Privacy Policy
Last updated 28 September 2026
We keep data collection to what running the game and its payments requires. This policy explains what we hold, why, and your rights.
1. Who we are
The data controller is the operator of DEUTERIA (see the Legal Notice). Contact for any privacy matter: [email protected] (subject "Privacy").
2. What we collect
• Account data — your email address, a securely hashed password, and your in-game name.
• Sign in with Google or Discord — if you choose to sign in through Google or Discord, that provider sends us your email address, whether the provider has verified it, and your account identifier at the provider. We store the identifier and the email it reported, so we can recognise you next time; we never receive or store your password for that provider. Google's and Discord's own privacy policies govern what they collect when you sign in with them.
• Technical data — IP address, browser/device information and access timestamps, kept to run the game and to detect cheating (multi-accounting, bots).
• How you found us — if you arrive through one of our links that carries a campaign tag, such as a social media post or an ad, we store the last such tag with your account when you register. Until then it is held in your session, which ends within 12 hours of your last visit; we set no extra cookie for it.
• Gameplay data — your planets, fleets, messages, alliance activity and similar in-game records.
• Payment data — when you buy Dark Matter, payment is handled by Xsolla, which acts as merchant of record and as the data controller for the payment itself. We never see or store your card details; we receive a transaction reference, the amount and currency charged, and the payment status. Xsolla's privacy notice covers what it collects at checkout.
• Support data — the content of messages you send us.
3. Why we use it (legal bases)
• To provide the game and your account — performance of our contract with you.
• To keep the universe fair and secure (anti-cheat, abuse prevention) — our legitimate interest.
• To learn which of our posts and ads bring new players — our legitimate interest.
• To take payment and meet tax and accounting duties — contract and legal obligation.
4. Cookies
We use only essential cookies: a session cookie to keep you logged in and a security (CSRF) token. We do not use advertising or cross-site tracking cookies.
5. Sharing
We share data only with the providers that make the game work — hosting, our email provider (Postmark) and our payment provider (Xsolla) — and where the law requires it. If you sign in with Google or Discord, that provider learns that you are signing in to DEUTERIA; we send it nothing else. We do not sell your data.
6. Retention
Account and gameplay data, including the campaign tag you registered through, are kept while your account exists. Payment records are kept for the period required by tax and accounting law. Deleted accounts are removed or anonymised, except for records we are required to retain.
7. Security
Passwords are stored only as salted hashes and traffic is encrypted in transit. No online service is perfectly secure, but we take reasonable measures to protect your data.
8. Your rights
Subject to local law, you may request access to, correction, deletion or a copy of your data, and object to certain processing. Contact us at the address above. EU/UK users may also complain to their data-protection authority.
9. Children
The Service is not intended for children under 16 (or the minimum age in your country). We do not knowingly collect their data.
10. Changes
We may update this policy; material changes will be announced in-game.
Last updated 28 September 2026
We keep data collection to what running the game and its payments requires. This policy explains what we hold, why, and your rights.
1. Who we are
The data controller is the operator of DEUTERIA (see the Legal Notice). Contact for any privacy matter: [email protected] (subject "Privacy").
2. What we collect
• Account data — your email address, a securely hashed password, and your in-game name.
• Sign in with Google or Discord — if you choose to sign in through Google or Discord, that provider sends us your email address, whether the provider has verified it, and your account identifier at the provider. We store the identifier and the email it reported, so we can recognise you next time; we never receive or store your password for that provider. Google's and Discord's own privacy policies govern what they collect when you sign in with them.
• Technical data — IP address, browser/device information and access timestamps, kept to run the game and to detect cheating (multi-accounting, bots).
• How you found us — if you arrive through one of our links that carries a campaign tag, such as a social media post or an ad, we store the last such tag with your account when you register. Until then it is held in your session, which ends within 12 hours of your last visit; we set no extra cookie for it.
• Gameplay data — your planets, fleets, messages, alliance activity and similar in-game records.
• Payment data — when you buy Dark Matter, payment is handled by Xsolla, which acts as merchant of record and as the data controller for the payment itself. We never see or store your card details; we receive a transaction reference, the amount and currency charged, and the payment status. Xsolla's privacy notice covers what it collects at checkout.
• Support data — the content of messages you send us.
3. Why we use it (legal bases)
• To provide the game and your account — performance of our contract with you.
• To keep the universe fair and secure (anti-cheat, abuse prevention) — our legitimate interest.
• To learn which of our posts and ads bring new players — our legitimate interest.
• To take payment and meet tax and accounting duties — contract and legal obligation.
4. Cookies
We use only essential cookies: a session cookie to keep you logged in and a security (CSRF) token. We do not use advertising or cross-site tracking cookies.
5. Sharing
We share data only with the providers that make the game work — hosting, our email provider (Postmark) and our payment provider (Xsolla) — and where the law requires it. If you sign in with Google or Discord, that provider learns that you are signing in to DEUTERIA; we send it nothing else. We do not sell your data.
6. Retention
Account and gameplay data, including the campaign tag you registered through, are kept while your account exists. Payment records are kept for the period required by tax and accounting law. Deleted accounts are removed or anonymised, except for records we are required to retain.
7. Security
Passwords are stored only as salted hashes and traffic is encrypted in transit. No online service is perfectly secure, but we take reasonable measures to protect your data.
8. Your rights
Subject to local law, you may request access to, correction, deletion or a copy of your data, and object to certain processing. Contact us at the address above. EU/UK users may also complain to their data-protection authority.
9. Children
The Service is not intended for children under 16 (or the minimum age in your country). We do not knowingly collect their data.
10. Changes
We may update this policy; material changes will be announced in-game.