Privacy at Sunsmith

Updated 20 September 2026

Operator information is incomplete: the publishable service address is still pending.

Who is responsible?

Jo Bettaque operates Sunsmith as an individual. Contact: hello@sunsmith.online. The service address will be provided in the Impressum once available.

Playing on your device

Your game progress and settings are saved locally so that you can continue playing. Native apps also keep a local backup of the save. These functions do not need optional analytics. Browser storage and app storage may be removed through your browser or operating system; use Sunsmith's save export first if you want to keep your progress.

Accounts and online features

If you choose STARNET, we process your chosen username, a password hash, authentication sessions, an installation identifier, your cloud save, progress used for leaderboards, friend relationships, and security/verification records. Usernames and ranked statistics are visible on leaderboards; friends can see shared progress. Avoid putting your real name or contact details in your username.

We use data necessary to provide requested account, save and social features under Article 6(1)(b) GDPR. Proportionate security and abuse prevention rely on Article 6(1)(f); our interests are protecting accounts, operating the service and fair leaderboards. You may object to processing based on legitimate interests. Verification of saves is separate from optional analytics.

Optional analytics

Analytics is off until you choose it. Players under 16, or who prefer not to indicate eligibility, can play without optional analytics. We ask you to confirm you are 16 or older, not for your birth date. You can separately choose:

• Acquisition measurement: referral domains, approved campaign names, page visits and play/download/store-link clicks, recorded with self-hosted Umami.
• Gameplay improvement: sessions, active-time summaries, progression milestones, upgrade choices, platform and game version, recorded in Sunsmith's analytics system.

A random credential recognises this device and allows deletion. We store a hash on the server. If you sign in while gameplay analytics is enabled, events may be associated with your account to understand returning players across devices. Consent is per device. We do not send passwords, save strings, usernames, advertising identifiers, raw IP addresses, or full browser user agents into either analytics dataset. No session replay is used.

The legal basis for optional analytics is your consent under Article 6(1)(a) GDPR and, for optional device storage/access, section 25(1) TDDDG. A minimal record of the consent version, purposes, time and eligibility affirmation demonstrates consent. Go to Settings → Privacy settings to change your choice, export device analytics or delete it. Withdrawal stops new collection and requests deletion of this device's detailed analytics; it does not affect the lawfulness of earlier processing. If you are offline, deletion retries when you reconnect. Previously anonymous reports cannot be associated with you for deletion.

Where data is processed

The hosting platform is operated by Jo Bettaque on Hetzner infrastructure. Servers and backups are in Germany. A data processing agreement is in place with Hetzner. The analytics software is self-hosted: Umami's hosted service does not receive your analytics. Apple and Google process information for their stores under their own notices. Store download totals and first measured game sessions are different measurements.

Retention

• Raw optional analytics: up to 90 days.
• Coarse monthly aggregate reports: up to five years. Small groups are suppressed and totals rounded; reports contain no player IDs.
• Minimal consent credentials and receipts: up to one year plus a 30-day deletion/backup allowance. Revoked credentials cannot send new events.
• Authentication sessions expire after 90 days; expired sessions are removed by maintenance.
• Accounts, saves and friend relationships: until account deletion or a separately communicated account-retention policy applies. Routine operational event records are kept for up to 90 days. Verification findings are retained with the account for support and fairness review and are deleted with it.

The hosting log and backup expiry schedules must be verified before public release. Deletions must be reapplied before restoring backups to active service.

Your rights

You can request access, correction, erasure, restriction, and portability where applicable, and object to processing based on legitimate interests. Withdraw analytics consent in the game. Use the account and data page to export or delete your account, or contact hello@sunsmith.online. We may need proportionate verification to protect your account. You can complain to a data protection supervisory authority, particularly where you live, work, or believe an infringement occurred.

Ads and payments

This analytics implementation does not include advertising or real-money payments. Any later introduction will come with updated information and any required separate choices before collection begins.