Privacy notice for Stellar Defence

Digital-e UG (haftungsbeschränkt), represented by managing director Kurt Laabs
Norderstraße 47, 25436 Tornesch, Germany

Privacy enquiries: anfrage@digital-e.org
Product support: kurt.laabs@digital-e.org
Telephone: +49 4122 8452786

The app stores your progress, stars and medals, experience, game currencies, module cards, equipment, achievements, tasks and local records. It also stores your chosen display name, tutorial status, timestamps for daily tasks and rewards, and settings for difficulty, visuals, vibration and sound effects. The game processes these details on your device and does not upload them to our servers. Images, fonts and sounds are bundled with the app.

This storage provides the game you requested and lets you continue your progress. Where these details are personal data, the legal basis is Article 6(1)(b) GDPR. Necessary device storage is based on section 25(2)(2) of the German TDDDG. Without saved progress you cannot resume at the same point after restarting. A custom display name is optional; the default is AEGIS.

For purchases, the app also stores a random installation identifier, a purchase journal and receipts whose delivery is not yet complete. The identifier binds purchased resources to the same installation and prevents duplicate delivery. Receipt markers and resources are saved together before a purchase is acknowledged.

When you use the shop, the app requests prices and available products from Google Play. Before a purchase it checks whether our verification service on games.digital-e.org is available. For verification, delivery and restoration, the app sends the product identifier, the purchase receipt supplied by Google and its random installation identifier to this service over an encrypted connection. The service verifies the receipt with Google. We do not receive payment details such as credit card numbers. Google Play handles payment.

Our purchase journal contains hashes of the receipt and installation identifier, the product identifier, time the record was created, delivery status and revocation status. It contains neither your game save nor your display name. The service also processes the IP address technically required for the connection; it is not used for advertising or location inference. Regular purchase access logs contain only time, request method, status and response duration, with no receipts, identifiers or IP addresses.

Verification, delivery and restoration are necessary for performing the purchase contract (Article 6(1)(b) GDPR). Detecting duplicate or revoked receipts serves our legitimate interest in preventing purchase abuse (Article 6(1)(f) GDPR). Purchases are optional. You can play without this processing but cannot make a shop purchase. The app has no tracking or analytics services. The game AI and enemies are calculated on your device.

When you tap Share, the app creates a result image and a short text. Your device's share function passes these contents to the app you choose. You decide on recipients and whether to send them. We do not receive a copy. This export happens at your request as a game feature (Article 6(1)(b) GDPR). Further processing follows the rules of your chosen recipient or service.

Settings → Reset game data resets progress, records, display name and settings. Purchased resources are lost as well. The purchase journal, installation identifier and incomplete deliveries are retained to prevent duplicate resource grants. Consumed or reset resources cannot be restored through Google Play. The supporter pack’s shield designs can be unlocked again using Restore purchases.

Clearing the app’s storage in Android or uninstalling the app also removes its local purchase data. The Android app does not allow automatic device backup of its data. Delete previously shared images and copies on other devices separately. We cannot restore your local game progress.

Settings → Delete data opens our instructions in your browser. There is no game account. For a request to anfrage@digital-e.org, you can provide a Google Play order number, product and approximate purchase date. We request only the evidence needed to identify the relevant records and prevent unauthorised requests.

The purchase journal has no automatic expiry: purchase associations are kept for delivery and restoration. For a justified deletion request, we remove the installation association and related restoration links once outstanding deliveries and necessary evidence have been addressed. A minimum record consisting of receipt hash, product and delivery/refund indicators may remain while the same receipt could be submitted again. We do not simply treat these hashes as anonymous. Their necessity is reviewed when processing deletion requests and regularly during operation; they are deleted when their purpose ends.

The last 14 daily purchase-journal backups are used only for recovery after incidents. Deleted associations are not reintroduced into normal operation; remaining backup copies disappear through backup rotation. Technical logs are retained for no more than 14 days. Data held by Google is also subject to Google’s own deletion and retention rules.

Authorised people at Digital-e and the service providers involved receive only the information needed for their tasks. Our purchase verification service on games.digital-e.org runs on infrastructure provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a European hosting region.

For people in the EEA, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is generally involved in Google Play. Payments may be handled by a Google entity identified in the applicable Google Play payment terms. Google acts as an independent controller for its own account, store and payment purposes. Our server sends Google the purchase receipt and product identifier to check validity, delivery and refunds. Information about Google’s processing: https://policies.google.com/privacy?hl=en

We use IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, to receive email. Your email provider also participates in transmission. Visits to www.digital-e.org use Google Firebase Hosting and are additionally covered by https://www.digital-e.org/datenschutz/ . The app itself uses neither Firebase sign-in nor Firebase cloud saves.

Google services may process data in the USA and other countries outside the EEA. Google describes its adequacy mechanisms, EU-US Data Privacy Framework certification and, where applicable, standard contractual clauses at https://policies.google.com/privacy/frameworks?hl=en . This also explains how to obtain details or copies of safeguards. Our own server’s European location does not mean that all processing by Google takes place exclusively in the EU.

Authorities, courts or legal advisers receive information only where required by law or necessary to establish or defend legal claims.

The app may keep the screen awake during play. Vibration and sound effects can be disabled. It uses its own app storage and does not read contacts, camera images, microphone recordings, private photos or GPS locations for gameplay. Android protects the app's storage area; the game does not add its own encryption.

Google Play and the operating system may process installation, backup and diagnostic data for their own services. Their privacy notices and device or account settings govern this processing. Visits to digital-e.org are also covered by the website's privacy notice: https://www.digital-e.org/datenschutz/

Stellar Defence is intended for people aged 13 and over. The app does not ask for age or date of birth and does not store an age confirmation.

If you email us, we receive your sender address, message and any attachments you choose to include. Please do not send passwords, complete purchase tokens or payment details. We use this information to address your request: Article 6(1)(b) GDPR for game-related support, Article 6(1)(f) for our interest in answering other enquiries, and Article 6(1)(c), together with Articles 12–22 GDPR, for privacy requests.

We delete support messages after the matter is resolved unless specific follow-up questions, legal claims or statutory evidence requirements remain. Where evidence is needed for legal claims, the standard German limitation period may be three years from the end of the relevant year (sections 195 and 199 BGB). Where a message must be retained as commercial or business correspondence, the usual period is six years; for accounting vouchers it is generally eight years, subject to section 257 HGB and section 147 AO. These periods do not apply automatically to every support message or game record. You can ask us about any necessary further retention in your case.

Where we process your personal data, the GDPR gives you rights of access, rectification, erasure, restriction and portability, subject to its conditions (Articles 15–20). You can withdraw consent for the future. Contact anfrage@digital-e.org. We request only the evidence needed to identify your enquiry and normally respond within one month. We cannot access game data held only on your device.

You may complain to a data protection authority, particularly where you live. Digital-e's competent authority is the Independent Centre for Data Protection Schleswig-Holstein: https://www.datenschutzzentrum.de/

We do not make solely automated decisions about you with legal or similarly significant effects.

You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Contact our privacy address. We do not process your details for direct marketing.

We update this notice when features or processing change. Each version has a date and is available on our website through the Privacy link in the app. Advertising and tracking are not planned.