POLLY GALAXY / LEGAL & SUPPORT

Privacy Policy

2026-10-24 · v2

Scope and controller

This notice explains how Polly Galaxy handles personal data in the game, its website and player support. The controller and contact details appear below. This notice does not replace the privacy policies of Apple, Google or Valve.

Data used to provide the game

We process your email address, account identifier and password hash; pilot name, company, ship, position, inventory, equipment, currencies, missions, companions and gameplay progress. Passwords are stored as hashes rather than plain text. Your public pilot identity, visible ship and companion state, and messages are shared with the players who can see the relevant gameplay or chat channel.

Chat, connections and purchases

Chat messages include sender identity, channel and time. The current game maintains a rolling history of up to 300 messages within a 15-minute window; server files and backups may remain until their separate retention period ends. Hosting infrastructure receives connection information such as IP addresses, requested URLs and technical errors. When purchases are enabled, we verify store transaction identifiers, purchase proofs, products and credited currency; Steam purchases may also use a Steam identifier. Card details are handled by the store, not by our game payment form.

Purposes and legal bases

Account and gameplay processing is necessary to provide the service you request. Security, abuse prevention and operational diagnostics support our legitimate interests in maintaining a reliable game, subject to your rights. Financial records may be retained to meet legal obligations. Where optional processing requires consent, it must be requested separately. The current website includes no advertising or third-party analytics SDK.

Recipients, hosting and international transfers

Authorised operators and hosting providers process data needed to run the service. Store providers process purchase information under their own terms. We may disclose information when legally required. Hosting location and any applicable international-transfer arrangements must be listed in the operational details below before release.

Retention and your choices

Account progress is retained while the account is used, until deletion is processed or another documented retention rule applies. Exact operational, backup and transaction-retention periods are listed below. You can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests where applicable. Contact the privacy address below; identity verification may be necessary. You can complain to your competent data-protection authority. Deletion instructions are on the Account deletion page.

Children and changes

Store age ratings and local requirements apply. Do not send children's personal information through chat or support. A parent or guardian may contact the privacy address with concerns. Intended audience and any child-directed features must be reviewed before release. We update this notice when the service or its data practices change; the document version is shown on this page.

Optional performance diagnostics

If you enable “Share performance diagnostics” in Settings, the game sends limited technical reports to our own server to investigate slowdowns: frame timing, GPU model, game/build and engine version, rendering mode, screen dimensions, public map code and counts of objects/effects. Reports contain no chat, email, passwords, screenshots or persistent device identifiers. The authenticated request may be associated with your account through service access records; we do not describe it as anonymous. Diagnostic files do not store your account ID, token or IP address. Collection is off by default. You can stop future sending at any time in Settings without losing game features. Up to 8 reports per app session, at most once per minute; the server additionally limits uploads. Diagnostic files are deleted within 7 days and excluded from ordinary account backups. Data is used for technical improvement, not advertising or cross-app tracking. Existing reports expire under this retention period after you turn collection off. Technical counts also include memory usage and network queue size.

Contact and operation

Operator: Patrik Horváth – Engazan.eu · IČO 51760711
Address: Doležalova 3424/15C, 821 04 Bratislava-Ružinov, Slovensko
Support: Engazan.eu@icloud.com
Privacy: Engazan.eu@icloud.com
Hosting and transfers: Not configured yet
Retention periods: Not configured yet