Privacy Policy

• Account. Your email address, plus either a password (hashed by Supabase Auth, never visible to us) or an identifier from Google or GitHub if you sign in that way. Also the username you choose.
• Game state. Your commander handle, race, planet names and coordinates, fleets, resources, battle history, alliance membership, and any chat or messages you send.
• Push subscriptions.Only if you opt in: your browser's push endpoint and its encryption keys.
• Site analytics. For each page view we store the path, the referring site, your country, your device type (mobile, tablet or desktop), and a hash of your IP address and browser combined. The hash changes every day and cannot be reversed, so it lets us count roughly how many people visited without identifying anyone or storing an IP address. There is no analytics cookie, which is why this site has no cookie banner.
• Operational logs.Our hosting provider's request logs can contain IP addresses for a short period. We do not copy them into the game's own database.

• No advertising or third-party tracking scripts.
• No analytics cookies, and no cross-site tracking of any kind.
• No IP addresses in our own database, only the daily hash described above.
• No location data beyond the country your IP suggests.
• No microphone, camera, contacts or device storage access.
• We never sell, rent or share your data for marketing.

Only to run the game: to sign you in, draw your cockpit, resolve combat, send the notifications you opted into, keep the servers standing up, and deal with cheating and abuse.

Galaro is for players aged 16 and over. If you are under 16, please do not sign up. If you believe a child has created an account, email us and we will remove it.

By design, these are visible to other players in the same round:

• Your commander handle and race.
• Your planet names and coordinates.
• Battle reports involving your planets, and replays of them.
• Chat and alliance messages you send.
• Alliance membership, and your position in the standings.

Your email address, your password and your push subscription are never visible to other players. The game has no feature that shows one player another player's email, and we have an automated test that fails the build if anyone adds one.

You can delete your account yourself, at any time, from your account page. No need to ask us.

Deleting removes your login, your email address, your username, your commander, your planets, your fleets, your push subscription, your private messages and the chat you posted. Your planets leave the map and any fleets in flight are sent home first, so that other players are not left attacking something that no longer exists.

It cannot be undone, and there is no waiting period: we would rather delete your data immediately than hold on to it for a month in case you change your mind. You can sign up again later with the same email address, but it will be a fresh start with no history.

One thing survives on purpose. Finished seasons keep their final table, including the commander name you used, because past results are a public competitive record. If you need your name removed from those too, email us and we will do it by hand.

• Your account and personal data: until you delete it.
• Game history: for the life of the game, because past rounds, standings and replays are part of the product.
• Analytics rows: kept, but they are not linked to you. The daily hash makes them impossible to trace back to a person.

• Supabase. The database, sign-in and realtime updates.
• Vercel. Hosting for the site and its server code.
• Resend. Sends account emails such as confirmations and password resets.
• Cloudflare Turnstile. The invisible check on the sign-in page that keeps bots out.
• Your browser's push service (Apple, Google or Mozilla), only if you turn on notifications.

Under UK and EU data protection law you can also ask for a copy of your data, ask us to correct it, or object to how we use it. Email support@galaro.app and we will respond within a month.

If you are not happy with how we handle it, you can complain to your national data protection authority. In the UK that is the ICO.

Questions about any of this: support@galaro.app.