Privacy Policy

Galactic Foundry (Android game and game server) · Last updated: 2026-10-30

1. Who is responsible

The controller of your personal data is Ing. Ondřej Novotný, Ph.D., IČO 19525567, Nové sady 988/2, 602 00 Brno, Czech Republic ("we"), the developer of the game Galactic Foundry. Contact for all privacy questions and requests: 0ndr4N@proton.me.

2. In short

You play without an e-mail address, password or real name. The game creates your account automatically: it is a random player ID, not your name.
We do not sell your data for money and do not use it for anything other than described here.
Ads are optional reward videos that you start yourself. Whether they may be personalised depends on where you live and on your choices (section 4).
You can export your data or delete your account at any time in the game (Settings → Account) or at https://api.galacticfoundry.eu/delete-account.

3. Data processed by our game server

Data	Purpose	Legal basis (GDPR)
Random player ID – a random identifier created on first launch; an installation identifier stored only as a one-way hash (prevents duplicate accounts).	Operating your game account	Contract, Art. 6(1)(b)
Sign-in tokens – short-lived access tokens and refresh tokens (stored only as hashes), their creation, use (rotation), revocation and expiry times.	Keeping you signed in securely	Contract, Art. 6(1)(b)
Display name (public; default "Engineer-XXXX") and the history of its changes. If other players report your name, the reported name and the number of reports (never who reported it) are kept for review; an offensive or impersonating name is replaced with a new default name.	Public profile, leaderboards, moderation	Contract, Art. 6(1)(b)
Public profile stats – empire level, number of Quantum Resets, badges, best challenge result.	Public profile visible to other players	Contract, Art. 6(1)(b)
Game progress (cloud save) – a copy of your save game and its summary (empire level, lifetime credits, Quantum Cores, resets).	Backup and transfer to a new device	Contract, Art. 6(1)(b)
Weekly challenge results – your attempts, the game commands you send (e.g. "upgrade the mine at second 120"), scores, ranks, rewards and automatic fair-play flags.	Running the challenge, fair leaderboards, preventing cheating	Contract, Art. 6(1)(b); legitimate interest in fair play, Art. 6(1)(f)
Purchase records – product, Google Play order number and purchase token, purchase state, times, the items granted, and which of your game accounts own a purchase. For purchases made in the game, the app passes Google Play a one-way hash of your player ID so the purchase can only be delivered to your account. We never receive your payment details.	Delivering purchases, handling refunds, accounting	Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c)
Google Play Games link (not available in the current version of the game) – if you are signed in to Google Play Games on your device, the game links your game account to your Play Games profile automatically when it starts, without asking, so that you can restore the account on a new device. Google stores the link between your Play Games profile and an opaque identifier derived from your player ID. Our server only records that the account is linked and when; it never receives your Play Games ID, name or e-mail. If you do not use Google Play Games, nothing is linked. Deleting your account removes the link.	Restoring your account on a new device	Contract, Art. 6(1)(b)
Account deletion code – stored only as a hash.	Deleting your account without the app	Legal obligation, Art. 6(1)(c)
Server logs – time, requested function, result, request ID, a shortened IP address (IPv4 without the last part, IPv6 shortened to /48) and, for these events only, the pseudonymous player ID: account events (sign-up, Play Games link and restore, deletion code, data export, deletion request and deletion, and how we handle your e-mailed requests), sign-in events (a sign-in token used again), profile events (name changes, also by us; for a name report only the ID of the reported player), weekly challenge events (start of an attempt, fair-play flags) and purchase events (verification, restore, items refunded after use). Never full IP addresses, tokens or purchase tokens.	Security, abuse prevention, troubleshooting	Legitimate interest, Art. 6(1)(f)
Security records – security-relevant events such as sign-up, purchases or account deletion, without IP addresses.	Security, fraud prevention	Legitimate interest, Art. 6(1)(f)

Data on our server is stored with our hosting provider, who processes it only on our behalf.

We protect your data: the game talks to our server only over encrypted connections (HTTPS/TLS); the sign-in data on your device is encrypted with a key kept in the Android Keystore; on the server, sign-in tokens and the deletion code are stored only as hashes; access to the server and its database is restricted to us, and backups kept outside the server are encrypted.

