Lunaversum is operated by Márton Imre Farkas, a private individual resident in Switzerland. He is the data controller for the personal data described here.
For anything in this policy, including a request about your own data, write to support@lunaversum.com. That address is read and answered.
Your email address. You give it when you create an account, and we use it to sign you in, to recover access if you lose your passphrase, and to confirm the address is yours. If you change it, we hold the new address separately until you confirm it.
Your passphrase, stored only as a cryptographic hash. We never store it in a readable form and it never appears in our logs.
Your commander name and planet name. These are shown to other commanders in the same tournament, so treat them as public.
Your IP address, recorded against security events such as sign-ins and account recovery requests, and against the limits that stop those being abused.
A device token, if you turn on notifications, so the game can send them to that installation. Your notification preferences are stored with it.
A record of security-relevant events on your account: what happened, when, the outcome, and why. This is how account abuse is investigated.
The date you accepted the Terms of Service and which version you accepted.
Lunaversum has no analytics, no product tracking, no advertising identifiers, no crash reporting and no third-party trackers. We do not know which screens you open or how long you play.
We do not record whether you opened an email we sent you. Open and click tracking are switched off at the provider.
We never ask for payment details, because nothing in the game is sold.
To give you an account and let you play: your address, passphrase and names exist because the game cannot work without them. This is the performance of our agreement with you.
To keep accounts secure: security events, IP addresses and rate-limit records exist so that an attack on your account can be detected and stopped. This is our legitimate interest in protecting commanders, and yours in not losing your account.
To send you notifications you asked for: a device token exists only if you turned notifications on, and you can turn them off again at any time.
To show we have your agreement: the acceptance record exists so it is clear what you agreed to and when.
Your account data is kept while your account exists.
Every IP address we store is removed after 180 days. That covers the addresses recorded against security events and the ones held by the limits that stop sign-in and recovery being abused. Where the address sits on a security event, the event itself is kept — what happened, when and to which account — and only the address is deleted; the abuse-limit records are deleted outright, because an address is all they are.
Codes sent by email expire quickly and become unusable once redeemed or replaced. The message record is kept without the code.
Records of a tournament you played in are kept after your account goes, so that other commanders' results and battle history stay coherent. Your name is removed from them.
You can delete your account from the app at any time. Deletion happens at a stated instant, and once it does it cannot be undone.
What is destroyed: your email address, including any pending address change and any copy held in messages we queued; your commander name; your passphrase; and the records that limit sign-in and recovery attempts for your address. And the device tokens that identify your phone: they are switched off so notifications stop, and the identifier itself is destroyed, so the device is no longer tied to the account.
What is kept, and why: the fact that a deletion was scheduled, because each tournament needs it to freeze your planet; your planet and participation, renamed and frozen, so other commanders' battle history still makes sense; the security event log, so a pattern of abuse cannot be erased by deleting the account that caused it; and the record that the terms were accepted and which version, because it shows an agreement was made. That record does not say who made it: it hangs off an account whose address and name are already gone.
You can also leave a single tournament without deleting your account. That deletes the planet, not the account.
You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to support@lunaversum.com and we will answer.
There is no automated export in the app yet. A request for a copy is handled by hand, which is why it goes to that address rather than to a button.
If you think we have handled your data wrongly, you can complain to the data protection authority in the country you live in. You do not have to go through us first.
Connections to the game are encrypted. Passphrases are stored only as hashes, and the codes sent by email are stored sealed rather than in the clear.
Requests that could be used to probe for accounts — recovery in particular — answer identically whether the address is registered or not, so that the game cannot be used to find out who has an account.
No system is perfect. If a breach ever affects your data and puts you at risk, we will tell you.
Lunaversum is not for children under 16, and the Terms of Service say so. We do not knowingly hold data belonging to anyone younger, and we will delete an account if we learn otherwise.
If this policy changes, the version and effective date at the top change with it. The current version is shown in the app and on the web.
If a change materially affects how your data is used, we will tell you at the email address on your account rather than relying on you noticing.