Privacy Policy

Last updated: 22 October 2026

Data controller

The Astraion Online game and this website are operated by the developer of Astraion Online (the data controller). Contact: gizlilik@astraiononline.com.

Data we process

Account

Username and pilot name.
Your password: never stored in plain form; only a salted, irreversible hash (scrypt) is kept.
Registration date, last login time, total play time.
Session key: stored on your device; the server keeps only a hash of it.

Game

Faction, level, experience, currencies, items, droids, ships, quests, position and similar game progress.
Friends list, clan membership and applications, gifts sent to you.
A log of item movements such as purchases, sales and gifts (to investigate item loss reports).
Ban records (reason, duration).

Technical

IP address and device / browser information, in security logs (e.g. to limit wrong password attempts) and debugging logs.
Technical diagnostics such as whether the app's sound files loaded.

Chat

Chat messages and whispers pass through the server but are not stored.

Data we do not process

We do not ask for your email address, phone number, real name, location (GPS), contacts, photos or microphone. No ads, no advertising ID, no third-party analytics or trackers.

Purposes and legal bases

Providing the game and storing your account and progress: performance of a contract.
Account and server security, fighting cheating and abuse, fixing bugs: legitimate interest.
Legal obligations (e.g. requests from authorities).

Retention

Account and game data: as long as your account exists.
Deleted accounts: kept for at most 30 days against accidental deletion, then destroyed. Copies in backups also rotate out within 30 days.
Technical and security logs: short-lived, size-limited rotating files; at most 6 months.

Transfers

Your data is processed in the data centre of the hosting provider that runs our game server, which may be located abroad (European Union); such transfers follow Article 9 of the Turkish data protection law (KVKK). Website and game traffic may pass through our network providers (e.g. Cloudflare) for attack protection and fast delivery. We never sell your data or share it with anyone for advertising or marketing.

Security

All connections are encrypted (HTTPS / WSS). Passwords are irreversibly hashed, wrong password attempts are limited, the database is backed up regularly and access to admin tools is logged.

Children

Astraion Online is not designed for children under 13. If you are under 18, play with the permission of a parent or guardian. If we learn that a child under 13 has created an account, we will delete it.

Your rights

You have the right to learn whether your data is processed, to request information, correction or deletion, to know the third parties it is transferred to, to object, and to claim compensation for damages. Send your request with your username to gizlilik@astraiononline.com; we reply within 30 days. You may also complain to the Turkish Personal Data Protection Authority (KVKK).

This website

This site uses no cookies, contains no forms, does not track visitors and loads no scripts, fonts or images from other sites. Cloudflare, which hosts the site, may briefly process technical data such as IP addresses to deliver and protect the site.

Changes

We may update this policy; important changes will be announced in game and on this page.