Last updated: 2026-06-23
Empires of Planets ("the Game") is operated from the Republic of Estonia. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller for personal data collected through the Game.
We collect: email address (for authentication and account recovery); commander name and planet names (chosen by you, publicly visible in-game); IP address and browser metadata (for security, fraud prevention, and abuse detection); gameplay data (resources, fleets, research, alliances, chat messages — all server-side game state); push notification tokens (if you opt in to push notifications). We do not collect real names, physical addresses, payment card details, or sensitive personal data categories under GDPR Article 9.
We process your data under the following GDPR legal bases: Contract performance (Article 6(1)(b)) — processing necessary to provide the Game service you registered for; Legitimate interest (Article 6(1)(f)) — security, fraud prevention, abuse detection, and game integrity; Consent (Article 6(1)(a)) — push notifications and optional communications, which you can withdraw at any time.
Your data is used to: authenticate your identity and manage your account; operate game mechanics (resource ticks, fleet resolution, combat, research); display your commander name and game actions to other players as part of normal gameplay; send push notifications about game events (if opted in); detect and prevent cheating, abuse, and unauthorized access; generate anonymized, aggregated gameplay statistics for balance and improvement.
We share data with: Supabase (database, authentication, and serverless functions — EU region); Vercel (application hosting — edge network); Firebase Cloud Messaging (push notification delivery, if opted in). We do not sell personal data. We do not share personal data with advertisers. We may disclose data if required by law or to protect the safety of users.
Account data is retained while your account is active. Gameplay data from completed seasons is archived and retained for historical rankings. Chat messages older than 90 days are archived and may be purged. If you delete your account, personal data (email, commander name associations) is removed within 30 days. Anonymized gameplay statistics may be retained indefinitely.
You have the right to: access your personal data (Article 15); rectify inaccurate data (Article 16); erase your data ("right to be forgotten", Article 17); restrict processing (Article 18); data portability (Article 20); object to processing based on legitimate interest (Article 21); withdraw consent at any time for consent-based processing; lodge a complaint with a supervisory authority (the Estonian Data Protection Inspectorate, or your local authority).
To exercise any of these rights, contact us at privacy@empiresofplanets.com. We will respond within 30 days. We may ask for identity verification before processing your request. Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.
The Game uses essential cookies and browser local storage for: authentication session management; remembering your login preferences; caching resource snapshots for smoother UI. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies under GDPR Recital 30 and the ePrivacy Directive.
Your data may be processed in the EU/EEA by our infrastructure providers. Where data is transferred outside the EEA (e.g., Firebase Cloud Messaging), we rely on Standard Contractual Clauses or adequacy decisions as appropriate under GDPR Chapter V.
The Game is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated through in-game announcements. The "last updated" date at the top indicates when the policy was last revised.
Data Controller: Empires of Planets Email: privacy@empiresofplanets.com Location: Tallinn, Estonia