← Back to Home

Data Protection & Privacy Policy

Last updated: March 17, 2026

1. Data Controller

codestra UG (haftungsbeschränkt)
Gleueler Strasse 81, 50931 Cologne, Germany
Email: bridge@havor.gg
Phone: +49 177 344 73 28

2. Data We Collect

  • Account data — name, email address, hashed password (we never store plain-text passwords).
  • Game data — in-game progress, resources, fleets, research, planets, and related gameplay information.
  • Technical data — IP address, user agent, and session information collected automatically when you use the service.

3. Purpose & Legal Basis

  • Account management & game functionality — processing is necessary for the performance of the contract between you and us (Art. 6(1)(b) GDPR).
  • Email notifications — sent only with your explicit consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via your profile settings.
  • Error tracking & stability — processing is based on our legitimate interest in maintaining a stable and secure service (Art. 6(1)(f) GDPR).

4. Email Communications

We only send email notifications (e.g. attack alerts, activity digests) if you have explicitly opted in during sign-up or via your in-game profile settings. You can withdraw your consent at any time by toggling the email notification setting in your Commander Profile.

5. Data Recipients

Your data may be processed by the following third-party service providers:

  • Neon — database hosting (PostgreSQL)
  • Vercel — web application hosting
  • Render — background worker hosting
  • Sentry — error tracking and monitoring

All providers are contractually bound to process data only on our behalf and in accordance with applicable data protection laws.

6. Data Retention

We retain your account and game data for as long as your account is active. If you request account deletion, we will erase all personal data within 30 days, unless retention is required by law.

7. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure of your data (“right to be forgotten”)
  • Restrict processing of your data
  • Data portability
  • Object to processing based on legitimate interest
  • Withdraw consent at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, contact us at bridge@havor.gg.

8. Cookies

We use only essential session cookies required for authentication (via BetterAuth). We do not use any tracking, advertising, or analytics cookies.

9. Contact

For any data protection inquiries, please contact us at: bridge@havor.gg

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.