Privacy Policy
1. Who we are
Forge Stars is operated by Vasil Dimitrov, trading as PeStaVa, 21 Otets Paisiy Street, 4150 Rakovski, Bulgaria (“we”, “us”). We are the controller of the personal data described here. For any privacy question or request, email v.dimitrovv981@gmail.com or call +359 87 888 7612.
2. What we collect
| Data | Why | Legal basis |
|---|---|---|
| Email address and password (stored hashed), or your Google account’s email and id if you sign in with Google | To create your account and let you sign in and reset your password | Contract |
| Guest account id (if you play as a guest) | To save your progress without an email | Contract |
| Display name, avatar, clan membership and game progress | To run the game, save your progress and show you to other players (rankings, clans, profiles) | Contract |
| Chat messages | To show them to other players in world or clan chat | Contract |
| Reports you send, and reports about you | To keep the community safe and enforce the Terms | Legitimate interest |
| A log of game actions, and technical data such as IP address, browser and device type | Security, preventing cheating and abuse, fixing bugs | Legitimate interest |
| Error reports and anonymous usage events (for example “finished the tutorial”) | To find crashes and improve the game | Legitimate interest |
| Purchase records (what you bought and when) | To deliver purchases and meet accounting obligations | Contract, legal obligation |
We never see or store your card details: payments are handled by Stripe. We do not sell your data and we do not show third-party advertising.
3. Who we share it with
Only with service providers that run the game for us, under data-processing agreements:
- Supabase — database, accounts and server functions (servers in the EU, Ireland).
- Stripe — payment processing. Stripe is also an independent controller for fraud prevention.
- Google — only if you choose “Continue with Google”.
- Website hosting and content delivery — Vercel, jsDelivr (game libraries) and Google Fonts (fonts). These receive your IP address when your browser loads the game.
Other players can see your display name, avatar, clan, rankings, equipped gear and chat messages. Some providers may process data outside the EU; where they do, they rely on the EU Standard Contractual Clauses or an adequacy decision.
4. How long we keep it
- Account and game data: until you delete your account.
- Chat messages: until you delete your account, or earlier if removed by moderation.
- Action logs, error reports and usage events: up to 90 days.
- Purchase records: as long as tax law requires (Stripe keeps its own records).
5. Storage on your device
The game stores your sign-in session and a few preferences (such as tutorial progress and players you have blocked) in your browser’s local storage. This is necessary for the game to work; we do not use advertising or tracking cookies.
6. Your rights
You can access, correct, export or delete your data, object to or restrict its use, and complain to your data protection authority (in Bulgaria, the Commission for Personal Data Protection). You can delete your account at any time in the game: Profile › Settings › Delete account. This permanently removes your account, progress and chat messages. For anything else, email v.dimitrovv981@gmail.com.
7. Children
Forge Stars is not intended for children under 14. If you are under the age of digital consent in your country, you need a parent’s permission to play. If you believe a child has given us data without that permission, contact us and we will delete it.
8. Changes
If we change this policy in a meaningful way we will tell you in the game before the change applies.