Last updated 2026-08-07
ja2-web lets you play Jagged Alliance 2 in a browser using your own copy of the game. This page describes exactly what the site stores and who else sees it. It is deliberately short, because the site does very little.
Nothing is collected. There are no analytics, no tracking scripts and no advertising on this site — not Google Analytics, not anything else. If you use Bring your own JA2, your game files are read directly from your disk by your browser and are never uploaded; your saves are written back to a folder on your own machine.
Signing in is handled by Google, Discord or Microsoft. We never see your password. From them we receive, and store, only:
We then store the game data you upload and your savegames, in storage private to your account. Nobody else can read them, and they are never public.
On OVHcloud servers and object storage. Data is held for as long as your account exists. Ask us to delete it and we will remove your files and your account record.
Your data is not sold, and is not shared with anyone else.
Two, both strictly necessary, neither used for tracking:
ja2_session — keeps you signed in. It is deleted when you close your
browser, and expires within a day regardless.ja2_oauth_state — a short-lived value that protects the sign-in itself.
It lasts ten minutes.Game files you have uploaded are cached locally so they need not be downloaded again. They stay on your machine and are cleared whenever you clear your browser’s site data.
You can play without an account at all — use Bring your own JA2 and nothing leaves your machine. If you have signed in, you can ask for your data to be deleted at any time.
Email hello@virtastic.app, or open an issue on GitHub.