Privacy Policy
Effective 28 July 2026
Starhaul Online is a multiplayer game that runs both in a web browser and as a mobile app. To make it work we have to store some data about you. Here is exactly what, why, and what you can do about it. Everything below applies to the website and to the app alike.
Who is responsible for your data
The data controller is Alan Matviienko Usługi IT, ul. Wrocławska 53K lok. 89, 30-011 Kraków, Polska. NIP 6772537559, REGON 543971861.
For any question about personal data, write to alan@ziewnull.com.
What we store
- Account: e-mail address, nickname, age, chosen language, a fingerprint of your password (we do not store the password itself and cannot recover it), sign-up date, total time played, whether your e-mail is confirmed.
- Avatar: the number of the portrait you picked, or the picture you uploaded. In the app, choosing a picture opens the system dialog where you can take one from your library or shoot a new one: only the picture you pick reaches us — the game has no access to the rest of your library.
- Game progress: ship, equipment, credits, cargo, reputation, position in the world, accepted contracts — everything your pilot consists of.
- Private messages with other players. They are kept on the server so they survive leaving the game, and are deleted automatically after 30 days.
- Auction lots while they are listed.
- Conversations with bot characters: facts the character "remembered" about you, so it does not contradict itself next time.
- One-time codes for e-mail confirmation and password reset — as a fingerprint, 15 minutes.
What we do not do
We show no ads, run no analytics or tracking scripts, never sell or share your data with anyone beyond the processors listed below, and collect nothing about you outside the game.
Why, and on what legal basis
Account and progress data are needed for the game to work at all — that is performance of our contract with you. E-mail confirmation, the password fingerprint and one-time codes protect your own account, and anti-spam and anti-fraud measures are our legitimate interest.
Who we share it with
- An e-mail delivery service — your address and the letter, so the code reaches you.
- A hosting provider — the game database physically lives on its servers.
- An external AI service — if you talk to a bot character, your text, nickname and language are sent there to get a reply. Do not tell bots anything you would not hand to a third party.
Your rights
At any time you can download all your data as a single file and delete your account with everything attached to it — both buttons are in the pause menu, "Profile", the same in the browser and in the app. Deletion is irreversible and removes private messages on both sides. If something does not work, or you need incorrect data fixed, write to alan@ziewnull.com.
Age
You must be 13 or older to sign up. Under 16, many countries require a parent's consent for processing your data — check how this works where you live.
What is stored on your device
In a browser it lives in local storage; in the app, inside the app itself. Either way it is only what is necessary: a session key (so you do not type the password every time), the chosen language, sound and interface settings, and flags for hints you have already seen. No advertising or tracking storage, and we do not read your device's advertising identifier.
Changes
If this policy changes, the date at the top changes with it. Significant changes will be shown in the game.