BODE'S GALAXY — Privacy Declaration

Scope of this Declaration

This Privacy Declaration applies specifically to Bode’s Galaxy — the game, its multiplayer servers, its companion services, and the website at bodesgalaxy.com. It is operated by Gamiant, LLC ("we", "us"). For studio-wide policies covering other Gamiant products, see the Gamiant Privacy Policy.

What We Collect

Account & identity

When you create an account to play Bode’s Galaxy, we store:

Your display name (visible to other players)
Your email address (for account recovery and security notices)
A hashed and salted password — we never store the plain-text password
Optional profile elements: avatar, short bio, home-world flag

Gameplay state

To deliver a persistent multiplayer experience, we store your in-game state on a SpacetimeDB backend we operate. This includes your current ship and cargo, fuel and credits, deck of combat cards, travel history, journal entries, screenshot collection, and the procedurally generated galaxy seed associated with your save.

Social interactions

If you message another captain, join a fleet, or participate in hub chat, we retain message contents for moderation and abuse-handling purposes. We retain these for up to 90 days unless flagged by an abuse report.

Purchases & transactions

Bode’s Galaxy is distributed through third-party storefronts (Steam, Google Play, Apple App Store). The storefront processes your payment, not us. We receive only a confirmation that the purchase succeeded and the entitlement that should be granted to your account.

Crash & diagnostic telemetry

If the game crashes or encounters a serious error, we collect a crash report containing the device model, operating system version, the error stack, and the in-game context. These reports do not include account credentials or chat contents. You can opt out in Settings → Telemetry.

Server logs

Our multiplayer servers log connection events (IP address, timestamp, session id) to detect abuse, maintain server health, and prevent fraud. These logs are retained for 30 days.

What We Do Not Collect

We do not access your device’s contacts, photos, microphone, or location
We do not embed third-party advertising SDKs
We do not sell your data to data brokers or marketers
We do not run cross-app or cross-device tracking

How We Use Your Data

To run the game and deliver the persistent multiplayer experience
To enforce the rules — detect cheating, exploits, harassment, account theft
To send essential account notices (security alerts, password resets, account changes)
To improve the game by analyzing crash data and aggregate gameplay patterns

Service Providers

We use a small set of providers necessary to operate:

Google Cloud / Firebase Hosting — serves bodesgalaxy.com
SpacetimeDB — hosts the multiplayer game-state backend
Storefronts (Steam, Google Play, Apple App Store) — distribute the game and process payments
YouTube — only if you press play on the embedded trailer; we use the privacy-enhanced youtube-nocookie.com embed so YouTube receives nothing until you interact

Your Rights

You may at any time request a copy of your account data, ask us to correct it, ask us to delete it, or close your account. We honor rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and equivalent laws in other jurisdictions. We respond within 30 days. Email privacy@gamiant.com.

If you close your account, we delete your personal data within 30 days. Some aggregated, non-identifying gameplay statistics may persist, and we retain transaction records as long as tax or legal obligations require.

Children

Bode’s Galaxy is rated for ages 13 and up (16 and up in the European Economic Area). We do not knowingly collect personal data from children below those ages. If you believe a child has provided us with personal information, contact privacy@gamiant.com and we will delete it.

International Transfers

Our servers and service providers may process your data in the United States and other countries. By using Bode’s Galaxy you consent to this; we rely on Standard Contractual Clauses or equivalent transfer mechanisms where required by law.

Security

We use HTTPS for all data in transit, hash and salt passwords with industry-standard algorithms, encrypt backups at rest, and restrict access to production data to a small set of authorized engineers. No online service can guarantee absolute security. If we discover a breach affecting your personal data, we will notify you promptly as required by law.

Changes to this Declaration

We may revise this Declaration as the game evolves. Material changes will be announced on bodesgalaxy.com and, where appropriate, in-game and via email to account holders.

Contact the Auditor Corps

For privacy questions or to exercise your rights: privacy@gamiant.com.