Starforge Privacy Policy
This policy explains what information the Starforge mobile and web game collects, why we collect it, who processes it on our behalf, and how you can get it deleted.
Who we are. Starforge is developed and operated by Twisted Oak Games
("we", "us"). Starforge is distributed on Google Play under the package name
com.starforgehorizons.
Contact: lordtristgaming@gmail.com
The short version
- You need an account to play, because your ship is stored on our servers, not on your device.
- We collect the email address you sign up with, your game progress, your chat messages, and basic technical logs.
- We do not show ads. We do not use advertising identifiers, and we do not use any third-party analytics or tracking SDKs.
- We do not sell or rent your personal information to anyone, for any purpose.
- You can have your account and its data deleted at any time. See Delete your account and data.
What we collect and why
| Information | Why we collect it |
|---|---|
| Email address and password | To create and secure your account, let you log back in, and let you reset a forgotten password. Passwords are hashed by our authentication provider. We never store them in readable form and we cannot see them. |
| Account and ship identifiers | To link your progress to you. One login can own several ships; each has its own identifier and its own saved progress. |
| Ship name | To identify you to other players. Ship names must be unique and are visible to other players in battles, fleets, chat, and leaderboards. Do not use your real name or any personal detail you would not want public. |
| Game progress | To save your game. This includes your hull and room layout, crew, research, currencies, inventory, battle and campaign results, achievements, daily tasks, and tutorial progress. |
| Social activity | To operate multiplayer features: fleet membership and role, and who you have fought. |
| Chat messages | To deliver messages to their recipients and to enforce our rules. Chat messages are stored on our servers, are visible to the other players in that channel, and are retained so that abuse can be reviewed and acted on. See Chat below. |
| Purchase records | To deliver what you bought and to keep the accounting records the law requires. We receive the product purchased, a transaction identifier, and a store receipt. We never receive your card number, bank details, or billing address. The payment itself is handled entirely by Google Play. |
| Device identifier | Security and fraud prevention. Starforge records a per-installation identifier and the platform you play on so that we can protect accounts, limit how many devices an account is used from, and enforce one active session at a time. |
| Technical logs | To keep the service running and diagnose faults. Our servers automatically log IP address, timestamps, the request made, and any error produced. |
Guest accounts
If you tap Play as Guest, the game creates a real account for you automatically using a
randomly generated internal address (ending in @guest.starforge.local) and a random
password. That address is not a working mailbox and we do not obtain an email address from you.
Two consequences worth understanding before you use a guest account:
- A guest account cannot be recovered. With no real email address on file there is no way to reset the password or restore progress if the installation is lost.
- Deleting a guest account needs your ship name. Because we cannot verify a guest by email, deletion requests for guest accounts must identify the account another way. See the deletion page.
You can attach a real email address and password to a guest account later from the game's settings, which makes it a normal account.
Chat
Starforge includes player-to-player chat. Please treat it as public.
- Messages you send are stored on our servers and delivered to the other players in that channel.
- We store both the message as you typed it and a filtered version, so that we can apply language filtering while still being able to review the original if a message is reported.
- Our moderators can read stored messages when investigating abuse or a rule violation.
- Do not share personal information, contact details, or payment details in chat.
What we never collect
Starforge does not request or collect your location, contacts, calendar, photos, files, microphone, or camera. It does not read other apps on your device. It contains no advertising software and does not access your device's advertising identifier.
Who else processes your data
We use a small number of service providers to run the game. They process data on our instructions only, and are not permitted to use it for their own purposes. This is not "selling" or "sharing" your data for advertising, which we do not do.
| Provider | What they handle |
|---|---|
| Supabase | Database, account authentication, and server functions. This is where your account and game progress live. |
| Cloudflare | Server functions, network delivery, and game asset storage. |
| Google Play (Google LLC) | App distribution and payment processing for in-app purchases. |
| Unity Technologies | The game engine. The engine reports anonymous technical information such as device model, operating system version, and engine version. It is not linked to your account. |
We will also disclose information where we are legally required to, for example in response to a valid legal request, or where it is necessary to protect our rights, our players' safety, or to investigate fraud.
Where your data is stored
Our providers operate data centres in several countries, and your information may be stored and processed outside the country you live in, including in the United States. Wherever it is processed, it is protected by this policy and by our agreements with those providers.
How long we keep it
| Data | Retention |
|---|---|
| Account and game progress | Until you ask us to delete it, or until the account has been inactive for an extended period. |
| Chat messages | Up to 12 months, so that reports of abuse can be investigated. |
| Moderation records (warnings, suspensions) | Up to 24 months, so that repeat offences can be enforced against. |
| Technical and security logs | Up to 90 days. |
| Purchase and tax records | As long as tax and accounting law requires, typically up to 7 years. This applies even after account deletion. |
Your rights
Depending on where you live, you may have the right to:
- ask what personal information we hold about you, and get a copy of it;
- have inaccurate information corrected;
- have your information deleted;
- object to or restrict certain processing;
- withdraw consent where we relied on it;
- complain to your local data protection authority.
To exercise any of these, email lordtristgaming@gmail.com. For deletion specifically, the fastest route is the account and data deletion page. We aim to respond within 30 days. We will not charge you or degrade your experience for making a request.
Security
All traffic between the game and our servers is encrypted in transit using TLS. Passwords are stored only as salted hashes by our authentication provider. Access to player data is restricted at the database level so that one account cannot read another's, and game outcomes such as battles and purchases are decided on our servers rather than on your device. No system is perfectly secure, but we take these measures seriously and will notify you and the relevant authorities if a breach affects your personal information.
Children
Starforge is not intended for children under 13, and we do not knowingly collect personal information from them. During closed testing, access is limited to testers we have invited directly. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and we will tell you in the game before any significant change takes effect.
Contact us
Twisted Oak Games
lordtristgaming@gmail.com