IPPON

Data and privacy

Updated October 26, 2026. This describes the illustrated Ippon beta's account, Arcade and character features.

Playing and scores

Offline Practice uses local game data. Online play requests fighter ratings from tbglabsllc.com. Submitted run scores and leaderboard names are sent to the service. Signed-in submissions are linked to your account. Public leaderboard names and scores are visible to other players.

Arcade matches

Signed-in 1P and 2P Arcade send your fighter selection, gameplay controls and connection heartbeats to tbglabsllc.com. The server pairs 2P players, runs combat and stores account-linked match results, including wins, losses and abandoned games. Your Arcade record is available in the game. If an opponent leaves, your record stays unchanged; only the departing player's abandonment is recorded. Cancelling an unmatched queue position does not create a result. Signing out does not remove past match records; use the data request process below.

Sign-in and local data

Sign-in takes place in your browser. The game receives account tokens, not your password. Saved refresh credentials use Android Keystore protection, Windows user-bound DPAPI encryption, or the prepared iOS Keychain adapter. iOS device acceptance remains in progress. Access tokens stay in memory. Signing out removes this device's saved credentials and private head-pack cache; it does not delete server records or public scores.

Character photos and artwork

A chosen photo is previewed before generation. When you request headshot or character artwork generation, the selected image, saved references and appearance settings are sent to tbglabsllc.com and its configured image provider through fal.ai. Generated artwork and character recipes are saved to your account. Do not upload another person's photo without permission. Custom characters are still under development and are not yet playable in the illustrated client.

Ad-enabled Android versions use Google AdMob to offer at most one image or video interstitial per tournament between bouts. Older versions may have ads disabled. All players receive teen-restricted, non-personalized ad requests; the game does not use an age-band screen to enable personalized adult advertising. Google may process device and app information, IP address (which can indicate approximate location), advertising and app-set identifiers, ad interactions and diagnostic information to deliver ads, prevent fraud and measure performance. Non-personalized advertising does not mean that no data is processed. Read Google's advertising privacy information.

The account's NoAds setting suppresses ad offers. The game applies restricted consent treatment to all players and exposes Ad Privacy Choices in My Account when Google's consent tools require it. If privacy configuration or consent resolution fails, the game does not request ads. Ad loading or unavailability does not prevent continuing the tournament. Internal debug testing uses Google's sample ads.

Data requests

Use our secure account and data deletion form to sign in, confirm the scope, and submit your request directly. You can delete the entire shared account and associated data, or selected data while keeping your account. No email or support conversation is required. Requests are handled manually; the form shows the processing period and your receipt shows the due date and completion status. This browser retains a protected receipt for 90 days so completion remains visible after account deletion. Signing out does not delete server data.