Privacy

Who we are

AstroExpanse is run by FlowCode s.r.o., Karpatské námestie 770/10A, 831 06 Bratislava, Slovakia. For anything about your data, write to privacy@astroexpanse.com.

When you play

Your account:

• your email address and password (the password only as a one-way hash, which nobody can read back),
• whether and when you confirmed the address,
• your language and game settings,
• where you came from, if the link that brought you carried it (ref or utm_source), saved once when you sign up.

In the game:

• your commander names, emblem and titles, and what you do in a universe: planets, fleets, research, battle and espionage reports,
• which days, for how many minutes and on which screens you play, and where your commander stands at the end of each day. We use these, with daily totals for the whole universe, to balance the game and plan the next universe, never to show you ads,
• the chat messages, private messages and alliance circulars you write. Moderators can read them to enforce the rules, and moderation actions are logged.

Feedback and errors:

• what you send through the Feedback button, with the screen you were on, the game version, your browser (its user-agent string), language and window size,
• if the game crashes in your browser, the error message, with the same details, sent automatically.

Your sign-in and settings are kept in your browser’s local storage, because the game can’t work without them. There are no advertising or analytics cookies, and no trackers.

If you joined the waitlist

We store your email address, the language of the page, where you came from (utm_source, utm_campaign or ref, if the link carried it), and the time you gave consent and confirmed your address.

Why

• To run your account and the game (GDPR Art. 6(1)(b), the contract between us when you sign up): sign-in, password reset, and the game itself.
• To keep the game fair and safe (Art. 6(1)(f), legitimate interest): moderation, investigating multi-accounting and bug abuse, and the admin log.
• To fix the game and learn which channels bring players (Art. 6(1)(f)): feedback, crash reports and where you came from.
• To balance the game and plan the next universe (Art. 6(1)(f)): which days and how long you play, and where your commander stands each day.
• The waitlist (Art. 6(1)(a), your consent): invites and launch news, the friend who referred you, and which channels bring players.

We send you only emails about your account (confirming the address, password reset codes), plus the waitlist emails if you joined it. We don’t sell data, show ads or build advertising profiles.

Who processes it for us

• Convex stores the game and its data. It may process data outside the EU under standard contractual clauses.
• Resend delivers our emails and receives your address for each email it sends, under the same safeguards.
• Amazon Web Services and Cloudflare deliver the website and the game’s files. They see your IP address while doing so; we don’t store it.

Our Discord is run by Discord under its own privacy policy.

How long

• Your account, while you have it. You can delete it at any time in Settings → Account → Delete account. Your sign-in and email address go at once, your commanders and planets shortly after.
• What other players keep: messages you wrote to them, reports they hold of battles with you, and your feedback stay, but they no longer lead to your address. The name you used in them stays. The admin log records that an account was deleted by its commander names, never its address.
• Backups of the game’s database are kept for 90 days, then deleted.
• The waitlist, until you unsubscribe or ask us to delete it, and at the latest 12 months after the game’s public launch. An address not confirmed within 30 days is deleted. Every email carries an unsubscribe link, which deletes your address at once.

Your rights

You can ask to see your data, get a copy of it, correct or delete it, object to processing based on legitimate interest, or withdraw consent, by writing to privacy@astroexpanse.com. You can also complain to the Office for Personal Data Protection of the Slovak Republic, or to the data protection authority where you live.