Privacy Policy

1. Who we are

Planet Epoch is a browser-based multiplayer strategy game operated under the name "Planet Epoch" (referred to below as "we", "us", "the Service"). Contact: hello@planetepoch.com.

2. What we collect

2.1 Account data

• Email address — required for sign-in, account recovery, and (if you opt in) notifications.
• Username — your display handle inside the game.
• Password hash — we never store your password in clear text. The hash uses industry-standard one-way cryptography.
• Subscription tier — Cadet, Private, Commander, or Admiral.
• IP address — kept for short-term rate-limiting and security auditing only. Not used for tracking or marketing.
• Verification & reset tokens — short-lived random strings emailed to you for email verification or password reset, deleted after use.

2.2 In-game data

• Your in-game actions — ships built, systems claimed, fleets moved, diplomatic stances set, missions accepted, messages sent — are part of the game record. Other players in the same galaxy can see the public portions (news headlines, public combat results, your flag, your nation name).
• Your nation name, house name, flag design, and chosen avatar are public to other players in the galaxy.
• Direct messages between players are visible to the sender and recipient only.

2.3 Cookies

We use a single essential cookie — PHPSESSID — to keep you logged in across page loads. Without it, you can't sign in. It is set per-galaxy so two galaxies open in the same browser don't share a session. There are no advertising or third-party tracking cookies.

2.4 What we do not collect

• We do not run third-party analytics, ad pixels, or social-network trackers on the site.
• We do not collect payment card details directly — those are handled by our payment processor.
• We do not access your microphone, camera, location, or contacts.

3. Why we collect it

• Run the game — sessions, saved state, multiplayer interactions.
• Bill subscriptions — pass the minimum data needed to the payment processor; we do not see card numbers.
• Stop abuse — rate-limit failed logins and high-frequency endpoints; investigate cheating or harassment when reported.
• Notify you — only when you've explicitly opted in (email or Telegram alerts for in-game events).

4. How long we keep it

Accounts are kept as long as they are active. If you delete your account from your dashboard, your personal data (email, password hash, IP records) is removed within 30 days.

Game records are different: actions you took during a season are part of the galaxy's audit trail and combat history. After you delete your account, your in-game name is replaced with "[Former Commander]" in news articles, combat logs, and diplomatic history — but the events themselves remain part of the persistent-world record. This is how persistent multiplayer games work; if you'd prefer your actions disappear entirely, we recommend not playing.

Galaxy data is wiped at the end of each season (typically every 60–90 days). Audit and security logs are retained for up to 12 months.

5. Who we share it with

We do not sell your data and we do not share it for marketing. We use the following operational processors:

• Email provider (Resend) — to send verification, password reset, and notification emails.
• Payment processor — when you subscribe (we'll name the provider on the billing page).
• Telegram — only if you opt in to notifications.

We may disclose data to law enforcement if compelled by a valid legal order.

6. Your rights

You have the right to:

• Access — request a copy of the personal data we hold on you.
• Correct — fix anything inaccurate via your dashboard or by contacting us.
• Delete — remove your account at Account → Delete in your dashboard, or by emailing us.
• Export — request a machine-readable export of your account data.
• Withdraw consent — unsubscribe from notification emails or revoke Telegram alerts at any time.
• Complain — to your local data-protection authority if you believe we've mishandled your data.

7. Children

Planet Epoch is not directed at children under 13. By creating an account you confirm you are at least 13 years old (16 in jurisdictions where that is the digital-consent age). If we discover an under-age account, we will delete it.

8. International transfers

The Service is operated from infrastructure that may be located outside your country. By using the Service you consent to your data being processed in those regions, subject to appropriate safeguards.

9. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and, where the change is significant, send an in-game notification before it takes effect.

10. Contact

Email hello@planetepoch.com for any privacy question, data request, or complaint.