Privacy

Updated 1 November 2026

What we keep

• Your account and your game. Opening the game creates no account. Until you press New game or sign in by email, the device connects as a guest under a random key of its own. New game creates an account, a code from your email opens one you already have, and either way the device gets a random sign-in token. The token itself stays on your device; the server keeps only its hash, plus everything that happens in the game: buildings, fleets, reports, and your player name if you set one.
• What is public. Your player name, a short random code that tells you apart (eight characters, shown as unknown@code while you have no name), your alliance’s tag, your points and how many bases you hold are shown to every player in the game and to anyone on this site’s leaderboard. Nothing else about your empire is: not where it lives, not its fleet.
• An email address, if you attach one. It is used to send a six-digit code for signing in on another device. No newsletters, no advertising.
• Technical logs. To prevent abuse, the server records the time and IP address of code requests, along with ordinary service logs. It also keeps the IP addresses your account has connected from, up to the last 200, each with the dates it was first and last seen and the country it belongs to. The country is looked up in a database on our own server; your address is not sent to anyone for that. These records are deleted with the account.
• Game version and download counts. When you sign in, the game tells the server its version and system (Windows, macOS, Android); the server keeps them beside your device’s token, to know how many play an old version, and notes when each of your sessions starts and ends, to know how many play and for how long. Downloads of the game are counted, which file, which version, which day, without keeping any address.
• Notifications on your phone, if you switch them on. The Android game from Google Play can tell you about a finished building or a fleet flying at your base while it is closed. If you switch this on in Options, the game gets a token from Google’s Firebase Cloud Messaging that names this installed game, and gives it to our server with your language and the kinds of news you chose. Switching it off or signing out removes the token, and it is deleted with the account.
• Chat. What you write in the game’s chat is shown to the players in that room. The server holds the last 200 lines of each room in memory and writes none of them into the database; they are gone when the server restarts. It stores that your account accepted the chat rules and when, the players you hid, and the date until which an operator took you off the chat, if one did. A report on a line keeps that line, the reason chosen and a few lines around it with their authors’ names, so that an operator reads it as it was said. These records are deleted with the account.

Who else is involved

• Sign-in letters are sent by Resend, which receives the address and the letter.
• Notifications are delivered to a phone by Google (Firebase Cloud Messaging), which receives the token and the text of each notification.
• The game and this site run on a rented server.

What there isn’t

No ads, no visit counters, no third-party trackers, no cookies. The site remembers only your chosen language, in your browser.

Deletion

You can delete your account yourself, in the game: open Options and hold Delete account, at the bottom, for five seconds. If an email address is attached, the game also asks for a code sent to that address.

The account is deleted 30 days later. During those 30 days nobody can play it, your empire stays in the world as the empire of an absent player, and the title screen on your device shows the date and the Restore account button. A deletion can be asked for once a day.

After 30 days the server deletes the account, the empire, your in-game mail, the email address, the device tokens and the record of IP addresses, and your player name becomes free. Two things remain: what other players hold about you, such as their scouting reports and the battles in their mail, and the nightly backups of the database, which keep the deleted data for up to two more weeks.

If your version of the game has no such button yet, or you cannot open the game, write to support@playstarfab.com from the attached address, or tell us your player name, and we will delete the account.