Privacy Notice
This notice explains how Astrail processes personal data during the Public Alpha and how commanders can exercise their rights.
1. Controller and contact
Astrail is operated by Alliance Studios in Portugal. Privacy requests can be submitted through the signed-in Support Center or the public contact form. Self-service export and deletion controls remain available to every signed-in account at Privacy & Account Data, including accounts without Alpha gameplay access.
2. Data we process
- Alpha registration: email address, consent and confirmation timestamps, queue or access status, referral attribution and transactional email delivery records.
- Account identity supplied by the sign-in provider: email and display name.
- Public commander identity: callsign, avatar, fleet and equipped cosmetic loadout.
- Game operations: rooms, actions, match results, progression, rewards, reports and support messages.
- Essential app presence: while a signed-in commander uses the Command Network, the session's online or idle state, current Astrail app area and recent activity timestamps are used for live operations and support. Presence expires automatically when its heartbeat stops.
- Security data: request-rate buckets, session tokens and operational logs used to protect the service.
- Optional analytics, only after consent: persistent visitor and session identifiers, page or app view, selected clicks, device class and visit source.
3. Purposes and legal bases
Account, gameplay and support data are processed to provide the Alpha service and respond to player requests. Security and anti-abuse processing protects the service and the community. Optional analytics are processed only with consent and can be rejected or withdrawn at any time.
4. Optional analytics choice
Rejecting analytics does not affect sign-in, matchmaking, gameplay or support. Your choice is stored on this device.
Helps us understand page use, device class and Alpha conversion. Gameplay, authentication and security still work when disabled.
5. Retention and recipients
Alpha registration records are retained while the access queue operates or until a valid deletion request. Profile and gameplay records are retained while the Alpha account remains active. Support, moderation and transactional delivery records are retained while needed to resolve requests, protect the community and diagnose email delivery. Optional analytics are reviewed and deleted when no longer necessary for Alpha measurement. OpenAI Sites provides hosting and application storage; Google Firebase Authentication provides account sign-in and email verification; Resend delivers Alpha confirmation and access emails. These providers process data to operate Astrail under their applicable service terms and safeguards.
6. Your rights
Depending on the circumstances, you may request access, rectification, deletion, restriction, objection and portability, and withdraw analytics consent. The signed-in privacy panel provides a JSON export and deletion of Astrail application data and sessions. Completed match results are anonymised on deletion so the integrity of other players’ records is preserved. Deleting Astrail data does not by itself delete the separate Firebase authentication identity.
You may lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados (CNPD).
7. Alpha changes
This notice may change as Astrail adds features or providers. Material changes will be announced through the site or app before they take effect where required.