Void Traders (“the game”) is published by Shocktopus Limited (“we”, “us”), 2 Palmer Walk, Eaglescliffe, Stockton-on-Tees, TS16 9JW, United Kingdom (company number 16857721). We are the data controller for the personal data described here, under UK GDPR and the Data Protection Act 2018.
What we collect
- Your pilot account: a random pilot ID and a secret session token, created when you start playing. We do not ask for your name, email or phone number.
- Your callsign: the name you choose. Other players can see it on leaderboards.
- Gameplay data: your skills, ships, cargo, missions, credits, gems, season scores and similar game state.
- Purchase records: when you buy gems, we receive the transaction ID and product from Apple or Google so we can check the purchase is genuine and credit it only once. We never see your payment details.
- Reports: if you report a callsign, we store which callsign you reported, and when.
- Sign-in (optional): if you choose “Sign in with Apple” or “Sign in with Google” to secure your pilot, Google Firebase Authentication stores an account ID for you (and your email address, for Google sign-in). Our game server receives only the account ID.
- Crash reports and usage statistics: Google Firebase Crashlytics and Analytics collect crash details, device model and OS version, and in-game events (such as missions launched), linked to a random app-instance ID. We don’t attach your pilot ID to them.
We do not collect your location, contacts or advertising ID, we show no ads, and we do not track you across other apps or websites.
Why we use it, and our legal basis
- To run the game and your account: performance of our contract with you (the Terms of Service).
- To verify purchases and prevent fraud: contract and legitimate interests.
- To fix crashes and improve the game (Crashlytics, Analytics): legitimate interests.
- Optional sign-in, so you can recover your pilot: your consent (you choose to sign in).
- To moderate callsigns and keep the game safe: legitimate interests.
Who we share it with
We don’t sell or share your data. Your callsign and scores are visible to other players on leaderboards. Our game server is hosted on Google Cloud (Google LLC) in the United States, and Google (Firebase) provides crash reporting, analytics and sign-in. Google processes this data on our behalf. Apple and Google process your purchases under their own privacy policies.
Data stored outside the UK
Our game server and Google’s Firebase services store and process data in the United States. Google LLC is certified under the UK Extension to the EU-U.S. Data Privacy Framework, and Google’s data processing terms include the UK International Data Transfer Addendum, so your data has the protection UK law requires when it leaves the UK.
How long we keep it
We keep your data for as long as your pilot exists. When you delete your account, it is removed from our live server straight away, and from backups within 30 days.
Deleting your data
- In the game: Pilot tab → Delete account. This permanently deletes your pilot and its data, and your Apple/Google sign-in for the game. Analytics data is not linked to your pilot and expires under Firebase’s retention settings (2 months).
- Without the app: follow these steps (email support@shocktopus.co.uk with your callsign and a few details so we can tell it’s yours), and we will delete it within 30 days.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing support@shocktopus.co.uk. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).
Children
The game is not directed at children under 13, and we do not knowingly collect data from them.
Changes
We will post any changes here and update the date above.
Contact
Shocktopus Limited, 2 Palmer Walk, Eaglescliffe, Stockton-on-Tees, TS16 9JW, United Kingdom (company number 16857721)
support@shocktopus.co.uk