14 September 2026. This page describes what the app does now; if that changes, this page changes first and this date moves with it.