Privacy
What we collect to run Starlane, why, who else sees it, how long we keep it, and how to make us delete it. Short version: the minimum to run an account, no advertising, no trackers, and you can delete everything from your account page.
Who we are
Starlane is run by FAXTORIAL TECH SRL (VAT RO36179862), Str. 1 Decembrie 1918, nr. 53, Timișoara, Romania. We are the controller of the data below. For anything on this page, write to office@faxtorial.com.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Your email address | To sign you in, confirm the address is yours, and send the few emails the game sends — confirmation, password reset and, only if you switch it on, a note when something you were waiting for has finished (at most one a day). No newsletters. | Contract |
| Your password, stored only as a one-way hash | To sign you in | Contract |
| Your callsign, and what your pilot does in the universe — trades, travel, fights, ideas you file | It is the game. Your callsign and some of this are shown to other players on leaderboards, the signal board and combat reports. | Contract |
| An optional second factor (an encrypted authenticator secret) and recovery codes | To protect your account, if you turn it on | Contract |
| Sign-in sessions — a random token stored only as a hash, with when it started and expires | To keep you signed in | Contract |
| The IP address of your most recent sign-in, and when it was | Security — spotting a sign-in that was not you. Only the latest is kept; each sign-in replaces it. | Legitimate interest |
| The day you were last active | To end idle sessions and to count how many people play | Legitimate interest |
| Where your signup came from, if the link you followed said so (for example “reddit”) | To know which places are worth telling about the game. It is a label on the link, not on you — no cookie or identifier follows you. | Legitimate interest |
| If you support the game: what you bought and when. Card details go to Stripe and never reach us. | To give you what you paid for, and to keep the records tax law requires | Contract; legal obligation |
We do not use advertising, analytics or tracking scripts, third-party cookies or device fingerprinting, and we sell nothing to anyone.
Cookies
One: starlane_session, which keeps you signed in. It is strictly necessary, so it needs no consent and there is no banner. If you turn on wait notifications, that choice is kept in your own browser's storage and never sent to us. The fonts are served by us, not by a font service.
Who else sees it
| Who | For | Where |
|---|---|---|
| Microsoft (cloud hosting) | Runs our servers and database | West Europe (the Netherlands) |
| Postmark (ActiveCampaign, LLC) | Delivers confirmation and reset emails | United States — under the EU–US Data Privacy Framework and standard contractual clauses |
| Stripe | Takes supporter payments and works out VAT | Stripe's own privacy notice covers what you give it |
| Anthropic | An AI assistant we use to help run the game, which can read account details when we ask it about players | United States — under the EU–US Data Privacy Framework and standard contractual clauses |
Other players see your callsign and what the game shows publicly.
How long we keep it
- Your account: until you delete it.
- An account whose email was never confirmed: deleted after 7 days — or, if it made a pilot, erased in place exactly as if you had asked (the pilot's history stays, with no name or address attached).
- Sign-in sessions: end after 7 days unused, or 30 days at most.
- Your last sign-in address: until your next sign-in replaces it, or you delete your account.
- Purchase records: as long as Romanian accounting and tax law requires (up to 10 years), even after your account is deleted.
Deleting your account
From Account → Delete account, with your password and your callsign typed out. It happens at once and cannot be undone. Your email, password, second factor, sign-ins, last sign-in address and signup label are erased. Your pilot's past — trades, fights, ideas filed — stays in the universe under a retired-… name that leads back to nobody, because the shared history is built on it and other players' records refer to it. If you support the game monthly, cancel that first — see refunds.
Your rights
You can ask for a copy of your data, have it corrected, deleted or handed over in a portable form, and object to the uses that rest on legitimate interest. Write to office@faxtorial.com from the address on your account and we answer within a month. You can also complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or the one where you live.
Age
Starlane is for people aged 16 and over.
Changes
We post changes here with the date. Before any change that widens what we collect or who sees it, we email account holders.