Star Abyss — Privacy Policy
Effective date: 2026-10-26 Version 1.0 Operator: Junqiang Guo
1. In one paragraph
Star Abyss has no accounts; your progress lives only on your phone. The only data that leaves your device is: (1) advertising data collected by Google AdMob when you choose to watch an ad; (2) your nickname and gear stats, sent to your teammates' phones during co-op; (3) ordinary connection data if you choose to use a relay server or the remote mailbox feed. We run no server that collects your data, and we use no analytics, tracking or crash-reporting tools.
2. What we collect and process
Organised by the Apple App Privacy and Google Play Data safety categories.
2.1 Identifiers
- Anonymous install ID: a random value generated on your phone the first time an ad is needed (
ads_install_id). It contains no identity information and is linked to no account (there are none). Each time you watch a rewarded ad it is sent to Google as the server-side-verification "user ID", so that rewards can be checked and not granted twice. Deleted when you uninstall. - Advertising ID (iOS IDFA / Android Advertising ID): read by the Google AdMob SDK, not by us. On iOS it is available only after you allow tracking in the system prompt; in the EU, UK and some US states you first see Google's consent form.
- Seat token: a random string the host generates for you in co-op so you can reconnect after a drop. It expires when the room ends.
2.2 Usage data
- Ad view counters: how many times you watched each ad placement today and when you last did. Stored only on your device, to enforce daily limits.
- Ad interactions: which ads you saw and whether you finished them are collected by Google AdMob under Google's policies. With each view we also send Google the placement name and reward type (for example "stamina ×N"); nothing about your identity.
2.3 Diagnostics
- On-device error log: when the Game crashes or hits an error, the error text, code location, the stage and ship you were on, whether you were in co-op, and the last 200 in-game currency changes (time, currency, amount, reason) are written to a log on your phone (the last 20 entries are kept). After each co-op battle a frame-rate summary is also written. This log is never uploaded; we only see it if you choose to give us your device or an export of the log to investigate a problem.
- SDK diagnostics: the Google AdMob SDK reports its own crash and performance data to Google.
2.4 Data shared with other players in co-op
Co-op uses the host's phone as the server; you join by automatic discovery on the same Wi-Fi, by typing a room code, or through a relay server. When you create or join a room:
- Your nickname (optional; "Pilot" is shown if empty), chosen ship, ready state, combined gear stats, protocol version and screen field height are sent to the host's phone and relayed by the host to everyone in the room.
- Same-Wi-Fi discovery: when you host, the room code, your nickname and whether the room is locked are broadcast over Bonjour / mDNS to devices on the same network, which can also resolve your phone's local IP address and port. On public Wi-Fi, other people on that network can see this too.
- Local connections: when teammates connect to your phone, your phone sees their local IP addresses, as with any local network connection.
- All of this is held only in the participants' phones' memory while the room exists and is discarded when it ends. We never receive it.
- There is no chat, voice or free text in the Game; the only text other players see from you is your nickname. Please do not use your real name, phone number or other personal information as a nickname.
2.5 Relay server (optional)
When you are not on the same network, you can enter a relay server address in Settings (empty by default; nothing connects unless you set one). The relay only forwards data frames by room code and does not read game content. We do not currently run an official relay; a relay you enter is the responsibility of whoever runs it (like any website, it sees your IP address).
2.6 Remote mailbox feed (optional)
The Game may download announcement or compensation mails from a static web address we host. The request carries no identifier; it is an ordinary HTTPS download, and the hosting provider sees your IP address and system user agent. This feature is currently off.
2.7 Camera
The Game does not use the camera (the former scan-to-join feature was removed on 2026-10-25 and no camera permission is requested). Join a room by typing its code or by automatic discovery on the same Wi-Fi.
2.8 Purchases
There are no in-app purchases yet. Once added, payment is handled by Apple or Google and we never receive your card details; we will receive proof of a completed purchase in order to grant the item, and will update this policy then.
