1. Scope of this policy
This notice covers the Rex Stellarum website preview, data flows in the current test game and support communications. It is based on a source review dated 18 September 2026. Website visits and game accounts are separate flows. Rex Stellarum is in development for Android and iOS. Test availability may vary by platform.The initial service country is Türkiye. Map images, coordinates, world dumps and spawn information are not published on the public site.
2. Operator and contact
Individual operator and data controller: Sefa AKBABA. Brand/developer: Averia Interactive. Country: Türkiye. Contact: support@averiainteractive.com. Averia Interactive is not presented as a separate company.
3. Categories of data
Test accounts contain an account name, display name, player identifier, password verification hash, recovery records and sessions. A password is transmitted for authentication; the server stores a hash. An app-generated device/installation identifier, request identifiers and save revisions support synchronization. Saves include resources, buildings, research, captains, fleets, map state, alliance relationships, in-game mail, Arena and exploration progress, and combat outcomes. If you send support email, your address, message and voluntary attachments are transmitted. Device model and operating system details in support requests are information you choose to provide.
4. Purposes and website storage
Account information supports sign-in, sessions and recovery; game records support progress, device synchronization and entitlements; support messages help resolve your request. The static promotional site uses no cookies or browser storage; language is selected by URL. The separate account-deletion portal stores the private tracking code in the current tab’s sessionStorage. Passwords are sent to the server for verification and are not written to browser storage. No advertising or analytics is added. Email buttons open a draft; sending is your choice.
5. Processing grounds and consent
Accounts and progress support delivery of the service, security checks prevent abuse, and support handles your request. Purpose-specific legal-basis assessments and required notices for the initial service scope in Türkiye remain to be completed before general release. Visiting this preview is not consent to marketing, tracking or unlimited data use.
6. Providers and sharing
Cloudflare is the configured hosting service for the static web preview. The game uses the Unity engine. Unity Analytics and Cloud Diagnostics reporting are disabled; engine diagnostics is enabled, and actual device transmission has not yet been measured. There is no advertising SDK and no new analytics service has been added. The account service runs on the existing game server. The live game hosting provider and support email provider cannot be identified from the current application configuration and are therefore not named here. Processing countries still require verification. Display names and match profiles may be shown to relevant players in the game.
7. Stores and payments
This website accepts no payments. Real-money purchasing is disabled in the reviewed test build, and no active store payment SDK connection was found. Virtual inventory does not establish that a real payment took place. If purchases through Google Play or the App Store become available, store payment processing and transaction confirmations received by the game must be described separately. Do not send payment-card details to support.
8. Security and abuse-prevention records
The account service processes connection IP addresses in memory to limit login attempts. Request identifiers and error types may appear in technical error records. Session verification, save revisions and transaction history help prevent unauthorized or duplicate actions. This notice does not disclose internal security methods. Hosting access, IP and security logs and their retention periods still require live-configuration review.
9. International transfers
The processing countries and transfer mechanisms of live hosting and email services have not been verified. We do not claim all data stays in a particular country. Actual recipients, processing locations and safeguards required under applicable law must be disclosed before release.
10. Retention and deletion criteria
The table below describes current application behavior. Session validity is not a deadline for complete deletion of account data. No automatic expiry-based cleanup is promised for records without an implemented period. Verified deletion requests apply to active server data; physical backup cleanup is separate and has not been proven complete.
| Data / function | Implemented period or behavior |
|---|---|
| Account session | Valid for 30 days from creation or renewal. Expired sessions cannot authenticate; expired session records are removed on the next successful sign-in. This does not delete the account after 30 days. |
| Arena replay frames | Replay frames are cleared on the next server advancement after the match is more than 7 days old. Match outcomes and transaction records are not deleted on that same schedule. |
| Web deletion tracking code | Kept in browser sessionStorage for the tab session, without a fixed number of days. Keep the private code safely before closing the tab. |
| Account, progress and virtual economy | No automatic expiry-based cleanup. A verified deletion request removes active server records; shared fleet operations, if any, must first settle safely. |
| Deletion / restoration-prevention record | Minimal hashed identities and request time/status are kept separately to prevent recreation. There is no automatic expiry-based cleanup; these hashes are not anonymous data. |
| Support correspondence and security/error records | No common implemented retention period has been verified. Deleting a game account does not automatically clean up the mailbox or hosting records. |
| Backups and offline device copies | There is no proven physical backup cleanup schedule. Active server deletion does not mean physical backups or offline device copies have been erased. |
11. Account and data deletion
In the development version, use Settings > Account > Delete account and verify your current password. The deletion portal on the same account server accepts an account name and password without reinstalling the game. A private tracking code distinguishes “request accepted” from “active server data deleted”. This preview has not been deployed to the live server; the live portal link has not been published. Signing out, revoking sessions or uninstalling does not delete the account. Contact support for access problems; never email passwords or recovery codes.
12. Your rights and requests
Depending on applicable law, you may request information about processing and recipients, access, correction, deletion or destruction, and notification of relevant recipients. Where available, you may also object, request restriction or portability, or withdraw consent. Statutory rights, including challenging adverse solely automated decisions and seeking redress for unlawful processing, remain intact. This contact route does not limit your right to approach an appropriate data protection authority.
13. Children’s privacy
The initial service country is Türkiye, with intended age groups of 16–17 and 18+. The game is not designed for children. The intended 16–17 group nevertheless includes minors; this audience choice does not mean that no under-18 data is processed. This version does not claim to implement verified age checks or a parent/legal representative process. Contact support about a minor’s account or data; do not send unnecessary identity documents.
14. Security measures
The source includes password hashing, session checks, protected session storage on supported devices and secure transport checks for remote connections. Source review, device testing, live infrastructure and an independent security assessment are distinct; absolute security is not guaranteed. Do not share passwords, recovery codes, session secrets or full save files. This source review found no dedicated push notification or advertising identifier collection SDK integration.
15. Policy changes
Policy updated: 18 September 2026. This date is independent of the website package version. Changes to processing or providers require updated information and, where necessary, further notice and consent. This update does not authorize general release.
16. Contact
Send privacy, access, correction or deletion requests to support@averiainteractive.com with the subject “Rex Stellarum — Privacy Request”. Include your player identifier if available, the request and an address for a reply. Only information necessary to verify the request should be sought; never attach account secrets.