Privacy Policy

1. Introduction

This privacy policy describes how XGame ("we") collects, uses and protects the personal data of users ("you") of the XGame game (the "Service"). It complements the Terms of Service.

2. Data collected

We collect only the data strictly required to operate the Service:

• Email address: used for authentication, account recovery and essential notifications.
• Password: stored only as a hash (never in clear text).
• Game identity: commander name, planet name, invitation code used.
• Gameplay activity log: actions performed in the Service (buildings, fleets, combat), required for game state.
• Technical data: IP address and request timestamps, kept temporarily in server logs for security and diagnostics.

3. Purposes of processing

• Enable authentication and account access.
• Operate the game and persist your progress.
• Detect and prevent abuse, fraud or security incidents.
• Contact you in case of a major incident or critical update.

4. Legal basis

Processing is based on the performance of the contract between us (the Terms of Service accepted at account creation) and on our legitimate interest in securing and improving the Service.

5. Recipients

Your data is not sold, rented, or transferred to third parties for commercial purposes. It is accessible only to the people in charge of operating the Service. The Service is hosted on servers located within the European Union.

6. Retention

• Account data is kept as long as the account is active.
• Technical logs (IP, requests) are kept for a maximum of 12 months.
• If you delete your account, associated data is removed within 30 days, unless a legal obligation requires longer retention.

7. Your rights

Under the GDPR, you have the following rights at any time:

• right of access to your data;
• right to rectification of inaccurate data;
• right to erasure ("right to be forgotten");
• right to restriction and objection to processing;
• right to data portability.

To exercise these rights, contact us at the address shown in the application settings. You also have the right to lodge a complaint with the relevant data protection authority (in France, the CNIL).

8. Cookies and trackers

The Service uses no advertising cookies or third-party trackers. Only the authentication tokens required to maintain your session are used.

9. Security

We implement reasonable technical and organisational measures to protect your data: password hashing, HTTPS transport, server access control. However, no method of transmission or storage can be guaranteed to be fully secure.

10. Minors

The Service is not intended for children under 13. If you believe a minor has provided us with personal data without authorisation, please contact us so we can delete it.

11. Changes

This policy may be updated to reflect changes to the Service or to regulations. The last update date is shown at the top of this page.

12. Contact

For any question about this policy or your personal data, contact us at the address shown in the application settings.