Privacy Policy
The short version: we need an email address to sign you in and your gameplay to run the galaxy. We run no ads, no analytics and no trackers, we never sell or rent personal data, and when you delete your account every piece of personal data goes. What stays is the galaxy itself: your empire is abandoned to its own people rather than deleted, because the map is never edited on one player's behalf. The long version follows, and it is the version that counts.
- Who we are and what this covers
- What we collect
- What we never collect
- Why we use it, and on what legal basis
- What other players can see
- Who processes data for us
- Where data is stored and international transfers
- How long we keep it
- Deleting your account, and what remains
- Your rights
- Security
- What stays on your device
- Children
- Changes to this policy
- Contact
1. Who we are and what this covers
Astral Sovereignty is made and operated by Space Junk Industries LLC, a Delaware (United States) limited liability company ("we", "us"). This policy covers the personal data we process when you visit our websites, play the game in a browser or in the Android app, use the game's Discord features, or contact us. It does not cover Discord, Google or Cloudflare's own services, which have their own policies.
2. What we collect
| Category | What, exactly | Where it comes from |
|---|---|---|
| Account | Your email address; the account name you choose; one-time sign-in codes (stored hashed, valid for minutes); your active sessions (a token per device); a support code we generate so you can identify your account to us without revealing your email. | You, when you register and sign in. |
| Google Sign-In (optional) | Your Google account's email address and its permanent Google identifier — nothing else: not your name, picture or contacts. We ask Google for the narrowest permission that exists. A Google address that already has an account here joins that account rather than making a second one. | Google, only if you choose Sign in with Google. |
| Gameplay | Your empire's name and everything it does: orders, colonies, fleets, ship designs, research, reports, standings, alliance membership, the names you give things, private map notes and tags, and your automation settings. Also the "seen" markers and dismissals that keep your interface tidy. | You, by playing. |
| Support | Tickets you file in the game and emails you send us, with their subject and content. | You, when you contact us. |
| Discord (optional) | Your Discord user ID and username, the link between it and your account, and the commands you send the game's bot. | Discord, only if you link it or use the bot. |
| Notifications (optional) | Your email notification preferences and, if you turn on push notifications, the push subscription your browser gives us (an endpoint URL and keys). | You, when you turn them on. |
| Technical and security | IP addresses, request logs, rate-limit counters, and an audit trail of account events (sign-in, sign-out, changes to the account) that records the event, when it happened and a non-reversible hint of the email involved. | Your device, automatically, whenever it talks to our servers. |
3. What we never collect
No advertising identifiers, no analytics SDKs, no third-party trackers, no location, no contacts, no device fingerprinting, no payment details (there is nothing to buy). The game client talks to our game servers and to no one else. We do not sell, rent or trade personal data, and we do not build profiles of you for anyone.
4. Why we use it, and on what legal basis
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Running your account and the game you asked to play: signing you in, resolving your orders every tick, showing you your reports | Account, gameplay, technical | Performance of our contract with you (the Rules of Play) |
| Keeping the service and other players safe: rate limits, abuse and cheat detection, debugging defects, the account audit trail | Technical and security, gameplay | Our legitimate interest in a fair, working game, which we judge does not override your interests because we keep only what those tasks need |
| Answering you when you contact us | Support | Performance of our contract; legitimate interest in keeping a record of what we told you |
| Optional features you switch on: Google Sign-In, Discord play, email and push notifications | Google Sign-In, Discord, notifications | Your consent, which you withdraw by switching the feature off or unlinking it |
| Announcing changes that affect you (releases, maintenance, changes to these policies) | Account (email), Discord | Legitimate interest; legal obligation where notice is required |
| Complying with the law and responding to lawful requests | Whatever the request lawfully requires | Legal obligation |
We do not use your data to make automated decisions with legal or similarly significant effects on you. The tick engine applies the same game rules to every empire; that is game logic, not profiling.
5. What other players can see
Astral Sovereignty is a multiplayer game, so some of your gameplay is visible to others by design: your empire name, your standing in the power rankings, your alliance and its name and tag, the names of colonies and fleets that other empires have actually met or scouted, and anything your fleets do where other fleets can see them. Your email, account name, Google and Discord identities, support history, private map notes, tags and automation settings are never shown to other players. Rivalry, deception and alliances between empires are part of the game; abuse of the person behind an empire is not (Rules of Play, section 4).
6. Who processes data for us
We use a small number of service providers, each bound to process data only to provide their service to us:
- Cloudflare, Inc. — sits in front of the game and the websites, delivering them and protecting them from attack. It processes visitor IP addresses and request metadata to do that.
- Brevo (Sendinblue SAS) — delivers our sign-in-code and service emails to your address, and so processes your email address and the content of those emails.
