Privacy Policy

1. Scope and controller

This policy describes the data processed for the Galaxium game and website. Publisher / data controller: OGM CONSULTANTS INC.

For privacy, account, and data requests: info@galaxium.games. If you write to us, we use your email address and message only to answer and handle your request, and delete them once they are no longer needed.

2. Game account and game data

3. How we use your data

To create accounts and verify sessions; save progress; run online combat, social features, and the game economy; keep the service secure; and investigate technical issues. Processing is carried out for performance of a contract, legitimate interests, or a legal obligation.

4. Information stored on the device

When “Remember me” is used, a username and session token may be stored on the device. Server-side remember tokens are hashed, refreshed in use, and expire after 30 days in the current app. That period is not the deletion period for the account or game progress. Your password is not stored in plain text on the device for this feature.

This website does not use advertising cookies, analytics SDKs or marketing trackers. Our hosting and network-security providers may process technical data needed to deliver and protect the site. The site saves only your chosen language in your browser’s local storage; it is never sent to us and you can clear it at any time.

5. Infrastructure and third parties

Servers, databases, network, and security providers are used to run the game online. Production infrastructure uses Hetzner and Cloudflare; account emails (password-reset codes and security notices) are delivered through Resend. These providers access only the data needed to deliver the service.

When testing through TestFlight, Apple may process test usage, crash information, and shared feedback under its own terms. Read the Apple TestFlight terms for details. External links such as Discord follow that service’s privacy rules.

6. Retention and security

Account and game data are kept while your account is active. After an account-deletion request or if the service ends, related data are deleted or anonymized within a reasonable time. Operations logs are kept for a limited period for security and troubleshooting. Account passwords are hashed; this does not create an absolute security guarantee for any system.

7. Requests and account deletion

Depending on applicable law, you may have rights such as information, access, correction, deletion, and objection. Send requests to info@galaxium.games.

“Forgetting” an account in the app only removes the remembered login on that device; it does not delete the server account or progress. Write to the same address for permanent account deletion.

8. Age suitability and changes

Galaxium is aimed at the age group matching its store rating. We do not knowingly collect personal data from children under 13. Material changes are explained on this page and, when needed, in the game.