Privacy & legal notice

1. Accounts, confirmation and gameplay

We store your email address, a password hash, public display name, [gamertag] and requested planet name when you register. The confirmation link is valid for 24 hours; only its hash is stored separately from the email queued for delivery. Gameplay and homeworld assignment remain locked until confirmation. An activated account stores colonies, resources, buildings, research, fleets, reports, points and settings. Other players see your public display name, [gamertag], points and alliance membership. Email addresses and password hashes are private.

Account operation, confirmation and requested support are based on Article 6(1)(b) GDPR. Required registration fields are necessary to provide the game account.

2. Messages and alliance pages

Private messages contain sender, recipient, text and timestamps and are displayed only to the participants. They are not end-to-end encrypted; the operator can technically access the database. Deleting a message removes your copy from the mailbox; the other participant may retain theirs. Reports can be removed from your view without changing the underlying game result. Alliance pages, logos and member identities are visible to other players; applications are limited to the applicant and alliance leadership.

3. Email delivery and optional alerts

Hostinger Email sends the required registration confirmation and the game alerts you select. The mail service processes the recipient address and message content. Alert categories and language are stored in your account; all optional categories start disabled. Their basis is your consent under Article 6(1)(a) GDPR, which you may withdraw at any time in Settings for future delivery. Unsubscribing from alerts does not disable required account confirmation. Delivery records prevent duplicate messages; completed or cancelled queue entries have their text cleared.

4. Hosting and security

The website and game run on a Hostinger VPS. Hostinger also provides email delivery and therefore processes data needed to operate these services. Hosting and mail infrastructure may involve the Hostinger group and its processors. Details of their processing locations and international transfer safeguards are described in the provider's privacy policy. Hostinger privacy policy.

Technical access logs can include IP address, time, requested path, response code and browser information. Error logs and temporary rate limits help detect failures and abusive requests. Their basis is our legitimate interest in secure, reliable operation under Article 6(1)(f) GDPR. We do not use advertising or analytics trackers. Fonts, game artwork and video are served by this site.

5. Necessary browser storage

The HttpOnly robotant_pending cookie keeps a pending registration for up to 24 hours; robotant_simulation keeps an activated login for up to 180 days. Logging out revokes the session. Local storage remembers your selected language; session storage remembers entry into the game for the current tab. These functional choices are stored until you clear them or the relevant session ends. Access to necessary browser storage follows § 25(2) no. 2 TDDDG.

6. Retention and removal

Account and game data are retained for the duration of the account and beta operation. Logout alone does not delete them. Expired pending registrations are removed during maintenance; confirmation links stop working after 24 hours. You can delete mailbox entries yourself. A retained recipient copy, backups or records needed to investigate abuse may remain after a local deletion. You can permanently delete your account under Help & settings after confirming with your password. This removes your account, colonies and private messages from the active game. Previously delivered reports in other players’ histories and existing backups may remain. Contact support for a copy of your data, corrections or help with deletion. We restrict records that must be retained for legal obligations or specific disputes to that purpose and remove them when no longer required.

7. Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction and data portability, object to processing based on legitimate interests, and withdraw consent. Contact the controller in the legal notice below. You may also complain to a data protection authority, including the Baden-Württemberg authority. Contact the authority.