- Google LLC — verifies your identity if, and only if, you use Sign in with Google; and distributes the Android app through Google Play, where Google's own policies apply to the store.
- Discord Inc. — carries the game's Discord features if you use them.
- Our hosting provider (currently netcup GmbH, Germany) — runs the servers the game and its database live on.
We do not share personal data with anyone else, except where the law requires it or where it is necessary to protect the service or other players from harm — and then only what is necessary.
7. Where data is stored and international transfers
The game servers and database are hosted in Germany, in the European Union. Cloudflare, Google and Discord operate globally, so data that passes through them may be processed outside the EEA and the United Kingdom; each of them provides recognised safeguards for such transfers (for example standard contractual clauses or an applicable adequacy decision). If you play from outside the EU, your data is transferred to the EU to be processed. Space Junk Industries LLC is a United States company, so our own operator access to those servers is access from the United States; we make it under the same safeguards, and only for the purposes in section 4.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account (email, account name, sessions) | As long as your account exists. Sessions end when you sign out or they expire. |
| Sign-in codes | Usable for minutes; the hashed records are purged within 7 days. |
| Gameplay records | For the life of the galaxy they belong to. A retired galaxy's world is archived or removed on our schedule. Reports are kept for the shard's report window (a year) and then aged out. |
| Support tickets and emails | While we are helping you, plus a reasonable record afterwards; deleted with your account. |
| Discord link, notification preferences, push subscriptions | Until you unlink or switch them off, or delete your account. |
| Account audit trail | 180 days, then aged out. On account deletion its identity is scrubbed immediately: what remains is the fact that an event happened and when, linked to nothing. |
| Request logs and rate-limit counters | Days, on a rolling basis. |
| Database backups | 14 days on a rolling basis, then overwritten. A backup taken before your deletion may hold your data until it expires; backups are never restored to bring back a deleted account. |
9. Deleting your account, and what remains
You can delete your account at any time from inside the game (More → Account → Delete account) or by email; the exact steps are on the account deletion page. Deletion begins immediately and is complete within 30 days, usually within the hour.
Deleting your account removes all of your personal data: your email address, account name, sign-in codes and sessions, Google and Discord identities, support tickets and correspondence, notification and push settings, private map notes, fleet and design tags, the empire bio you wrote, and your empire's name. The audit trail is stripped of anything that identifies you. Your email address is released and can be used for a fresh account, which starts from nothing like everyone else's.
Your empire is abandoned, not deleted. The galaxy is a shared world that other players have acted in, and under the Rules of Play the map is never edited on any one player's behalf; deleting an empire would hand its neighbours free territory and erase the history of everyone who dealt with it. Instead its citizens take over: the empire is given a new, system-generated name and is run from then on by the same computer players that run every other non-player empire, under the same rules as everyone. Its colonies, fleets, designs and battle history remain part of the map as anonymous game records. Your old empire name is rewritten to the new one wherever other players' reports and notes quoted it. The names you gave colonies, fleets and ship designs remain with the map; they are not linked to you, and if one of them identifies you we will rename it on request.
None of what remains is personal data: it cannot be linked to you by us or by anyone else, which is why it can stay when everything about you has gone.
10. Your rights
Wherever you are, you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, and object to or ask us to restrict a particular use of it. Email [email protected] from your account's email address — that is how we know a request is yours, because there are no passwords to check — and we will answer within 30 days.
If you are in the EU/EEA or the United Kingdom, these are your rights under the GDPR / UK GDPR (access, rectification, erasure, restriction, portability, objection, and withdrawal of consent), and you also have the right to lodge a complaint with your local data protection authority. If you are in California or another jurisdiction with its own privacy law, the same rights apply to you through the same address; we do not sell or share personal data for advertising, so there is nothing to opt out of.
11. Security
All traffic is encrypted in transit. There are no passwords to leak: sign-in codes are single-use, expire in minutes and are stored hashed. Inside the service, each component reaches the database through its own least-privilege role, so for example the game's tick engine has no access to your support history and the public API cannot rewrite the map. Backups stay on the database server, restricted to the operator, and expire on a rolling schedule. No system is perfectly secure; if we ever discover a breach that affects your personal data we will tell you and, where required, the authorities.
12. What stays on your device
We set no cookies. The browser and the app keep a session token (so tomorrow you are still signed in) and interface preferences (collapsed cards, dismissed notices, map settings) in your device's local storage. Signing out or clearing your browser data removes them.
13. Children
Astral Sovereignty is for players aged 13 and over. We do not knowingly collect data from children under 13; if you believe a child has created an account, email us and we will delete it.
14. Changes to this policy
If this policy changes in a way that matters, we will say so in the game's What's New and on Discord before it takes effect. The effective date at the top of this page always tells you which version you are reading.
15. Contact
Space Junk Industries LLC · registered in the State of Delaware, United States · [email protected]