Privacy Policy

1. Controller

Maximilian Weißl
Hochstaufenstr. 3
84508 Burgkirchen
Email: kontakt@maximilian-weissl.de

2. The essentials first

Void Galaxy is a privately operated browser game. We process personal data only to the extent required to run the game. There is no tracking, no analytics, no advertising and no embedded third-party content. Data is never sold and — with the exception of our hosting provider (see section 3) — never shared with anyone. No data is transferred to third countries outside the EU.

3. Hosting and server log files

This website is hosted by: netcup GmbH, Karlsruhe (processor pursuant to Art. 28 GDPR). When you visit the site, the server automatically processes technical access data: IP address, date and time, requested URL, transferred data volume and browser identifier (user agent). These log files are required to deliver the site, keep it stable and fend off attacks (Art. 6 (1)(f) GDPR) and are automatically deleted after a short period.

4. Cookies

We only set strictly necessary first-party cookies (§ 25 (2) no. 2 German TDDDG, Art. 6 (1)(f) GDPR) — which is also why there is no cookie banner here:

• Session cookie — keeps you signed in while playing, and stores your chosen language if you're browsing as a guest. Lifetime: 24 hours.
• XSRF-TOKEN — protects forms against cross-site request forgery attacks. Lifetime: same as the session cookie.
• Remember-me cookie — only set if you tick "Remember me" at login; kept until you sign out.

There are no third-party cookies.

5. Registration and user account

For a game account we process: your freely chosen username (a pseudonym — please do not use your real name), your email address and your password (stored exclusively as a hash, unreadable to us). The legal basis is the provision of the game (Art. 6 (1)(b) GDPR). The email address is used for account verification, password resets and security notices (e.g. when your email address is changed).

Optionally, we send notification emails (round start/end, alliance announcements). You can switch off both categories at any time on your profile page.

6. Game data

Game actions (planets, fleets, scores, alliance memberships, battle reports) are associated with your username and — as is usual for a multiplayer game — partly visible to other players, always under your pseudonym only (Art. 6 (1)(b) GDPR). The Hall of Fame (the winners list of completed rounds) is visible without signing in; there, too, only your pseudonym appears. When you delete your account these entries are anonymised (see section 7).

7. Retention and account deletion

We store account and game data until you delete your account. You can delete it yourself at any time on your profile page: your account including its email address and your game data are deleted; Hall of Fame entries are anonymised (the link to your account is removed).

8. Your rights

Towards the controller you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6 (1)(f) GDPR (Art. 21). Simply contact the email address given above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).