Privacy Policy

Effective Date: March 29, 2026

1. Information We Collect

Account Information

When you register, we collect your email address, username, and hashed password. We never store passwords in plaintext.

Gameplay Data

We collect data related to your in-game activity: planet state, resource balances, research progress, battle results, chat messages, clan membership, and market transactions. This data is essential for maintaining game state and enforcing fair play.

Payment Information

When you deposit or withdraw Space Energy, payment processing is handled by third-party providers. We store transaction records (amounts, timestamps, status) but never store full credit card numbers, bank account details, or payment credentials on our servers.

Technical Data

We automatically collect IP addresses, browser type, device information, operating system, and access timestamps for security monitoring and anti-cheat purposes.

2. How We Use Your Information

We use the information we collect to:

  • Operate, maintain, and improve the Game
  • Authenticate your identity and secure your account
  • Process deposits, withdrawals, and in-game transactions
  • Enforce our Terms of Service and detect fraud, abuse, or cheating
  • Send essential service communications (password resets, security alerts, account updates)
  • Analyze aggregate usage patterns to improve game balance and performance
  • Respond to support requests and player reports

We do not send marketing emails unless you explicitly opt in. You can manage your notification preferences in your account settings at any time.

3. Information Sharing

We do not sell your personal data to third parties.

We may share information only in the following circumstances:

  • Payment Processors — Transaction data shared with payment providers to process deposits and withdrawals
  • Legal Requirements — When required by law, court order, or governmental regulation
  • Safety — To protect the rights, safety, or property of our players and the public
  • Analytics — Aggregated, anonymized data may be used for business analysis. This data cannot identify individual players

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Game services.

When you delete your account, we will remove your personal information within 30 days. Certain data may be retained longer where required by law (e.g., financial transaction records for tax compliance).

Anonymized, aggregated gameplay statistics may be retained indefinitely for game balancing and historical analysis.

5. Cookies

We use cookies and similar technologies for authentication, security, and to remember your preferences. For full details, see our Cookie Policy.

6. Security

We implement industry-standard security measures including:

  • Passwords are hashed using bcrypt — we never store plaintext passwords
  • Authentication tokens are stored in httpOnly cookies, preventing access from client-side JavaScript
  • All data transmitted between your browser and our servers is encrypted via TLS/SSL
  • Rate limiting on all API endpoints to prevent brute-force attacks
  • Server-side validation for all game state changes — the client is never trusted

While we strive to protect your data, no system is 100% secure. We encourage you to use a strong, unique password for your account.

7. Children's Privacy

The Game is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will delete the account and associated data promptly.

If you believe a child under 13 has created an account, please contact us at privacy@thelastsector.com.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

  • Right of Access — Request a copy of the personal data we hold about you
  • Right to Rectification — Request correction of inaccurate data
  • Right to Erasure— Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction — Request restriction of processing of your data
  • Right to Data Portability — Request your data in a structured, machine-readable format
  • Right to Object — Object to processing of your data for certain purposes

To exercise any of these rights, contact privacy@thelastsector.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-game notification or email. The "Effective Date" at the top of this page indicates when the latest revision took effect.

Continued use of the Game after changes constitutes acceptance of the revised Privacy Policy.

10. Contact

For questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

privacy@thelastsector.com

© 2026 The Last Sector. All rights reserved.