Privacy Policy

1. Who is responsible

This policy covers the Voidwright website at playvoidwright.com, launch-update mailing list, and game services, including api.playvoidwright.com.

Voidwright is operated by Sean Tyler, an individual based in England, United Kingdom, and is intended for players worldwide. Sean Tyler is the data controller. Contact: [email protected].

2. Information we use

• Newsletter: the email address you submit, subscription preferences, records needed to manage your signup or unsubscribe request, and information about email opens and link clicks.
• Game account: player identifier, commander name, authentication records, account creation and activity times. The current game registration does not ask for an email address.
• Gameplay: saved station state, progression, resources, fleet activity, coordinates, alliance membership, and in-game transactions and battle records.
• Community: chat, in-game mail, profile images, reports, and moderation records. Information reported to moderators can include surrounding conversation.
• Technical information: connection information such as IP address, request details and error information used to deliver and protect the service. The game API uses hashed IP identifiers for rate limiting and its access logs; hosting and network providers may separately process raw connection data.
• Support: information you choose to send when asking for help or exercising your rights.

Please do not send account secrets or include sensitive personal information in public profiles, images or messages.

3. Why we use information

We use the following legal bases for processing:

• Providing the game: account authentication, saving progress and delivering multiplayer features, where necessary to perform our agreement with you.
• Safety and reliability: preventing abuse, investigating reports and diagnosing faults, relying on our legitimate interests in a secure and fair service.
• Launch and development emails: your consent. Signing up is optional and is not required to play. You can withdraw consent using the unsubscribe link in an email.
• Newsletter engagement: information about opens and link clicks helps us understand which updates subscribers read. Where tracking requires consent, we will request it and explain how to withdraw it.
• Legal obligations: retaining or disclosing information where the law requires it.

Required account and gameplay information enables the online game; without it we cannot provide those features. We do not require a newsletter subscription to create a game account.

4. Who can see information

Other players can see information made available through game features, such as your commander profile, approved avatar, rankings, alliance information and map presence. Chat is visible to the relevant channel, and player mail to its recipients. Authorised moderators may review reported content and related records.

We use the following providers to operate Voidwright. What a provider receives depends on the part of the service it supports.

• Mailchimp (Intuit): newsletter subscriptions, email delivery and open and click tracking. This includes subscriber email addresses, subscription records and information about engagement with our newsletters. Our signup form submits directly to our Mailchimp audience.
• Google Workspace (Google): email services for our contact address, including sender details, message contents and attachments sent to us for support or privacy requests.
• IONOS: hosting for the game server and database, including account information, gameplay records and other data stored by those services.
• Cloudflare: network delivery, security and backup storage. This can involve connection information, traffic passing through its services, and data included in backups.

We also use Claude Code (Anthropic) and Codex (OpenAI) as development tools. These tools do not have access to players’ personal information.

We may disclose information when legally required or necessary to investigate abuse or protect people’s rights. We do not sell personal information.

5. International processing

The hosting locations selected for our main game server, database and backups are in the UK. Other services we use, including Mailchimp, Google Workspace and Cloudflare, may process information outside the UK, including in the United States.

The providers’ published data-processing terms describe international-transfer safeguards, including applicable adequacy arrangements and standard contractual clauses with UK provisions. Further details are available in the Mailchimp terms, Google terms and Cloudflare terms.

Contact [email protected] for information about the safeguards relevant to your information, including how to obtain a copy.

6. Cookies and device storage

The current landing-page code contains no advertising or analytics scripts. Fonts and visual assets are served locally or supplied by your device. The newsletter form takes you to Mailchimp, which may process connection information and use cookies under its own policies.

We use Mailchimp’s open and click tracking to understand how subscribers interact with our newsletters. Open tracking uses an image in the email, and click tracking records interactions with links. These reports can be affected by email privacy features and automated activity. Unsubscribing stops future newsletter emails.

The game stores local save data and account credentials on your device. Clearing app data can remove your local credentials and affect access to your account. Clearing local data does not itself delete server records.

7. How long information is kept

The following retention schedule is agreed for release. It is not yet fully implemented.

• Accounts and progress: kept while needed to provide your account. Accounts with no activity for 24 months will be reviewed, with information deleted or anonymised when it is no longer needed.
• Routine technical logs: kept for up to 30 days.
• Support conversations: deleted 6 months after the issue is resolved.
• Moderation records: reviewed 12 months after the case is closed. Records will be deleted or anonymised when no longer needed. Any longer retention for an active restriction, investigation or legal requirement will have a documented reason and be reviewed.
• Backups: copies on the server and in cloud storage will expire after 30 days.
• Newsletter records: kept while you subscribe, with a minimal suppression record retained where needed to honour an unsubscribe.

Chat and in-game mail use rolling limits. Reported conversations can be retained separately as moderation records.

Information needed for an ongoing investigation or legal obligation may need to be kept longer, limited to what is necessary. When account information is deleted from live systems, older copies can remain in backups until those backups expire. Deleting the game from your device does not delete your server records.

8. Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal information. We may need proportionate information to verify your identity.

An in-game account-deletion option is planned for release. Until it is available, you can contact [email protected] to request deletion or exercise your other rights.

You can object to processing based on legitimate interests. You can object to direct marketing at any time. You can also withdraw newsletter consent without affecting processing that was lawful before withdrawal.

Use the operator contact above for requests or concerns. You can complain to the UK Information Commissioner’s Office, or an appropriate authority where you live, without first contacting us.

9. Young players and automated checks

Voidwright is intended for players aged 13 and over. Parents or guardians with concerns about a child’s information can contact [email protected].

The game uses automated rules to check gameplay requests, limit traffic and filter community content. Reports can be reviewed by moderators. Contact the operator if you believe a restriction or moderation decision was incorrect.

10. Policy updates

We will update this page when our practices change and identify the revision date. We will provide additional notice of significant changes where appropriate, and obtain fresh consent when required.