Privacy Policy

1. Introduction

This policy applies to data collected through our website, game, and related APIs. It does not cover third-party sites we link to (for example legacy community pages). We may update this policy; the effective date above shows the latest revision.

2. Who we are

Data controller: Gomsilo B.V., Da Costastraat 98 - 3v, 1053 ZT Amsterdam, Netherlands. Managing director: Sebastian Lagemann. KvK: 72416084. Privacy contact: privacy@gomsilo.com.

3. Scope

The Services are a browser-based space strategy MMO. We process account data to let you sign in, game data to run your empire, and limited technical data to keep the platform secure and reliable.

4. Data we collect

• Account data: email, display name, profile picture, locale, and identity-provider identifiers when you sign in with Google or Discord.
• Game data: player profiles, colonies, fleets, research, inventories, in-game events, and support tickets you submit.
• Marketing attribution: optional UTM campaign parameters and landing path when you arrive from an ad or campaign link (first-touch only).
• Technical data: IP address, browser type, request logs, session identifiers, and error reports needed to operate and debug the Services.

5. How we use data

• Provide, secure, and improve the game and website.
• Authenticate you and maintain your session.
• Measure whether marketing campaigns bring players to X-Wars Resurrection.
• Analyze aggregate usage to balance the economy and fix bugs.
• Respond to support requests and enforce our Terms of Service.

6. Tracking and cookies

We use a small set of cookies and similar technologies:

• Session and authentication cookies to keep you signed in.
• Locale preference cookies to remember your language.
• A first-touch signup attribution cookie when you land with campaign parameters (stored up to 30 days, consumed when you register).
• Error monitoring and optional session replay through Sentry when configured, to catch crashes, stability issues, and reproduce user-reported bugs.

7. Do Not Track (DNT)

We follow a Do Not Track header approach. When your browser sends DNT: 1, we do not store marketing attribution cookies and we skip optional campaign tracking requests. Essential cookies and security logging required to run the game may still apply.

You can also clear cookies in your browser settings at any time.

8. Minimal tracking principle

We do not sell your personal data. We do not run invasive cross-site ad profiles. Internal tracking is limited to what we need to operate X-Wars commercially: knowing which campaigns work, keeping accounts secure, and understanding how players use core game systems. We avoid third-party marketing pixels where possible.

9. Sharing with third parties

• Identity providers (Google, Discord) when you choose to sign in with them.
• Infrastructure and hosting providers that process data on our behalf under contract.
• Sentry (or similar) for error monitoring when enabled.
• Authorities when required by law or to protect rights, safety, and integrity of the Services.

10. Retention

We retain personal data for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements. You may request deletion of your account data by contacting help@gomsilo.com. Some logs may be kept longer where required for security or legal reasons.

11. Your rights

Depending on your location (including the EU/EEA under GDPR), you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Contact privacy@gomsilo.com to exercise these rights. You may also lodge a complaint with your local data protection authority.

12. Security

We apply technical and organizational measures to protect personal data. No method of transmission over the Internet is 100% secure; you use the Services at your own risk regarding network security.

13. Children

The Services are not directed at children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children.

14. International transfers

Data may be processed in the Netherlands, the European Union, and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

15. Changes to this policy

We may revise this Privacy Policy. Material changes will be posted here with an updated effective date. Continued use after changes take effect means you accept the revised policy.

16. Contact

General questions: help@gomsilo.com

Privacy requests: privacy@gomsilo.com

Gomsilo B.V., Da Costastraat 98 - 3v, 1053 ZT Amsterdam, Netherlands.