Stellar Drift

Privacy notice

Last updated 3 September 2026.

Stellar Drift works with no account and no internet. Played that way it sends nothing anywhere, and there is nothing for this notice to describe. An account is optional and exists so your game can follow you to another device. If you make one, this is everything that is kept.

Who is responsible

Stellar Drift is made and run by Taine Hancke, in South Africa. Questions about anything on this page go to [email protected].

What is kept, and only with an account

• Your display name and email address. To sign you in, and to show your name to friends who have added you.
• Your password, stored only as a one-way hash. It cannot be read back, by us or by anyone else.
• Your game save. The state of your universe, so another device can pick it up. Stored as-is and never analysed.
• What you own and have been given. Gems, cosmetics, boosters and season-pass progress, along with the ledger of how each was earned or spent.
• Purchases. Which pack was bought, when, what it cost, and the transaction id from the payment provider — including the provider's own record of the transaction. Kept because money moved, and a refund or a support question a year later has to be answerable.
• Friend connections. Who you have added, and who has added you.
• Access tokens for the devices you have signed in on, so you are not asked to log in every time.

What is never collected

• No advertising identifiers, and no advertising.
• No location.
• No contacts, photos, files or device identifiers.
• No analytics, no tracking pixels, no third-party scripts of any kind — with one exception, described below.
• No payment details. Card numbers never reach this server and are never seen by us.

Payments, and the one external script

Gems bought on the web are sold by Paddle.com Market Ltd, which acts as merchant of record — the legal seller, handling payment, tax and invoicing. Opening a checkout loads a script from Paddle and hands it the item being bought and an identifier for your account, so the purchase can be credited to it. Your payment details are given to Paddle, not to us.

That script is the only external code this site loads, and it is fetched only when you actually press a gem pack — never when the game starts. Paddle handles your information under its own privacy notice at paddle.com/legal/privacy.

Gems bought inside the Android app are sold through Google Play instead, and Google tells us only whether the purchase completed.

Where it is kept

On a server rented for this purpose, reached through Cloudflare, which sits in front of the site and sees the traffic to it. Data is not sold, not shared with anyone else, and not used to build a profile of you. Nobody buys advertising against it, because there is none.

Deleting it

Ask, and the account and everything attached to it is deleted. Playing without an account leaves nothing to delete — the save lives in your own browser or app storage, and clearing that removes it. Records of a completed purchase are kept even after an account is deleted, for as long as tax and accounting rules require, because a transaction that happened cannot be un-happened.

Children

The game is suitable for any age and collects nothing that would identify a child. It shows no advertising and no content from other players; the only social feature is adding a friend by a code you choose to share.

Changes

If what is collected changes, this page changes with it, and the date at the top moves. It is not rewritten quietly after the fact.