4. Services of Google used in the app

Google Play (billing) processes payments for in-app purchases. We only receive the purchase confirmation. The Google Play Billing library built into the game also sends Google technical diagnostics about the connection to the payment service: results and errors of billing calls, the library and app version, device model and manufacturer, Android version, language and country, mobile network and connection type; Google also sees your IP address. This happens when you open the shop and when the game checks for unfinished purchases and refunds as it starts or comes back to the screen, also when usage statistics and crash reports are switched off – the library cannot be configured otherwise. We do not receive these diagnostics; Google uses them to run and improve Google Play billing. Legal basis: our legitimate interest in offering working in-app purchases, Art. 6(1)(f).
Google Play Games Services (not available in the current version of the game) – used only if you are signed in to Google Play Games on your device: sign-in, the automatic link described in section 3 and restoring your account on a new device.
Firebase Analytics – usage statistics (e.g. completed tutorial, screens used) with a random app instance identifier, never your account, name or anything you type. Google derives an approximate location (such as the country or city) from your IP address, and purchases in the game are recorded as events with the product ID. Collected only if you switch on "Usage statistics" in Settings → Privacy and, in the EEA, the United Kingdom and Switzerland, your choice in Google's consent form (below) also allows storing data on your device. Legal basis: your consent, Art. 6(1)(a). Switching it off stops collection and deletes the statistics not sent yet.
Firebase Crashlytics – crash reports (device model, system version, technical crash details, app instance identifier) so we can fix errors. Sent only if you switch on "Crash reports" in Settings → Privacy. Legal basis: your consent, Art. 6(1)(a). Switching it off deletes reports not sent yet.

Google processes the usage statistics and crash reports on our behalf. We do not use them for advertising and do not link them to Google's advertising services.

Ads (Google AdMob)

The game shows only optional reward videos that you start yourself, for a reward stated before the video – never during the tutorial or in the weekly challenge. When the game offers such a video, the app requests an ad from Google AdMob in advance so that it is ready if you choose to watch it. For ads, AdMob processes your advertising ID, your IP address (from which Google may infer an approximate location), information about your device and the app, and your interactions with the ad. Google is an independent controller of this data; see how Google uses information from apps that use its services. What applies depends on where you are:

EEA, United Kingdom, Switzerland: when you first open the game, Google's consent form (User Messaging Platform) asks for your choice; no ad is requested before you answer it. If you consent, ads may be personalised. If you consent to storing data on your device but not to personalisation, ads are non-personalised (based on context such as the app and your approximate location, not on a profile of you). If you do not consent, only limited ads are shown: they are not personalised and Google limits its processing to what is needed to show them, count them and prevent fraud. You can change or withdraw your choice at any time in Settings → Privacy → Privacy options. Legal basis: your consent, Art. 6(1)(a); for limited ads, our legitimate interest in funding the free game with ads that you choose to watch, Art. 6(1)(f).
US states with consumer privacy laws (such as California, Colorado, Connecticut, Virginia or Utah): ads may be personalised. You can opt out of the use of your data for targeted advertising (the "sale" or "sharing" of personal information under these laws) at any time in Settings → Privacy → Privacy options; Google then restricts how it processes your data and the ads are no longer personalised. See also section 7.
All other regions: no consent form is shown and the game does not offer the Privacy options entry. Ads may be personalised based on your advertising ID. You can reset or delete your advertising ID at any time in your Android settings (on most devices Settings → Privacy → Ads, or Settings → Google → Ads); once it is deleted, it can no longer be used to personalise ads.

Ads only appear when you start them, and the game remains fully playable without them. Ad content is limited to material suitable for teens.

These services are provided by Google Ireland Limited and Google LLC. Data may be transferred to the USA on the basis of the EU–US Data Privacy Framework or standard contractual clauses. Details: policies.google.com/privacy. You can switch usage statistics and crash reports on or off at any time in Settings → Privacy.

5. How long we keep data

On our server:

Account data (profile, saves, challenge data, granted items): until you delete your account. An account that can no longer be signed in to – not linked to Google Play Games and without a valid sign-in session (sessions expire 180 days after the last use) – is deleted automatically 30 days later. An account linked to Google Play Games can always be restored, so it is kept until you delete it (linking is not available in the current version of the game).
When you restore your account through Google Play Games on another device (not available in the current version of the game), the temporary account created there is merged into it (purchases and items you have not received yet move over) and deleted after one day.
Purchase records: after deleting your account, kept without any link to you (the player ID is removed) for as long as accounting and tax law requires (up to 10 years).
Security records: kept for up to 2 years; the player ID is removed when you delete your account.
Sign-in tokens: valid for 180 days after the last use; used or revoked tokens are deleted 30 days later. Server logs are kept for at most 30 days.
Backups are overwritten within 14 days, so deleted data also disappears from them.

