Privacy

The short version

You can play Ultra War without an account and without giving us your name or email. We keep as little as we can: a random player id, your game progress, and what you choose to share with other players. We never sell your data, we don’t show ads or use advertising trackers, and we don’t use your data to train AI models.

What we collect

• A random player id. The first time you play, your browser makes a random id. It is not your name and is not taken from anything about you. It goes with your saves, play statistics, bug reports, chat and friends messages, the leaderboard and the shared galaxy, so the game can tell players apart. Each profile on a browser has its own id; you can start a new one in Settings › Privacy (“Reset my statistics id”).
• Game progress and cloud saves. Your progress is saved in your browser. On the hosted game it is also backed up to our servers under your player id (Settings › Cloud backup, on by default), so a lost colony can be recovered. You can turn the backup off, or delete your cloud saves, in Settings.
• Chat, friends, the leaderboard and the shared galaxy. Galactic Comms messages, friends lists, groups and private messages, your player card, your Galactic Leaderboard results and where your home is on the Galactic Map (its system, your faction and whether your colony is founded). These are stored so other players can see them as the game intends. Chat is checked for abuse and logged for safety.
• Play statistics. If “Send play statistics” is on in Settings, the game sends what happened in play (sessions, time per mode, first-time milestones, game errors) with your player id, never your name or email. It is off when your browser sends Global Privacy Control or Do Not Track. Our servers also keep a short security record (a salted hash of your network address and basic browser details) to stop abuse.
• Bug reports and screenshots. When you use Report a bug, we receive your note, any screenshots you choose to attach, recent game errors, the game state needed to reproduce the bug and your player id (and your Star Captain name unless “Show my name” is off).
• News emails. Only if you sign up for launch news: your email address, after you confirm it.

Your name

We never ask for your real name, address, phone number or any ID document. The only name other players see is your Star Captain name, which you choose. It appears in chat, on Friends, on your player card, on the Galactic Leaderboard and beside your colony on the Galactic Map. Untick “Show my name” in Settings to leave it off the map, the leaderboard and team reports.

When you sign in (coming soon)

Online accounts are not open yet. When they are, signing in will be optional, for players 18 and over, and only for keeping your Star Captain name for chat and friends on every device. You will never need an account to play.

• Email sign-in: we keep your email address to send sign-in codes and important account notices. Other players never see it.
• Sign in with Google: see the next section.
• Age: we keep only the time you confirmed you are 18 or over, never your age or birth date.
• Your public name stays your Star Captain name, unique to you.

Google user data

• What we access: only your email address and your Google account identifier, through the openid and email scopes. We do not access your name, photo, contacts, Drive files, calendar or anything else in your Google account. If Google’s sign-in passes along a name or profile picture anyway, we discard it; it is never stored in the game or shown to anyone.
• How we use it: only to sign you in and to link your account to your game profile (your player id and your Star Captain name). We never use it for advertising, never sell it, never use it to train AI models, and never share it except with the processors that run the game for us: Supabase (sign-in and database) and Vercel (hosting).
• Storage and retention: your email address and Google account identifier are kept in our sign-in system (Supabase Auth) until you delete your account; see “Storage and protection” and “Deleting your data” below.
• Revoking access: you can remove Ultra War’s access at any time at myaccount.google.com/permissions. You can then still play without an account, or ask us to delete the account (below).

Limited Use: Ultra War's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use data

To run the game: save and restore your progress, show your name, chat, friends, leaderboard results and colony to other players, keep chat safe, fix bugs and balance the game. We don’t use it for advertising, we don’t sell or rent it, we don’t use it to train AI models, and we don’t make automated decisions about you beyond chat moderation and anti-cheat checks.

Who we share it with

Only with the companies that run the game for us, and only so they can do that: Vercel (web hosting), Supabase (database, storage and, later, sign-in) and an email delivery service for sign-in codes and news. What you choose to share in the game (your Star Captain name, chat messages, player card, leaderboard results, colony) is visible to other players. We disclose data to authorities only when the law requires it.

Storage and protection

Data is stored on Supabase’s and Vercel’s cloud servers. Every connection is encrypted in transit (HTTPS/TLS), and Supabase encrypts stored data at rest. Our database tables are closed to the public: only the game’s own server functions, holding a secret key, can read or write them, and only a small team can reach the dashboards. Network addresses are stored only as salted hashes, raw addresses for at most 90 days.

Cookies and local storage

We don’t use advertising or tracking cookies. The game keeps your saves, settings, player id and (once sign-in opens) your sign-in session in your browser’s local storage, and a service worker caches game art so pages load faster. Clearing your browser’s site data removes them from that browser (export your progress first).

How long we keep things

• Play statistics: 13 months. Raw network addresses in security records: 90 days.
• Chat: the live feed 30 days, the message log 12 months; reports and moderation records 24 months. Private messages: 12 months.
• Galactic Map entries and player cards: until 13 months after you last played.
• Bug reports: personal text and screenshots 90 days.
• Cloud saves: while you play, until you delete them; earlier versions up to 30 days.
• Online accounts (when open): your email and Google identifier until you delete the account; account records 12 months after.
• News sign-ups: until you unsubscribe.

Deleting your data, or getting a copy

Email devops@ultra-labs.io with your Star Captain name and your friend code (the Friends panel shows it), or the date of a bug report you sent, so we can find your data. We will send you a copy of what we hold, or delete it, usually within 30 days. Once online accounts open you can also ask us to delete your account, which removes your email, Google identifier, handle and the links to your player ids; then revoke Google’s access at myaccount.google.com/permissions. In the game you can export all your progress at any time (Profiles › Export), delete your cloud saves and start a new player id. Safety records (chat reports and moderation) are kept for the times above.

Children

Ultra War is not made for children. Online accounts, when they open, are for players 18 and over. If you think a child has given us personal data, email devops@ultra-labs.io and we will delete it.

Changes to this policy

When what we collect or how we use it changes, we update this page and the date below, and announce bigger changes in What’s New.

Who we are

Ultra War is made by Ultra Labs. Questions or requests: devops@ultra-labs.io.