Privacy Policy — Coldstar

Last updated: 7 July 2026

1. Controller

The data controller is Coldstar Games ("we"), operator of Coldstar, reachable at legal@playcoldstar.com.

2. Data we collect

Registration data (email, pilot name; the password is stored encrypted by our authentication provider — we never see it in clear); game data (progress, stats, ships, inventory, missions, ranking, purchases); technical data (IP address and session identifiers, used for security, abuse prevention and proper functioning); communications (text chat and proximity voice chat); payment data (when purchases are enabled, handled directly by our payment provider — we only receive transaction confirmation, never your full card details). Your pilot name, clan, rank and game stats are visible to other players and may appear in public rankings.

3. Why we process it (legal basis)

To provide the game and your account (contract performance); for security and anti-cheat/anti-abuse, and to detect and act against unauthorized copies or clones of the client (our legitimate interest in a fair game and in protecting our service and intellectual property); to handle payments and related tax obligations (contract and legal obligation).

4. Proximity voice chat

Voice chat transmits your voice in real time to nearby players, only while you use it, and is not recorded or stored by us — except that, if another player reports you, a short clip of the voice around that moment is captured and kept for a limited time (up to 30 days) solely for moderation, then deleted. By using it you are aware that other (unknown) players can hear you: do not share personal data by voice.

5. Who we share data with

Providers that process data on our behalf: Supabase (registration, login, database); Hetzner (game servers, data center in Germany, EU); Cloudflare (site and game delivery, and anti-bot verification at login); LiveKit (proximity voice chat); Resend (transactional emails such as signup confirmation and password reset); Stripe (payments, when enabled). We do not sell or share your data with third parties for marketing. Some providers may process data outside the EU; where so, we ensure adequate safeguards (standard contractual clauses) are in place.

6. Retention

We keep account data while the account is active. If you close your account or ask us to, we delete it within a reasonable time, except what we must keep by law (e.g. tax records of purchases). In case of a reset (wipe), associated game data may be cleared; account data remains unless you request deletion. Text chat messages are kept for up to 6 months and technical/security logs (including IP addresses) for up to 90 days. We may retain limited data (e.g. account identifiers and ban records) for as long as necessary to enforce bans and prevent abuse.

7. Your rights

You may access, correct, delete, restrict or object to the processing of your data, and request portability. To exercise them, write to legal@playcoldstar.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante, www.garanteprivacy.it) or with the supervisory authority of your EU country of residence.

8. Minors

Coldstar is intended for people aged 18 or older (also due to voice chat between strangers). We do not knowingly collect data from anyone under 18; if we become aware of such an account, we close it.

9. Local storage

The game stores some settings and session data on your device (browser local storage) to function. We do not use advertising-profiling cookies or third-party commercial tracking.

10. Changes

We may update this policy; material changes will be announced in-game or by email.

Contact: legal@playcoldstar.com