Privacy Policy

Controller

Galaxy Reclaimer is published on Google Play by Babiak Studio. The data controller is BS4U Przemysław Babiak, Polish tax ID (NIP) 7551916520, Kościuszki 2/4, 48-200 Prudnik, Poland. Privacy requests may be sent to pb.bs4u@gmail.com.

Data processed by the game

The game stores progress, settings, missions, virtual currency and upgrades on the device. When Google Play Games sign-in and Saved Games are available, progress may also be synchronized with the player’s Google account through Google Play Games. During optional Google Play Games sign-in, Google may process the email address associated with the Google Account, if available, for authentication, game functionality and account management. Neither the game nor the publisher’s server receives or stores that email address. To keep only the newest account session active, the game sends the publisher’s server a random installation reference that is not derived from hardware or advertising identifiers. The server stores only a cryptographic hash of that reference with the API session.

For purchase verification, delivery, restoration and refunds, the publisher’s purchase server processes the Google Play Games player identifier, API session records, product identifier, purchase token hash and encrypted token, Google order and purchase status, entitlement and settlement state, revocation source and reason, the hash of a pending chargeback-review token, the refund preference and product-delivery evidence sent to Google, Google response data and technical timestamps. The server does not receive payment-card details.

The game does not request precise GPS location, contacts, messages, photos, user files, microphone or camera access.

Leaderboard and Play Integrity

When the player voluntarily chooses a unique pilot name and accepts the current Community Guidelines, the game publishes that name, the cumulative score and the current ship level in the global leaderboard. The pilot name is the only player-authored public content; there is no chat, image upload or free-form profile text. The server also stores the technical Google Play Games profile identifier, a random public leaderboard entry identifier, one-use hashes of started-run tokens, score, ship level and technical timestamps. The Google Play profile identifier is never shown to other players.

Players can report another pilot name using one of five fixed reasons and can block or unblock its leaderboard entry. Reports do not contain free-form text. The publisher processes the reporting and target profile identifiers, reported name, selected reason, status, timestamps and an auditable moderation decision. Blocking hides that entry only for the reporting player. The current rules, review targets and appeal channel are published at https://galaxyreclaimer.com/community-guidelines/.

Score submissions are protected by Google Play Integrity. For this purpose Google processes a hash of the specific request, package name, app version, signing-certificate information, licensing status and app/device integrity signals. The publisher’s server receives Google’s verified verdict and accepts the score only when the request originates from a recognized, licensed build on a device that meets the integrity requirements. The request hash contains no free-form text or password.

Optional diagnostics

Optional diagnostics are disabled by default. Only when the player enables “Share optional diagnostics” in the game settings, the game sends the publisher’s server a limited allow-listed set of stability, campaign and coarse integration-failure categories: app version, technical timestamps, an unclean previous-session indicator, mission start, completion or abandonment, galaxy identifier, numeric planet or round index, and a category indicating an API, billing, purchase-verification or Play Integrity failure. These pseudonymous events are linked to the existing Play Games server session so duplicate submissions can be prevented. The game does not include free-form text, advertising identifiers, a device identifier, IP-derived location or purchase tokens in this diagnostic payload. Disabling the option stops collection and removes events waiting on the device.

Advertising and consent

Galaxy Reclaimer uses Google AdMob, Google’s User Messaging Platform, and mediation partners including Unity Ads, InMobi and Meta Audience Network for interstitial and rewarded ads. The Google Mobile Ads SDK automatically collects and shares IP address, user interactions including app launches, taps and video views, diagnostic information, and device or account identifiers for advertising, analytics, and fraud prevention, security and compliance. Google and these advertising partners may also process approximate location inferred from the IP address, advertising identifiers, consent choices and technical, session and advertising data to deliver and measure ads and maintain the service. The game does not grant InMobi access to precise location data collected by the app. Where required, the consent form is shown before advertising services are initialized. Consent choices can be reviewed from the game’s settings. Privacy policies: InMobi https://advertising.inmobi.com/privacy-policy; Meta https://www.facebook.com/privacy/policy/; Unity https://unity.com/legal/game-player-and-app-user-privacy-policy.

Purchases

Payments are processed by Google Play Billing. The game and the publisher’s server receive only the information needed to verify and deliver a product, restore an entitlement, prevent duplicate grants, handle a refund or revocation and prevent abuse. Purchase tokens are never written to application logs by design.

After a refund or chargeback, the purchased benefit may be revoked. Unused coins are removed, and any unrecovered portion of a spent package becomes a debt repaid by later coin awards before those coins can be spent. Repeated chargebacks may temporarily disable paid purchases or send the account for manual review. A new order created while such a restriction is active is not delivered and is refunded through Google Play. The No Ads benefit is disabled when its purchase is revoked. A player may dispute an enforcement action using the contact address below and the Google order number, without sending a purchase token or password.

Purposes and legal bases

Data is processed to provide the game and requested cross-device features, perform the purchase contract, secure the service and prevent fraud, meet accounting and legal duties, display or measure advertising on the basis required in the player’s region and, only with opt-in consent, identify stability problems and improve campaign balance. Consent can be withdrawn at any time in the game settings where consent is the applicable basis.

Retention

Local data remains until the app data is cleared, the game is uninstalled or account deletion completes. Google Play Games cloud data remains under the player’s Google account until deleted through the relevant Google service or the game’s verified cloud-snapshot deletion flow. The leaderboard profile and accepted score history remain active until account deletion completes. Unfinished run tokens expire after 6 hours. Purchase API sessions expire after at most 30 days. Optional diagnostic events are deleted from the publisher’s server after 90 days. Closed community reports and anonymous account-deletion receipts are kept for 365 days, moderation audit actions for 730 days, and blocks until the player unblocks the entry or either account is deleted. Purchase and refund records are kept only as long as needed to deliver and audit entitlements, resolve disputes, prevent repeated grants and satisfy legal or accounting obligations, after which they are deleted or anonymized.

Recipients and international transfers

Data may be processed by Google as the provider of Google Play Games, Google Play Billing, Play Integrity, AdMob and consent services, by Unity Ads, InMobi, Meta Audience Network and other advertising mediation partners, and by infrastructure providers used to host the API and database. These providers may process data outside Poland or the European Economic Area using the safeguards described in their privacy terms.

Security

Connections to the purchase API use HTTPS. Session and purchase tokens are stored as hashes where lookup is sufficient; recoverable purchase tokens are encrypted at rest when required for settlement with Google. Access to production secrets and the database is restricted to the service.

Rights and deletion

Depending on applicable law, the player may request access, rectification, deletion, restriction, portability or objection, and may withdraw consent. An authenticated player can use the two-step Settings → Delete account action. After the server confirms the idempotent request, the game clears local progress and verifies removal of its Google Play Games cloud snapshot. The server irreversibly disconnects the Play Games identity, pilot name, leaderboard, gameplay, session and optional-diagnostics data; limited financial, refund, fraud-prevention and legal audit records may remain without the player identity, and account deletion does not refund Google Play purchases. If the game cannot be accessed, requests can be sent to pb.bs4u@gmail.com with enough information to identify the relevant profile, but never a purchase token or password. A complaint may be lodged with the President of the Polish Personal Data Protection Office.

Children

The game is intended for users aged 16 and older and is not directed to children under 16.