Privacy policy

Last updated: 14 October 2026

This English version is a translation for your convenience. The German version (“Datenschutzerklärung”) is legally binding.

1. Controller

Achim Armbruster
c/o Autorenglück #24921
Albert-Einstein-Str. 47
02977 Hoyerswerda
Germany
E-mail: info@armbru.de · contact form

2. Hosting (IONOS)

Our website and game servers are hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). Whenever you visit our website or connect to the game server, the system automatically processes data from the accessing computer. Among other things, the server logs store:

• the IP address used (only in case of anomalies such as failed logins, too many connections or cheating attempts),
• date and time of access,
• for automatic error reports from the game: type of controls (keyboard, controller, touch), screen width and the error message.

This storage is based on our legitimate interest (Art. 6(1)(f) GDPR) in technical security, defence against attacks (e.g. DDoS) and the stability of our servers. Logs are deleted automatically after 14 days; server backups after at most 30 days (90 days after a server wipe), unless further retention is required for evidence (e.g. after hacking attacks). We do not keep website access logs (which page was visited when).

3. Registration and game data (data minimisation)

Following the principle of data minimisation, when you create an account we collect only an account name of your choice and a password. The password and the recovery code are stored only as a cryptographic hash (scrypt) – never in plain text. We do not ask for e-mail addresses, real names or dates of birth. We also store:

• the time the account was created and of the last login, and – if you choose “Stay logged in” – a login token (also only as a hash),
• the game state: characters, Starborn, items, progress, friend and guild lists, market offers,
• an internal log of important game events (e.g. character created or deleted, market trades) for troubleshooting and against fraud,
• chat messages are only transmitted, not stored.

This storage serves to perform the free contract of use (Art. 6(1)(b) GDPR). Account data and game states remain until you delete them or have them deleted (section 8). A server wipe deletes all game states; the accounts themselves are kept. Characters deleted in the game are kept for 30 days (in case the deletion was a mistake), after which they are gone for good.

4. Feedback from inside the game

When you use “Send feedback” in the game, we store your text and the chosen type, together with account and character name, Keeper level, location in the game, type of controls and the time – so that we can understand the feedback (Art. 6(1)(f) GDPR). Feedback is deleted after 12 months at the latest.

5. Contact form and e-mail

Via the contact form we process the details you provide: topic, subject and message, optionally name, account or character name and e-mail address (only needed for a reply), as well as the time. The message is stored on our server and forwarded by e-mail via IONOS’s mail server to our mailbox. We use your IP address only briefly in memory to slow down mass submissions; it is not stored. The legal basis is Art. 6(1)(b) GDPR where your account or the game is concerned, otherwise our legitimate interest in answering (point f). The copy on the server is deleted after 180 days; we delete e-mails as soon as the request is settled, at the latest after 180 days, unless there is a statutory retention obligation. The same applies to e-mails sent to us.

6. Game statistics

To develop the game further, we count aggregated figures, e.g. active accounts per day and how many players return. For this we store the account IDs (random numbers, no names) per day for 120 days. There are no advertising profiles (Art. 6(1)(f) GDPR).

7. Cookies and local storage

The game sets no cookies. Game and website use your browser’s so-called local storage for settings (e.g. language, volume, controls, camera, selected server, last account name used) and – if you choose “Stay logged in” or play as a guest – for the login token. This data is purely technical, stays on your device and is not used for tracking or advertising. There are no third-party analytics or advertising services (no Google Analytics, no Facebook pixels or similar) and no embedded third-party content such as fonts or videos. In the game, Menu → Settings → “Reset all settings” clears the storage; “Log out” deletes the login token.

8. Your rights

You have the right at any time to access, rectification, erasure and restriction of processing of your data stored by us, to data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for your place of residence (Art. 77 GDPR).

You can delete characters yourself in the game at any time (character selection → Delete). To delete your whole account or to request information, write to us via the contact form (topic “Data protection request”) with your account name. Since accounts contain no contact details, this is how we check that the request really comes from you: we reply with a short check word, which you then send in the game via “Send feedback” – then we know the account is yours. After your confirmation we delete the account, its characters and the associated log entries.

9. Changes

We update this policy when the game or the legal situation changes – in particular before there are any real-money purchases.