Privacy Policy

What data Astralia processes, why, and how you stay in control of it.

Last updated: 8 October 2026

This Privacy Policy explains how AllayGames (“we”, “us”, “our”) collects, uses, shares and protects personal data when you play Astralia (the “Game”) or visit this website (together, the “Services”), and which rights you have. We are the controller of your personal data for the purposes described below.

1. Data we collect

Data you provide

  • Profile and community content: your player name, avatar, clan name, emblem and descriptions, and the messages you send in chats.
  • Support requests: your email address and the content of your messages when you contact us.
  • Codes and optional answers: promo and invitation codes you enter, and the reason for leaving if you choose to give one when deleting your account.

Data collected automatically

  • Account identifiers: a random identifier generated when the Game is first installed, internal account and player IDs, and session tokens.
  • Device and technical data: device model, operating system and version, Game version, system language and region, the language you choose in the Game, IP address, and the dates of registration and sign-ins.
  • Gameplay data: progress, levels, items, in-game currencies and their transaction history, battles, clan and chat activity.
  • Purchase data: the product purchased, price, currency, and the transaction ID and receipt issued by the app store. We never receive your payment card details.
  • Notification token: if you allow notifications, a push token that lets us deliver them to your device.
  • Diagnostics: crash and error reports (for example, device state and technical error details) and server logs.

Data from third parties

  • App stores (Apple App Store, Google Play) confirm and describe your purchases.
  • Sign-in providers: if you link your account to Google or Apple, we receive an account identifier from that provider and, where you allow it, your email address.

2. How and why we use your data

  • To provide the Game — create and keep your account, save and sync your progress, run battles, chats and clans, and deliver purchased content. Legal basis: performance of our contract with you.
  • To process purchases — verify receipts, credit purchases, handle subscriptions and keep accounting records. Legal basis: contract; legal obligation for accounting records.
  • To keep the Game safe and fair — detect cheating, fraud and abuse of promo and invitation programmes (including by using IP addresses), and moderate chats and community content. Legal basis: our legitimate interests and those of other players.
  • To support you — answer your requests and restore access to your account. Legal basis: contract and legitimate interests.
  • To send notifications — only if you allow them; you can switch them off at any time in the Game or in your device settings. Legal basis: consent.
  • To fix and improve the Game — investigate crashes and errors and monitor server performance. Legal basis: legitimate interests.
  • To comply with the law — respond to lawful requests and meet tax and accounting obligations. Legal basis: legal obligation.

We do not sell your personal data, we do not show advertising in the Game, we do not share your data for targeted advertising, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

3. Who we share data with

  • Service providers that process data on our behalf and under our instructions: DigitalOcean (server hosting), Sentry (crash and error reporting), Grafana Labs (server logs) and Google Firebase Cloud Messaging (push notifications).
  • Apple and Google, as independent controllers, when you make purchases through their stores or sign in with their accounts. Their own privacy policies apply.
  • Other players, who see your player name, avatar, level, clan, battle results and chat messages.
  • Authorities, where we are required to do so by law, and a successor in the event of a merger, acquisition or sale of assets, subject to this Policy.

Our community on Discord is run on Discord’s platform; if you join it, Discord’s terms and privacy policy apply.

4. International transfers

Our service providers may process data in the United States and other countries outside your own. Where the law requires it, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your data.

5. How long we keep data

  • Account and gameplay data — for as long as your account exists.
  • After you request account deletion — your account is deleted 14 days later, unless you restore it within that period.
  • Purchase and payment records — in anonymised form, for as long as accounting and tax laws require.
  • Moderation records — for as long as needed to protect other players and enforce our Terms of Service.
  • Server logs — about 14 days; crash and error reports — up to 90 days.
  • Support correspondence — for as long as needed to resolve your request.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given. You also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, write to support@astralia.xyz. To protect your account, we may ask you to confirm that it belongs to you, for example with your player code. We respond within one month, or sooner where the law requires. You can delete your account at any time — see Account deletion.

Residents of California and other US states: we do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your privacy rights.

7. Children

The Services are not intended for children under 13, or under the higher minimum age that applies in your country (for example, 16 in some EU countries). We do not knowingly collect personal data from such children. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption of data in transit and restricted access to our systems. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

9. This website

This website does not use cookies, analytics or advertising trackers. Your browser stores only your chosen language, locally on your device. Fonts are loaded from Google Fonts, so Google receives your IP address when you open the site. Links to Discord, the App Store and Google Play lead to services that have their own privacy policies.

10. Changes to this Policy

We may update this Policy from time to time. We will publish the new version on this page with a new date and, if the changes are significant, we will let you know in the Game before they take effect.

11. Contact us

For any questions about this Policy or your data, write to support@astralia.xyz or visit our Support page.