Privacy Policy

1. Who is responsible for your data

The data controller is the publisher of Space Alchemist: Creative Citizen, a single-member limited liability company (EURL) registered in Marseille under number RCS 842 445 231, 6 rue George, 13004 Marseille, France (“we” in this policy).

For any question about your data, write to support@spacealchemist.app.

2. Data the app collects

2.1 Anonymous player identifier

At first launch, the app creates a random identifier through Firebase Authentication (anonymous sign-in). This identifier is not linked to your name, your Apple Account or your email address.

At each launch, the app saves this identifier and the date of the launch in our database (Cloud Firestore, hosted in the European Union).

• Purpose: recognize your installation so that online features work, such as feedback messages and online duels.
• Legal basis: our legitimate interest in running the game (Article 6(1)(f) of the GDPR).

2.2 Feedback messages

When you write in Menu → Contact / Feedback, your text is saved with your anonymous identifier. We read these messages to improve the game. We cannot answer them: to receive an answer, write an email instead. Please do not include personal information in these messages.

• Purpose: read your suggestions and bug reports.
• Legal basis: our legitimate interest in improving the game.

2.3 Gameplay statistics

The app uses Google Analytics for Firebase, in a version that does not access the advertising identifier (IDFA). It records events such as tutorial progress, level reached, fight results, operators placed or removed, use of the solution, sound settings, story progress, the outcome of in-app purchases (product and price) and technical errors.

Google Analytics also collects automatically: an app instance identifier, the device model, the iOS version, the app version, the language, the country and region (derived from the IP address, which Google Analytics does not store), the first launch, sessions and engagement time.

• Purpose: understand where players get stuck and balance the game.
• Legal basis: our legitimate interest in improving the game. You can object at any time (see section 7).

2.4 Crash reports

When the app crashes, Firebase Crashlytics sends a report containing the technical trace of the error, the device model, the iOS version, the available memory and storage, the screen orientation, a random installation identifier and the diagnostic messages written by the app just before the crash.

• Purpose: find and fix errors.
• Legal basis: our legitimate interest in keeping the game stable and secure.

2.5 App integrity checks

Firebase App Check, with Apple App Attest, verifies that requests reaching our servers come from the genuine app on a genuine device. The attestation itself is not kept. The resulting tokens expire after seven days at most.

2.6 In-app purchases

Purchases are processed entirely by Apple. We never receive your payment details or your Apple Account. The app only receives confirmation that a purchase succeeded or failed. The Apple Privacy Policy applies to the payment.

2.7 Online duels

Online duels open at level 10 and are optional. When you join them, the following data is stored in our database with your anonymous identifier:

• Player name: your Game Center alias if you are signed in to Game Center, otherwise a generated name such as Alchemist-1234. It is shown to other players. The app reads only the alias from Game Center. You never type a name in the app.
• Deployed ships: the configuration of each ship you deploy, its category and its appearance. Other players’ apps download it to run a duel against it. The game does not display a ship’s configuration to other players.
• Duels and statistics: each duel (the two ships, the planet, the result and the date), and the wins, draws, losses and experience points of your ships. These results appear in the history of both players and in the leaderboards, under your player name.
• Last connection date, used to choose opponents.
• Notification token, only if you allow notifications, used to tell you about duels fought against your ships.

• Purpose: run the duels, the history, the leaderboards and the notifications.
• Legal basis: the performance of the service you use when you join online duels (Article 6(1)(b) of the GDPR).

2.8 Data that stays on your iPhone

Your solo progress, your settings and the details of your last fights are stored on your iPhone only. They are not sent to us. Deleting the app deletes them.

3. What the app does not do

• No advertising and no advertising network.
• No access to the advertising identifier and no tracking across apps or websites of other companies.
• No sale or rental of data.
• No access to your precise location, contacts, photos, camera or microphone.

4. Who receives the data

Only the publisher accesses the data listed above, except the online duel data that the game shows to other players (section 2.7): your player name, the results and statistics of your ships, and your rank in the leaderboards. The data is processed on our behalf by:

• Google, through Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Google Analytics, Crashlytics, App Check, Hosting). See Privacy and Security in Firebase.
• Apple, for in-app purchases, App Attest, Game Center and the delivery of notifications.

5. Transfers outside the European Union

The Cloud Firestore database and the Cloud Functions are hosted in the European Union. Some Firebase services, such as Google Analytics and Crashlytics, may process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and these transfers are also covered by the European Commission’s Standard Contractual Clauses.

6. How long the data is kept

Anonymous identifier and last launch date

As long as you use the game, or until you ask for deletion.

Online duel profile, ships, duels and statistics

As long as you use online duels, or until you ask for deletion. Retired ships stay in the leaderboards.

Notification tokens

Until notifications are turned off, the token is renewed, or you ask for deletion.

Feedback messages

As long as they are useful to the development of the game, or until you ask for deletion.

Gameplay statistics

2 months for detailed events, 14 months for data attached to the app instance identifier (such as the level reached). Aggregated reports, which contain no individual data, are kept by Google Analytics.

Crash reports

90 days.

IP addresses logged by Firebase Authentication

A few weeks.

IP addresses logged by the website host

A few months.

7. Your rights

Under the General Data Protection Regulation, you can ask to access, correct or delete your data, to restrict its use, to object to its use (including gameplay statistics) and to receive a copy of it.

To do so, write to support@spacealchemist.app and include the player identifier shown in the app under Menu → Privacy. Because the data is anonymous, this identifier is the only way to find it. We answer within one month.

When your data is deleted, your online duel profile, your notification tokens, your duel history and your feedback messages are removed. Your ships stay in other players’ histories and in the leaderboards under the name Unknown, so that their results remain consistent.

Deleting the app stops all collection. The anonymous data already sent is then no longer linked to any device.

If you believe your rights are not respected, you can file a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.

8. This website

spacealchemist.app uses no cookies, no analytics and no third-party resources. Its host, Firebase Hosting (Google), processes the IP address of each request to deliver the pages and detect abuse, and keeps it for a few months.

9. Children

Space Alchemist is not directed at children specifically and collects no information that directly identifies a child. In online duels, other players only see a Game Center alias, moderated by Apple, or a generated name. A parent can ask for the deletion of a child’s data as described in section 7.

10. Changes to this policy

We update this page whenever the app changes how it uses data, and the date at the top changes accordingly.

11. Contact

support@spacealchemist.app