Privacy Policy

This policy explains what personal data is processed when you use OrbitOFWarrior | Cosmic Empire (the Windows desktop client and the Android app) and our official website: why it is processed, who it is shared with, and how to exercise your rights. Players in Türkiye are also covered by our KVKK Disclosure Notice.

• Name: Çetin Tepe
• Address: Nilüfer / Bursa, Türkiye
• Email: [email protected]

We only process the data needed to run the game and keep it secure.

• Account: username, email address (if provided), a one-way hash of your password (Argon2) — to create your account and sign you in.
• Game data: pilot name, faction, server, level, ships, inventory, in-game balances, quests, clan membership, friends and block lists, profile picture (if uploaded) — to run the game and save your progress.
• Communications: chat messages, private messages, support tickets — for chat and support features, and moderation of content that breaks the rules.
• Security data: IP address, sign-in times, in-game statistics (e.g. earning rate) — for account security, detecting cheats, bots and multi-accounting, and enforcing sanctions.
• Device and error data: device model, OS version, GPU, frame rate, error logs, a random support code generated on the device — to fix bugs and make the game run well on your device. On PC it is sent only when you press "Report a problem".
• Purchase records: order ID, purchase token, product, amount, date, IP address at purchase — to deliver what you bought, and for refund and fraud checks.

We do not collect: location, contacts, camera, microphone or advertising ID. Your card details never reach us. There are no ads in the game; we do not sell your data or share it for advertising. We do not process special categories of personal data.

• To create your account, sign you in and save your progress.
• To run the game: maps, combat, clans, rankings, auction, crafting.
• To detect cheating, bots and multi-accounting and keep the game fair.
• To protect chat and profile pictures from abuse, hate speech and inappropriate content.
• To deliver purchases and resolve refunds and disputes.
• To answer support requests, fix bugs and monitor server performance.
• To meet our legal obligations.

Automated moderation: chat messages are checked by an in-game word filter, then automatically by an AI-assisted classifier (Groq). A message found to break the rules may be removed, and a graduated chat sanction may be applied automatically. Profile pictures are checked the same way when uploaded. Unusual account activity is flagged automatically, but flags never trigger an automatic penalty — a person on our team makes the decision. To contest an automated decision, write to [email protected] and a person will review it.

• Performance of a contract: your account, the game and delivery of purchases.
• Legitimate interests: security, cheat prevention, moderation, improving the service.
• Legal obligation: keeping financial records, responding to lawful requests.
• Establishment, exercise or defence of legal claims: evidence in a dispute.

We do not rely on consent for this processing. We respect your rights under the EU GDPR and Türkiye's Law No. 6698 (KVKK).

Our game servers are located in Türkiye. Your data is shared only with the providers below, and only as much as each service requires:

• Cloudflare (USA) — secure, fast delivery of the website and game connection, attack protection. Data: IP address, connection data.
• Groq (USA) — automated moderation of chat messages and profile pictures, translation of announcements. Only the text/image being checked; no account details.
• Google (Google Play) (USA / Ireland) — distribution of the Android app, in-app payments. Data: order ID, purchase token, product.
• Xsolla (USA) — payments in the desktop client and on the website. Transaction data; card details are handled by Xsolla.

Discord status (PC): if the Discord app is running on your computer, the desktop client shows on your Discord profile that you are playing, together with your pilot name, level, current map, faction and play time. This is passed to Discord (USA) by the Discord app on your own computer, not by our servers, and is subject to Discord's privacy policy. Nothing is sent if Discord is closed. To hide it, turn off activity sharing in Discord under User Settings → Activity Privacy.

International transfers are made with the safeguards required by GDPR and Article 9 of KVKK. Otherwise we share data only when a competent authority lawfully requires it, or, in a dispute, with our lawyer and accountant as far as necessary.

What other players see: your pilot name, faction, level, clan, profile picture and ranking are visible to other players as part of the game.

• Account and game data (profile, inventory, balances, private messages, friends list, clan membership): while your account exists. If you delete your account, it is permanently deleted after 7 days.
• Purchase records: as long as financial law requires (up to 10 years), unlinked from your account once it is deleted.
• Support tickets: up to 2 years after the ticket is closed.
• Sanction records (rule-breaking message, penalty, ban): for the duration of the sanction and any appeal. Ban records are kept while the ban is in force.
• Device and error logs: short-term; the oldest entries are removed once the log reaches a size limit.

You can request account deletion two ways:

• In the game: Menu → Settings → Account → Delete account
• On the web, without signing in: Account Deletion page

After the request there is a 7-day waiting period. Signing in during this period cancels the deletion, which protects you if someone else tries to delete your account. After that, your account, pilot, inventory, balances, messages and clan membership are permanently deleted. If you lead a clan, leadership passes to another member.

• Connections are encrypted (HTTPS / WSS).
• Passwords are stored as one-way hashes (Argon2); plain-text passwords are never stored.
• The desktop client's "Remember me" feature keeps your password only on your own computer, in Windows Credential Manager; it is never sent to us.
• Administrative access is limited to authorised people.

No system is perfect. If a data breach occurs, we will notify the competent authority and you as required by law. Our support team will never ask for your password.

The website and the game use only functional cookies and local storage needed to work: session, language preference, graphics and interface settings. We do not use advertising or tracking cookies.

You can request access to your data, a copy of it, correction, deletion or restriction of processing, and you can object to processing, including automated decisions. Send requests to [email protected] from the email address registered to your account. We reply free of charge within 30 days. You can also complain to your local data protection authority. See the KVKK Disclosure Notice for details of your rights in Türkiye.

The game is not directed at children under 13, and we do not knowingly collect data from children under 13 (16 in the EU). If you are under 18, get a parent's or guardian's permission before creating an account or making a purchase. If we learn that an account belongs to a child under 13, we close it and delete the data.

We may update this policy. We announce significant changes in the game and on this page. The date at the top always shows the version in force. Questions: [email protected]