In Google's services:

Usage statistics (Firebase Analytics): event data linked to the app instance identifier is kept for 2 months; after that only aggregated reports without identifiers remain.
Crash reports (Firebase Crashlytics): kept for 90 days, then removed from Google's systems.
Statistics and crash reports not sent yet stay on your device until they are sent or you switch them off.
Ad data (AdMob) and the Google Play Billing diagnostics: Google keeps them as described in its own rules, policies.google.com/technologies/retention.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. Consent can be withdrawn at any time with effect for the future: usage statistics and crash reports with their switches in Settings → Privacy, ad consent in Settings → Privacy → Privacy options (offered where Google's consent form applies, see section 4). The quickest way is in the game: export all your data as JSON (Settings → Account → Export data) or delete your account (section 8). For other requests, or if you cannot use the game, write to 0ndr4N@proton.me and include your player ID and your account deletion code (both under Settings → Account). Player IDs are visible to other players, for example on leaderboards, so the deletion code is how we confirm that the account is yours: on the basis of the player ID alone we never hand out data, and the only change it can lead to is the deletion after 14 days without use described in section 8. We send an export only to the e-mail address the request came from. If you no longer have the game or the code, you can still have your account deleted (section 8). We answer within one month; if a request is complex, we may extend this by up to two more months and will tell you why. You may also lodge a complaint with a supervisory authority; in the Czech Republic this is the Office for Personal Data Protection (uoou.gov.cz).

7. Information for residents of US states

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia or Utah) and that law applies to us, the following also applies:

What we collect: identifiers (the random player ID, the app instance identifier, through AdMob your advertising ID, and your IP address, which Google sees when AdMob or the Google Play Billing library contacts it), commercial information (purchase records), internet or other electronic network activity (game commands and challenge results; usage statistics and crash diagnostics if you switch them on; the payment connection diagnostics that the Google Play Billing library always sends to Google, section 4; interactions with ads through AdMob) and an approximate location that Google may infer from your IP address for ads and, if you switch on usage statistics, for statistics. We do not collect sensitive personal information. Sources, purposes and retention are described in sections 3 to 5.
Sale, sharing and targeted advertising: we do not sell personal information for money. Letting Google AdMob use the data described in section 4 for personalised ads may count as "selling" or "sharing" personal information, or as "targeted advertising", under these laws. You can opt out at any time in Settings → Privacy → Privacy options. We do not use usage statistics or crash reports for advertising.
Your rights: to know and access the personal information we hold about you and get a copy of it (Settings → Account → Export data), to correct it, to delete it (section 8) and to opt out as described above. We will not treat you differently for using these rights: you get the same game, prices and rewards.
How to make a request: in the game as described, or by e-mail to 0ndr4N@proton.me with your player ID and your account deletion code – that is how we confirm that the account is yours (section 6); deletion without the code: section 8. We answer within 45 days; if we need more time (up to 45 more days), we tell you why. An authorised agent may make a request for you with your signed permission and your player ID and deletion code. If we decline your request, you can appeal by replying to our answer; if you disagree with the outcome of the appeal, you can contact the attorney general of your state.

8. Deleting your account

In the game: Settings → Account → Delete account. Deletion is immediate and cannot be undone.
Without the app: at https://api.galacticfoundry.eu/delete-account. With your player ID and deletion code the account is deleted at once. With the player ID alone (also by e-mail) it is deleted after 14 days unless it is used in the game during that time, so that nobody can delete the account of someone who still plays. A Google Play order number (GPA.…) from your receipt e-mail, sent to us by e-mail, also proves that the account is yours: we then delete it at once, even without the player ID. Without the player ID or an order number we cannot tell which account is yours; it is then deleted automatically (section 5).
Uninstalling the game does not delete data on our server. Deleting the account does not cancel or refund Google Play purchases.

9. Children

The game is intended for players aged 16 and over. We do not knowingly process data of younger children; if you believe this has happened, contact us and we will delete the data.

10. Changes

We will publish changes on this page and update the date above; we will announce significant changes in the game.