This policy explains what personal data the Starmarcher website and pre-launch waitlist collect, why, and what your rights are. It is written for the waitlist phase; it will be extended before player accounts open.

Who is responsible

The controller is the Starmarcher project ("we"). Contact: privacy@starmarcher.com. A postal address will be published here before accounts open.

What we collect and why

Waitlist signup

When you join the waitlist we store:

your e-mail address;
the time you submitted the form and the time you clicked the confirmation link (double opt-in);
the time you accepted the terms and confirmed that you are 16 or older;
your referral code, and the code of the person who invited you, if any;
campaign tags (utm_*) from the link you arrived on, if any;
your browser's language and user-agent string;
a keyed hash of your IP address at signup and at confirmation. The raw address is never stored;
a snapshot of your cookie-consent choice at the time you signed up.

Legal basis: consent (UK GDPR / EU GDPR Article 6(1)(a)). You give it by ticking the box and confirming the e-mail, and you can withdraw it at any time by leaving the waitlist.

Purpose: to send you the confirmation e-mail, to send occasional launch news, to run the referral programme (counting confirmed referrals and awarding the Founder's Badge), and to keep evidence that you consented.

Referral links

Visiting a referral link (/r/CODE) stores the code in a first-party cookie (sm_ref) for 30 days so the form can credit your friend. It contains no personal data.

Cookie consent

Your choice on the cookie banner is stored in a first-party cookie (sm_consent) for twelve months. This cookie is strictly necessary and is set regardless of what you choose.

Optional marketing measurement

Only if you choose Accept all or switch on Marketing measurement, and only once we have configured a campaign, the site loads the Meta Pixel and may send sign-up and confirmation events to Meta's Conversions API. The events contain a hashed e-mail address, your IP address and user agent, and an event id used to avoid double counting. Meta Platforms Ireland Ltd acts as an independent controller for its own processing; see Meta's privacy policy. Nothing is loaded and nothing is sent without your consent. You can withdraw it from Cookie settings in the footer.

Server logs

Our servers keep short-lived technical logs (request paths, status codes, timestamps and hashed or truncated IP addresses) for security and debugging. They are rotated automatically.

Where your data is processed

The site and its database run on a single virtual server in the European Union. Transactional e-mails are sent through an e-mail provider; we will name the provider here, with its region and safeguards, when it is chosen. If you consent to marketing measurement, Meta processes those events under its own terms, which may involve transfers outside the UK and EU protected by the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Unconfirmed waitlist entries are deleted 30 days after signup.
Confirmed entries are kept until the game launches plus twelve months, or until you leave the waitlist, whichever comes first.
Consent records are kept for as long as the entry exists.
Technical logs are kept for up to 30 days.

Your rights

You can, at any time:

Access the data we hold about you.
Correct it.
Erase it: every waitlist e-mail and your status page include a one-click Leave the waitlist link that deletes your entry immediately.
Withdraw consent for marketing measurement from Cookie settings in the footer, or for the waitlist by leaving it.
Object to processing, or ask us to restrict it.
Port your data in a machine-readable format.

Write to privacy@starmarcher.com for anything the self-service links do not cover. We answer within one month. You also have the right to complain to a supervisory authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the EU, the authority of the country where you live.

Children

The waitlist is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe a child has signed up, contact us and we will delete the entry.

Changes

We will update this page as the project grows — in particular before player accounts, payments or community features open. The date at the top tells you when it last changed. Material changes will also be announced on the news page.

Privacy policy