Privacy policy

Last updated: 23 September 2026

Keel to Orbit is an online game — to run your base and your fleet, the server has to remember a few things. This page says exactly which, what for and for how long. In short: we store an account identifier and your game state, we do not store your e-mail address, and there are no analytics and no ads in the game. The one exception is measuring our own Google ads — and only with your consent (see below).

Who is responsible

The data controller is the author of Keel to Orbit. For anything concerning your data, write to:

[email protected]

What we store

The game server keeps only what an account and a game cannot exist without:

• your Google account identifier (the identifier alone, without the e-mail address) or a guest account identifier — that is how we recognise you;
• the player name you chose when creating the account — other players see it on the map and in the ranking;
• your game state: base and its buildings, ships, resources, research, commanders, alliance membership, the history of raids on your base and the date the account was created;
• a hash of your session token and its expiry time — it saves you from signing in on every visit;
• your purchase history in the game shop: the pack, amount, currency, date and the Stripe payment identifier — for accounting and refunds;
• a Google ad click identifier (gclid) — only if you came to the game from one of our ads and ticked the measurement consent when creating your account; we delete it after 90 days.

What we do not store

Some data only passes through the server, or never reaches it at all:

• your e-mail address and the name on your Google account — we only check that Google confirms your address, and keep neither;
• your Google profile picture — the browser loads it straight from Google's servers; the game never stores it;
• chat messages — they live in the server's memory (the last hundred per channel) and are gone when it restarts; they never touch the disk;
• your IP address — the server uses it in memory for request limits, that is, protection against abuse, and never writes it down;
• payment data — Gold purchases are handled by Stripe on its own pages; your card number and billing address never reach the game server;
• location, contacts, files or advertising identifiers — the game never asks for any of them.

Why we need it

Only to run your account and the game: to remember your base and fleet, to show you to other players under your chosen name, to keep your alliance together and to protect the server from abuse. The legal basis is the performance of the agreement you enter into by creating an account, and our legitimate interest in keeping the game secure (Article 6(1)(b) and (f) GDPR). The ad click identifier is processed only on the basis of your consent (Article 6(1)(a) GDPR), to check whether our ads bring in players. We do not profile players, show ads in the game, run analytics or sell data to anyone.

Cookies and browser storage

• cf_session — the session cookie (HttpOnly, valid for 30 days). The game cannot work without it; it is not used for tracking;
• cf_lang — your chosen language, kept in the browser's local storage and never sent to the server;
• Google cookies — set by Google itself during sign-in, on Google's own pages;
• we use no analytics or advertising cookies;
• the keeltoorbit.com site stores nothing in your browser; if you arrive from an ad, its only script adds the click identifier to the links that lead to the game, so the game can ask for your consent.

Who processes the data

We never sell data. These parties take part in running the game:

• Google — verifies your sign-in if you use a Google account;
• Cloudflare — traffic between you and the server travels through a Cloudflare tunnel, which encrypts and protects it;
• the hosting provider that runs the game server and its database;
• Stripe — handles the payment if you buy Gold in the game shop, and issues the invoice for it;
• Google Ads — only if you consented: we send the ad click identifier and the time your account was created, so Google can measure the ad. No player name and no other account data.

How long we keep it

Account data stays for as long as the account exists. Sessions expire 30 days after sign-in. Chat and request counters live only in the server's memory and disappear when it restarts. The ad click identifier is deleted 90 days after the account is created.

Your rights

You have the right to:

• access your data and receive a copy of it;
• have it corrected, for example your player name;
• have your account deleted together with your game state;
• restrict the processing and object to it;
• withdraw your ad measurement consent at any time — write to the address above; withdrawing does not affect the game;
• lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office).

To use any of these rights, write to the address above. We delete the account together with its game state on such a request; deleting it with a single button inside the game is in preparation.

Children

The game is not intended for children under 13 — it has chat and play with other people. We do not target younger players and do not knowingly collect their data. If it turns out that a child under 13 has created an account, write to us and we will delete it.

Changes to this policy

When we change this policy, we change the date at the top of the page and describe the change in the game's changelog. A new version applies from the day it is published.