Privacy Policy
Effective September 28, 2026
This policy explains what information Planet-Fall collects when you use the game and website at planet-fall.io (the "Service"), why, and what you can do about it. The Service is run by Alexzander Raykher ("we", "us"), who is responsible for your information. Contact: [email protected].
The short version: we collect as little as we can. There's no email sign-up and no analytics, and we don't sell your data. We may show one ad, on the main menu only, provided by Google, which uses cookies as described below. We store the game itself (your nation, name and colour), and, if you make an account, your username, a securely hashed password and your game statistics.
1. What we collect
When you play as a guest
- Your nation: the nation name and banner colour you choose, and your game state (territory, troops, gold, buildings, ships, alliances and so on).
- A random player token that links your browser to your nation. It is stored on our server and in your browser.
When you create an account
- Your username. It is also shown publicly as your nation's name.
- Your password, stored only as a salted, one-way hash (scrypt). We never store or see the password itself.
- Sign-in sessions: a fingerprint of each device's random sign-in token and when it was last used. Sessions unused for 30 days expire.
- Your statistics: matches played, matches won, nations conquered, best share of the planet, time played and when you joined.
Things everyone sends
- Chat messages are sent live to other players. We don't store them on our server, although other players' browsers display them.
- Your IP address is used while you're connected, and briefly afterwards, to limit abuse (for example, sign-in attempts and connections per network). We don't write it to our logs or save it with your nation or account.
- Technical information your browser sends with every web request, such as its type and version, is used only to deliver the site and isn't stored by us.
We don't ask for your real name, email address, phone number, location, payment details or any other personal information.
2. How we use it
- To run the game: show your nation to other players, save the world, and let you continue where you left off.
- To run your account: sign you in, keep your nation across devices and track your statistics.
- To keep the game fair and safe: filter offensive names and chat, stop cheating and abuse, and enforce our Terms of Service.
- To keep the Service working: fix bugs, measure server performance and keep backups.
Where the law requires a legal basis (for example in the EU and UK), we rely on performing our agreement with you (providing the game you asked to play) and on our legitimate interest in keeping the Service secure and fair.
3. What other players can see
Your nation name (or username), banner colour, territory, army size, alliances, wins and whether you're online are visible to everyone playing, as are your chat messages. Winners' nation names are kept in the public Hall of Fame. Your statistics are shown to you when you're signed in.
4. Stored on your device
The game itself uses your browser's local storage, not cookies, to remember your player token, your sign-in session (if you have an account), and your settings: potato graphics, collapsed panels and whether you've seen the guide. This stays on your device, and you can delete it at any time by clearing your browser's data for planet-fall.io. As a guest, doing so means losing access to your nation. The admin Control Center uses one cookie, for the operator only. The main-menu ad may set Google's advertising cookies (see section 5a).
5. Other companies involved
- Amazon Web Services hosts our server in the United States, and all game data is stored there.
- Google Fonts: your browser downloads the game's typefaces from Google, which receives your IP address and browser information as part of that request. See Google's Privacy Policy.
- itch.io: if you play through our itch.io page, itch.io's own privacy policy covers what itch.io collects.
5a. Advertising
To help pay for the servers, we may show a single advertisement on the main menu. It is never shown during gameplay, or when you play through itch.io. The ad is provided by Google AdSense. When it is shown, Google and its partners may use cookies and similar technologies, and receive your IP address and browser information, to serve the ad, measure it and, where you allow it, personalize ads based on your visits to this and other websites. In the EEA, the UK and Switzerland, you're asked for your consent first. You can learn more and opt out of personalized ads at Google's advertising page and Google Ad Settings. Blocking the ad doesn't affect the game. We don't share your account, statistics or game data with advertisers.
We don't sell or rent your information, and we don't give your account, statistics or game data to advertisers or data brokers. We may disclose information if the law requires it, or to protect players or the Service from harm.
6. How long we keep it
- Accounts and statistics: until you delete your account (Stats → Delete account) or ask us to, or until we close the Service.
- Guest nations: your name, colour and player token carry over from match to match so you can keep playing. Game state is replaced when each match ends and a new planet forms.
- Match history: the winners and top nations of each match are kept in the Hall of Fame.
- Backups: daily backups of the game data are kept for 14 days and then deleted.
- IP addresses: held in memory only, typically for up to an hour for abuse limits, and never written to disk.
7. Security
The site uses HTTPS encryption. Passwords are hashed with scrypt, sign-in tokens are stored only as fingerprints, sign-in attempts are rate-limited, and game data on the server is readable only by the game. No system is perfectly secure, so please use a password you don't use anywhere else.
8. Your choices and rights
You can delete your account yourself at any time: sign in, open Stats on the main menu and choose Delete account. This permanently removes your account, statistics, sign-in sessions and your nation in the current match. Copies in our daily backups are deleted within 14 days.
You can also ask us to access, correct, export or delete your data by writing to [email protected]. Tell us your username, and we'll ask you to confirm you own the account. Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may also have rights to object to or restrict how we use your data, and to complain to your local data protection authority. We'll respond within 30 days. We don't sell personal information, and we don't use your account or game data for targeted advertising or automated decisions about you. Google's use of cookies for the menu ad is described in section 5a.
9. Children
Planet-Fall is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.
10. International players
Our server is in the United States. If you play from elsewhere, your information is transferred to and processed in the United States, where data protection law may differ from your country's.
11. Changes to this policy
We'll update this policy when the game changes how it uses data, for example if we add email sign-up or a Steam version. The date at the top shows when it last changed, and for significant changes we'll try to let players know in the game.
12. Contact
Questions or requests about your privacy: [email protected].