2.9 What we do not collect
Name, email, phone number, passwords, precise location, contacts, photos, files, clipboard, microphone, push tokens, hardware serial numbers. We use no analytics SDK. The "coarse location" that AdMob infers from your IP address is Google's processing; see section 3.
3. Third-party SDKs and services
| Service | Purpose | What it collects | Policy |
|---|---|---|---|
| Google AdMob / Google Mobile Ads SDK (including the User Messaging Platform for consent) | Rewarded video ads; GDPR / US-state consent form | Advertising ID, IP-based coarse location, device and OS information, ad interactions, SDK diagnostics | https://policies.google.com/privacy ; https://support.google.com/admob/answer/6128543 |
| Apple App Tracking Transparency | The iOS "Allow tracking" prompt | Your choice (managed by iOS) | https://www.apple.com/legal/privacy/ |
| Apple App Store / Google Play | Distribution and, in future, payments | Per each store's policy | as above / https://policies.google.com/privacy |
| bonsoir, shared_preferences, flame | Local libraries (LAN discovery, local storage, game engine) | Send nothing to their authors | — |
Your choices about ad personalisation and consent are in section 5.
4. Legal bases and purposes
- Running the Game, saving progress, co-op: performance of our agreement with you / providing the feature you requested.
- Advertising: for EU, UK and Swiss users, your choice in the consent form; elsewhere, our legitimate interest in offering the Game free of charge, or as otherwise permitted by local law.
- Error log: legitimate interest in fixing problems; it never leaves your device.
5. Your choices and rights
- Ad personalisation: on iOS, turn it off under Settings → Privacy & Security → Tracking; on Android, reset or delete your Advertising ID under Settings → Google → Ads; in the EU, UK and similar regions you can also change your consent at any time under the Game's Settings → Ad Privacy Settings. You may still see non-personalised ads.
- No ads at all: every ad is optional and plays only when you tap a "watch an ad" button. The ad SDK starts, and may preload an ad, when you reach the main menu.
- Deleting your data: uninstalling the Game deletes all saves, settings, the error log and the anonymous install ID on your device. Co-op data is discarded when the room ends. We hold no personal data about you on our servers to delete.
- Access, rectification, portability, objection, restriction, complaint (GDPR, UK GDPR): you may ask us to provide, correct or delete personal data we hold about you, and may complain to your local data protection authority. Because we hold almost none, most requests will be answered with "on-device data: please delete it yourself; data held by Google: please exercise your rights with Google".
- US state privacy laws (CCPA / CPRA and others): we do not sell your personal information. Providing the advertising ID to AdMob for personalised ads may count as "sharing"; you can opt out through the system settings above. We will not treat you differently for exercising your rights.
- Australia (Privacy Act 1988, APPs): you may request access to and correction of personal information we hold and may complain to the OAIC. Even if we are exempt from the Act as a small business, we handle requests as described here.
- To exercise your rights, email [email protected]. We reply within 30 days.
6. Children
The Game is not directed at children under 13 (under 16 in some EU member states). We do not knowingly collect their personal information or serve them personalised ads. The stores' target audience is set to 13 and over. If you are a guardian and believe a child has given us personal information, contact us and we will delete it.
7. Retention
| Data | Kept |
|---|---|
| Saves, settings, anonymous install ID, ad counters, error log (last 20 entries) | On your phone until you uninstall or reset |
| Co-op lobby data, seat tokens | Discarded when the room ends |
| Data collected by Google AdMob | Per Google's policies |
8. International transfers
AdMob data is processed by Google worldwide, including in the United States. We do not currently run a relay or mailbox server. Co-op data travels only between the participating players' devices.
9. Security
Saves stay on your device. Co-op connections on a local network are plain WebSocket (within the same Wi-Fi); through a relay we recommend wss:// (TLS). Rooms can be password-protected. We never transmit or store payment or identity information.
10. Changes to this policy
We will update the effective date at the top; material changes will be announced in the Game. Continuing to play after a change means you accept it.
11. Contact
Operator: Junqiang Guo Email: [email protected]
Website: https://starabyss.app