DRAFT – Operator details must be added and legally reviewed before publication.
Privacy
Version 16 August 2026. This notice transparently describes the processing of personal data when using PlayAstryon.
Controller
PlayAstryon project operator Email for privacy requests: support@playastryon.com [FULL NAME AND SERVICEABLE POSTAL ADDRESS OF THE OPERATOR STILL TO BE ENTERED]
Data processed
Depending on usage, PlayAstryon processes account and profile data, authentication information, game state, social interactions, messages, technical log and security data, and payment status. Payment details are processed by the payment provider and are not stored in full by PlayAstryon.
Purposes and legal bases
Processing provides accounts, the platform, the game, communication, security, abuse prevention, and support. Optional analytics and advertising measurement occurs only with consent. Depending on the operation, performance of a contract, legitimate interests, legal obligations, and consent form the legal bases.
Service providers and transfers
PlayAstryon currently uses Supabase for authentication and database services, Vercel for hosting and delivery, and Stripe for secure payments. Data may be processed or transferred outside the European Economic Area under the providers' applicable contractual safeguards.
Google measurement for external advertising
Google services load only after consent to measure reach and conversions from PlayAstryon's own advertising campaigns. PlayAstryon does not display Google advertisements on the platform. Without consent, advertising, personalization, and analytics storage remain denied.
Retention
Account, profile, game, and communication data is generally retained until the account is deleted or a valid deletion request is received. Technical security logs are retained only as long as necessary to detect and investigate misuse. Support cases and consent records are kept until the applicable legal documentation and limitation periods expire. Payment records are subject to the payment provider's retention periods and applicable law. Necessity is reviewed regularly; data is then deleted or anonymized.
Your rights
Where applicable, individuals may request access, correction, deletion, restriction, portability, and object to processing. Consent can be withdrawn at any time with future effect.
Right to complain
You have the right to complain to a competent data protection authority. In Belgium, this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, Belgium, contact@apd-gba.be, dataprotectionauthority.be.