Privacy Policy

1. Data we collect

Account: commander name, email address, password (stored only as a one-way hash), interface language.

Game: your planets, fleets, research, combat reports, private messages, alliance posts, feedback you send and reports you file, and who invited you (if you joined through an invite link).

Technical: the last IP address you logged in from (to fight multiple accounts and abuse) and server logs.

Activity log: every action you take in the game (what you requested, when, whether it succeeded, and the IP address it came from) and every game event that concerns you (constructions, fleets, battles, trades). Passwords and payment details are never recorded. Only moderators and administrators can read it; IP addresses are visible to administrators only.

Payment: if you subscribe, Stripe processes your payment. We never see your card number; we only keep your Stripe customer and subscription IDs.

2. How we use it

To run the game, send necessary emails (password reset), moderate conversations, prevent cheating and abuse (including by reviewing the activity log, and by comparing IP addresses so invite rewards cannot be farmed with alt accounts), investigate bugs, and manage subscriptions. Legal basis: performance of the contract (the Terms of Service) and our legitimate interest in keeping the game secure.

Moderators read a private message only if its recipient reports it.

3. Cookies

Two strictly necessary cookies: the session cookie that keeps you logged in, and the language you chose for the game. No advertising cookies and no analytics.

4. Service providers

Application and database hosting: Railway. Email delivery: Resend. Payments: Stripe. These providers may process data outside your country, under appropriate contractual safeguards.

5. What other players see

Your commander name, your planets and their coordinates, your alliance and your ranking are visible to other players. Your email address never is.

If you or your opponent share a battle report, its public page (anyone with the link) shows both commander names, the losses and the loot, never coordinates.

6. Retention

Data is kept while your account exists. When you delete it, data is erased immediately, except: the content of reported messages (kept for moderation, no longer linked to your account), the activity log (kept for its normal period, with IP addresses removed) and billing records Stripe must keep by law. Backups are overwritten within 30 days.

The activity log is kept for 1 year, then deleted automatically.

7. Your rights

You can view and correct your email and password in Settings, and delete your account at any time (Settings → Delete my account).

To get a copy of your data, object to processing or ask any question: [CONTACT EMAIL]. You may also complain to the data protection authority in your country.

8. Children

The game is not meant for children under 13. If you believe a child under 13 gave us personal data, contact us and we will delete it.