Living Galaxy is one person's game and one person's server. This page says what the site keeps about you, why, and how to get rid of it. It is written to be true rather than long.

What is kept

• Account: your username, your email address, and a scrypt hash of your password (the password itself is never stored). The email is used for the verification link, password resets, and nothing else — no newsletters, no sharing.
• Game saves: when you sign in inside the game, your pilot (callsign, career, hulls, corporation, progress) is stored so it follows you between devices. It is visible to you on your account page; the public pilots board shows only callsigns, careers and purses.
• Forum: what you post, under your username. Editing and deleting your own posts is yours; deleted posts are hidden, not erased, so replies still make sense.
• Sessions and security: the address each sign-in came from and the browser's name, so you can see and end sessions; a log of sign-ins, failed attempts, resets, reports and admin actions with the address involved. Kept for security, pruned by the site's housekeeping.
• Cookies: essential first-party cookies: the session (lgs) and a CSRF token (lgc). When advertising is enabled, Google and its partners may also use cookies or similar technologies as described below.

Who else sees any of it

• Cloudflare carries the traffic (TLS, DDoS protection) and sees the addresses and requests that any CDN sees.
• Resend delivers the verification and reset emails and sees the address and the message.
• Backups of the database are copied nightly to a private cloud storage account belonging to the operator, and pruned after thirty days.

Advertising and your choices

Selected public pages may display Google AdSense ads. Google and its advertising partners may receive your IP address, browser and device information, page URL, and information about ad interactions. They may use cookies or similar technologies for advertising, measurement, and fraud prevention. Depending on your region and choices, ads may be personalized. See how Google uses information from sites that use its services and Google's advertising policies.

Where applicable, Google's consent message lets you accept, decline, or manage advertising choices. To revisit those choices, use Privacy & cookie settings in the footer of a page displaying ads when that control is available. You can also manage cookies through your browser. Disabling essential cookies may prevent account sign-in.

Ad code is limited to the homepage after entry and individual news articles. The site does not deliberately send your email address, password, or private game saves to ad providers. No Google Analytics integration is installed by this update.

Deleting your account

On your account page: confirm your password, and your email, saves, sessions and tokens are removed at once. Forum posts stay, attributed to a deleted-user name, so other people's threads keep making sense. Backups that already exist age out within thirty days.

Contact

Questions or a request the account page cannot handle: write to [email protected].