SPACESTRIKE.IO Privacy Policy

Data We Process

When you sign in with Google, SPACESTRIKE.IO uses your Firebase account identifier, display name, email, and profile image to create and maintain your game profile. The service stores gameplay data such as username, stats, level, XP, platinum, inventory, default ship, session totals, rewards, and timestamps.

For signed-in and guest play, we process session and gameplay telemetry including account state, game mode, session duration, connection state, module, weapon, skill and upgrade choices, module destruction, death or match-end cause, score, damage, and related game-state counters. Signed-in telemetry is associated with a protected representation of the Firebase UID. Guest telemetry uses a separate random pseudonymous installation identifier stored in local storage; it is not the reconnect token and can be reset by clearing site data.

Why We Use Data

We use data for authentication, profile persistence, game operation, multiplayer sessions, abuse prevention, debugging, payment validation where applicable, advertising where applicable, and service improvement.

Reports and Moderation

If you submit a player report, support request, or appeal, SPACESTRIKE.IO may process the category, reported player or UID, freeform details, page or session context, your account identifier, email, moderation status, public reason, internal review notes, and timestamps to investigate abuse, cheating, payment issues, account actions, bugs, and service misuse.

Payments

If purchases are offered through Xsolla, checkout may collect and process purchase, billing, contact, device, fraud-prevention, tax, and transaction data under Xsolla's legal terms and privacy policy. SPACESTRIKE.IO receives payment status and transaction details needed to validate users, grant platinum, process refunds, prevent abuse, and keep transaction records.

Analytics and Service Providers

We use Firebase Authentication, Firestore, Firebase/Google Analytics, Reddit Pixel for Reddit-attributed visits, and our game hosting providers to authenticate users, persist profiles, operate multiplayer sessions, secure the service, measure advertising results, and understand which modes and game systems need improvement. Gameplay batches are summarized server-side into daily totals and per-player counters rather than retained as a raw event history in Firestore. Google Analytics may process device, browser, approximate location, page, and interaction information according to Google's policies.

We also measure pseudonymous browser-tab visits from the landing screen through gameplay. A random visit identifier survives reloads until 30 minutes of inactivity or a change of advertising campaign, and is renewed after at most 24 hours. Visit summaries record acquisition source, campaign/ad group/creative/keyword labels, foreground viewing time, visible main-game play and multiplayer time, main-game starts and ends, separate tutorial time and progress, qualification reason, and a bounded interaction timeline. Main-game play duration and start counts exclude tutorial mode; a tutorial-only visit is not counted as a main-game start. Returning players do not need to repeat the tutorial to count main-game play. Advertising click identifiers are used only to classify the source and are not retained in these summaries; full page URLs, referrer paths, account identifiers, emails, and authentication tokens are not included. Visit summaries carry an expiry marker 30 days after their first receipt; this marker does not by itself delete data. Final page-exit updates are best effort, so missing updates do not prove a bounce.

If purchases are offered, Xsolla or another disclosed checkout provider may process payment and fraud-prevention information. We do not sell personal data.

Advertising

AdSense loading is disabled until advertising is deliberately enabled with the required consent flow. If ads are enabled, third-party vendors, including Google, may use cookies or similar identifiers to serve ads where permitted. You can manage personalized ads in Google Ads Settings.

For visits attributed to a Reddit advertising campaign, Reddit Pixel receives a page-visit event and may receive one qualified-player conversion, reported to Reddit as a Lead, when the visitor either completes the tutorial and actively plays a multiplayer server battle for at least 90 seconds, enters at least two distinct game modes, or creates a new account. Account creation does not require tutorial completion. The event does not include the player's email, phone number, username, or Firebase account identifier, and Reddit automatic advanced matching for email and phone is disabled. Reddit may process browser, device, network, cookie, and advertising-attribution information under its own privacy terms. Clearing SPACESTRIKE.IO site data removes the site's local attribution state.

Google Ads conversion measurement reports only the first qualifying event per browser-tab session when a visitor completes the tutorial and actively plays a visible multiplayer battle for at least 90 seconds, enters at least two distinct main-game modes (excluding tutorial), or creates a new account. Account creation remains independent of tutorial completion. The Google tag may use advertising click identifiers and cookies to attribute the conversion to a Google ad. Conversion events contain a pseudonymous run identifier and do not include email, phone number, username, or Firebase account identifier. Advertising personalization signals are disabled for this Google Ads tag. Automated test sessions and portal sessions that disable analytics do not initialize this measurement.

Retention and Rights

Pseudonymous per-player analytics summaries are marked to expire after 180 days. De-identified daily aggregate counters may be kept longer to compare game balance and reliability over time. Account profiles, reward claims, transaction, report, moderation, and support records are kept while needed to operate the service, prevent duplicate grants, resolve payment issues, investigate abuse, review account actions, comply with legal obligations, and maintain accounting records.

You may request access, correction, deletion, or privacy support by contacting admin@spacestrike.io. You can clear the guest identifier by clearing SPACESTRIKE.IO site data. Account deletion requests may require us to retain limited fraud, transaction, security, or legal records where necessary.

Contact

For privacy requests, contact admin@spacestrike.io.