Privacy Notice
This notice explains how Astrail processes personal data during the Public Alpha and how commanders can exercise their rights.
1. Controller and contact
Astrail is operated by Alliance Studios in Portugal. Privacy requests can be submitted through the signed-in Support Center under Privacy & Data. You may also use the self-service controls in Privacy & Data.
2. Data we process
- Account identity supplied by the sign-in provider: email and display name.
- Public commander identity: callsign, avatar, fleet and equipped cosmetic loadout.
- Game operations: rooms, actions, match results, progression, rewards, reports and support messages.
- Security data: request-rate buckets, session tokens and operational logs used to protect the service.
- Optional analytics, only after consent: persistent visitor and session identifiers, page or app view, selected clicks, device class and visit source.
3. Purposes and legal bases
Account, gameplay and support data are processed to provide the Alpha service and respond to player requests. Security and anti-abuse processing protects the service and the community. Optional analytics are processed only with consent and can be rejected or withdrawn at any time.
4. Optional analytics choice
Rejecting analytics does not affect sign-in, matchmaking, gameplay or support. Your choice is stored on this device.
Helps us understand page use, device class and Alpha conversion. Gameplay, authentication and security still work when disabled.
5. Retention and recipients
Profile and gameplay records are retained while the Alpha account remains active. Support and moderation records are retained while needed to resolve requests and protect the community. Optional analytics are reviewed and deleted when no longer necessary for Alpha measurement. OpenAI Sites provides hosting and application storage; Google Firebase Authentication provides account sign-in and email verification. These providers process data to operate Astrail under their applicable service terms and safeguards.
6. Your rights
Depending on the circumstances, you may request access, rectification, deletion, restriction, objection and portability, and withdraw analytics consent. The signed-in privacy panel provides a JSON export and deletion of Astrail application data and sessions. Completed match results are anonymised on deletion so the integrity of other players’ records is preserved. Deleting Astrail data does not by itself delete the separate Firebase authentication identity.
You may lodge a complaint with Portugal’s Comissão Nacional de Proteção de Dados (CNPD).
7. Alpha changes
This notice may change as Astrail adds features or providers. Material changes will be announced through the site or app before they take effect where required.