Stellar Drift

Privacy notice

Last updated 1 October 2026 — an account can now be deleted from inside the game; see below.

Stellar Drift works with no account and no internet. Played that way, the only thing it sends is an anonymous tally of how far players get, described below, which says nothing about who you are and can be switched off in Settings. An account is optional and exists so your game can follow you to another device. If you make one, this is everything that is kept.

Who is responsible

Stellar Drift is made and run under the name PixelLumo by Taine Hancke, a sole trader in South Africa. PixelLumo is a trading name, not a separate company — the person responsible is the person named here. Questions about anything on this page go to [email protected].

What is kept, and only with an account

• Your display name and email address. To sign you in, and to show your name to friends who have added you.
• Your password, stored only as a one-way hash. It cannot be read back, by us or by anyone else.
• Your game save. The state of your universe, so another device can pick it up. Stored as-is and never analysed.
• What you own and have been given. Gems, cosmetics, boosters and season-pass progress, along with the ledger of how each was earned or spent.
• Purchases. Which pack was bought, when, what it cost, and the transaction id from the payment provider — including the provider's own record of the transaction. Kept because money moved, and a refund or a support question a year later has to be answerable.
• Friend connections. Who you have added, and who has added you.
• Access tokens for the devices you have signed in on, so you are not asked to log in every time.

Anonymous statistics, with or without an account

To learn where new players get stuck, the game reports a handful of moments the first time each happens: opening it, the first tap, the first purchase (with roughly how long it took — "under 30 seconds", "1 to 2 minutes"), each epoch reached, finishing the timeline, opening the Firmament, the first collapse, whether an account exists, and whether you came back the next day, within a week, or later.

Each report carries only those step names and the date you first opened the game. The server adds one to a count for that date and step, and keeps nothing else — there is no record per player to keep anything in. No account, no device identifier, no random identifier and no address is stored with it, and it is sent without your account even when you are signed in, so it cannot be connected to you. Like every request to this site it passes through Cloudflare (below).

Settings → Anonymous statistics turns it off on that device, immediately. Games saved before this was added never report anything.

What is never collected

• No advertising identifiers, and no advertising.
• No location.
• No contacts, photos, files or device identifiers.
• No third-party analytics and no tracking pixels — the anonymous tally above is counted on this server and nowhere else.
• No third-party scripts of any kind — with one exception, described below.
• No payment details. Card numbers never reach this server and are never seen by us.

Payments, and the one external script

Gems bought on the web are sold by Paddle.com Market Ltd, which acts as merchant of record — the legal seller, handling payment, tax and invoicing. Opening a checkout loads a script from Paddle and hands it the item being bought and an identifier for your account, so the purchase can be credited to it. Your payment details are given to Paddle, not to us.

That script is the only external code this site loads, and it is fetched only when you actually press a gem pack — never when the game starts. Paddle handles your information under its own privacy notice at paddle.com/legal/privacy.

Gems bought inside the Android app are sold through Google Play instead, and Google tells us only whether the purchase completed.

Where it is kept

On a server rented for this purpose, reached through Cloudflare, which sits in front of the site and sees the traffic to it. Data is not sold, not shared with anyone else, and not used to build a profile of you. Nobody buys advertising against it, because there is none.

Deleting it

In the game: You, then Delete account, confirmed with your password. Or write to us and a person deletes it; how to delete your account says both. Either way the account and everything attached to it is deleted. Playing without an account leaves nothing to delete — the save lives in your own browser or app storage, and clearing that removes it. Records of a completed purchase are kept even after an account is deleted, for as long as tax and accounting rules require, because a transaction that happened cannot be un-happened.

Children

The game is suitable for any age and collects nothing that would identify a child. It shows no advertising and no content from other players; the only social feature is adding a friend by a code you choose to share.

Changes

If what is collected changes, this page changes with it, and the date at the top moves. It is not rewritten quietly after the fact.