Privacy Policy

1.Who is responsible

DEMO COMPANY LTD, a company registered in the United Kingdom under company number 11223344, registered office 1 Demo Street, London, EC1A 1AA, United Kingdom, is the controller of the personal data described here. For anything about your data, write to info@example.com or use the contact form and choose "Privacy and personal data".

2.What this policy covers

This website, the Astra Empire game worlds on it, our emails, and the contact you have with us through the contact form or by email.

3.What we collect

• Account: your name, surname, email address and password. The password is stored only as a secure one-way hash; we cannot read it.
• Billing: the name, email, country, address, city and postal code you enter at checkout or save in your profile.
• Orders: what you bought, the amount, the time, the payment status and the payment provider's reference. We never receive or store your full card details.
• Game data: your player names, planets, fleets, research, points and rank, battle and spy reports, your Aether balance and its history, and the messages you send and receive in the Game.
• Support: what you write to us through the contact form or by email, and our replies.
• Technical data: your IP address, browser and device type, and the time of your requests, recorded in our server logs and with your sign-in session to keep the Service working and secure.

We do not ask for sensitive data, such as health information. Please do not send it to us.

4.Cookies and similar technologies

We set one essential cookie when you sign in: a session cookie that keeps you signed in and protects your account. Without it the Game cannot work, so it needs no consent. It ends when you sign out or when the session expires.

Your browser may also keep small game preferences (such as the last planet you looked at) and your answer to our cookie notice in its local storage. They stay on your device and are never sent to us.

When you pay, you enter your card details on our payment provider's secure page, which may set its own strictly necessary cookies for fraud prevention and 3-D Secure checks.

We use no analytics, advertising or social media cookies, and no tracking pixels. If we ever add any, we will ask for your consent first and update this policy.

5.Why we use it and our legal basis

Each use has a legal basis under the UK GDPR and the EU GDPR:

• Running your account and the Game, delivering purchases, sending receipts and invoices: performing our contract with you (Article 6(1)(b)).
• Keeping accounting records and invoices: our legal obligations under accounting and tax law (Article 6(1)(c)).
• Keeping the Service secure, preventing fraud, cheating and abuse, and enforcing our terms: our legitimate interest in a safe and fair Game (Article 6(1)(f)).
• Answering your messages: performing our contract with you, or our legitimate interest in answering people who contact us (Article 6(1)(b) or (f)).
• Establishing or defending legal claims: our legitimate interest (Article 6(1)(f)).

We send no newsletters or marketing emails. We do not sell or rent your data, we do not use it for advertising, and we make no decisions about you by automated means alone that have legal or similarly significant effects. Automated checks against cheating or fraud are always reviewed by a person before an account is closed.

6.What other players see

Other players in a world see your player name, planet names and positions, points and rank, and the messages you send them. Your account name, email and billing details are never shown to other players.

7.Who receives it

Only the service providers we need to run the Service, each bound by contract to protect your data and to use it only on our instructions:

• Hosting: the provider whose servers run the website, the Game and its database.
• Payments: our payment provider, which processes your payment and receives your billing details and the amount. It handles card data under its own security certification.
• Email: the provider that delivers our receipts, invoices and replies.

We also share data where the law requires it (for example with tax authorities, or with the police under a valid order), or with a buyer of our business, who must keep this policy.

8.Transfers abroad

We keep your data in the United Kingdom and the European Economic Area where we can. If a provider processes data in another country, we make sure it is protected by an adequacy decision or the standard contractual clauses approved for that purpose. You can ask us for a copy of the safeguards.

9.How long we keep it

• Account and game data: while your account exists. When you delete your account, it is deleted at once, including your players, messages and reports. A player who left a world leaves only empty, abandoned planets behind.
• Orders and invoices: 6 years after the end of the financial year of the purchase, as accounting and tax law requires. They are kept without the link to your account after you delete it.
• Support messages: up to 2 years after our last reply, unless they are needed for a payment dispute or a legal claim.
• Server logs and sign-in sessions: sessions end when you sign out or expire; logs are kept for up to 30 days.
• Backups: deleted data can remain in encrypted backups for up to 30 days until they are overwritten.

10.How we protect it

Data travels over encrypted connections, passwords are stored as one-way hashes, and only the people who need it to run the Service can access it. If a breach ever puts your data at risk, we will tell you and the supervisory authority as the law requires.

11.Your rights

You can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it is wrong or incomplete (most of it you can change yourself under Profile)
• delete it (you can delete your whole account yourself under Profile)
• restrict how we use it
• hand it to you or to another company in a machine-readable format
• stop using it where we rely on our legitimate interest

Write to info@example.com. We reply within one month, free of charge, and may first ask you to confirm that the account is yours.

If you believe we handle your data unlawfully, you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom, ico.org.uk, or to the data protection authority of the country where you live or work. We would be glad to hear from you first.

12.Children

The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, please tell us at info@example.com and we will delete it.

13.Changes to this policy

When we change this policy, we publish the new version here and change the date at the top. If a change affects how we use data you have already given us, we tell you by email first.