Privacy

Quake is public-safe by default. Public play, bot practice, settings, local profile, and local stats do not require an account or platform API key.

Browser storage may keep non-sensitive settings, player display name, local-only practice stats, and local match history. Do not put secrets in player names or match notes. PLATPHORM_API_KEY is never stored in browser storage.

Public APIs expose server, match, stats, map, mode, weapon, RSS, sitemap, OpenAPI, and MCP discovery data only when it is public-safe. Private player identifiers, cookies, raw IPs, and authorization headers are excluded from public traces and feeds.