1. Scope of this policy
This policy covers the Rex Stellarum website, current game test service, account deletion portal and support communications. A website visit and a game account are separate activities. Rex Stellarum is being tested on Android; iOS preparation is ongoing. Last updated: 27 October 2026.
2. Operator and contact
Individual operator and data controller: Sefa AKBABA. Brand/developer: Averia Interactive. Country: Türkiye. Contact: support@averiainteractive.com. Averia Interactive is not presented as a separate company.
3. Categories of data
Test accounts contain an account name, display name, player identifier, password verification hash, recovery records and sessions. A password is transmitted for authentication; the server stores a hash. An app-generated device/installation identifier, request identifiers and save revisions support synchronization. Saves include resources, buildings, research, captains, fleets, map state, alliance relationships, in-game mail, Arena and exploration progress, and combat outcomes. If you send support email, your address, message and voluntary attachments are transmitted. Device model and operating system details in support requests are information you choose to provide. Players at VIP 6 or above may optionally upload a profile photo. Only the selected photo is cropped to a square and resized to 256×256 pixels on the device; the pixels you confirm are sent to the game server. The original file, location and other EXIF information are not uploaded. The photo is shown as your profile avatar to other players in the same game world. Choosing a standard avatar, captain or free emblem, or deleting the account, removes the active photo. Copies in server backups follow the backup retention information below.
4. Purposes and website storage
Account information supports sign-in, sessions and recovery; game records support progress, device synchronization and entitlements; support messages help resolve your request. The static promotional site uses no cookies or browser storage; language is selected by URL. The separate account-deletion portal stores the private tracking code in the current tab’s sessionStorage. Passwords are sent to the server for verification and are not written to browser storage. No advertising or analytics is added. Email buttons open a draft; sending is your choice.
5. Processing grounds and consent
Accounts and progress support delivery of the service, security checks prevent abuse, and support handles your request. Purpose-specific legal-basis assessments and required notices for the initial service scope in Türkiye remain to be completed before general release. Visiting this preview is not consent to marketing, tracking or unlimited data use.
6. Providers and sharing
Cloudflare hosts the website and provides secure external access to the game server. Game account data is held on the operator-managed game server. The game uses Unity and the Unity IAP component for store purchases. There is no advertising SDK. Unity Analytics and Cloud Diagnostics reporting are disabled; the engine diagnostics setting is enabled. Android versions 0.1.149 and later use Google ML Kit / Google Translate for on-device chat translation; message text is not sent to Google servers for translation. Language packs are downloaded from Google. ML Kit may send API usage, device and application information and performance metrics to Google. Details: https://developers.google.com/ml-kit/terms . Translation and model downloads can be managed in chat settings. Profile avatars and daily like relationships are stored on the game server; account deletion also removes associated likes. Support messages are processed by the mail providers for support@averiainteractive.com. Your display name, avatar, total likes, profile, alliance relationships and chat messages are shown to the relevant other players.
7. Stores and payments
This website does not take payments. The game includes Google Play purchasing infrastructure; the current verification process uses test purchases without charges. When real store purchases are enabled, the store processes card and payment information. The game processes transaction identifiers, products, purchase verification and delivery status to fulfil purchases and check duplicates or refunds. Do not email card details to support.
8. Security and abuse-prevention records
The account service processes connection IP addresses in memory to limit login attempts. Request identifiers and error types may appear in technical error records. Session verification, save revisions and transaction history help prevent unauthorized or duplicate actions. This notice does not disclose internal security methods. Hosting access, IP and security logs and their retention periods still require live-configuration review.
9. International transfers
The processing countries and transfer mechanisms of live hosting and email services have not been verified. We do not claim all data stays in a particular country. Actual recipients, processing locations and safeguards required under applicable law must be disclosed before release.
10. Retention and deletion criteria
The table below describes current application behavior. Session validity is not a deadline for complete deletion of account data. No automatic expiry-based cleanup is promised for records without an implemented period. Verified deletion requests apply to active server data; physical backup cleanup is separate and has not been proven complete.
| Data / function | Implemented period or behavior |
|---|---|
| Account session | Valid for 30 days from creation or renewal. Expired sessions cannot authenticate; expired session records are removed on the next successful sign-in. This does not delete the account after 30 days. |
| Arena replay frames | Replay frames are cleared on the next server advancement after the match is more than 7 days old. Match outcomes and transaction records are not deleted on that same schedule. |
| Web deletion tracking code | Kept in browser sessionStorage for the tab session, without a fixed number of days. Keep the private code safely before closing the tab. |
| Account, progress and virtual economy | No automatic expiry-based cleanup. A verified deletion request removes active server records; shared fleet operations, if any, must first settle safely. |
| Deletion and restoration-prevention record | Minimal hashed identities and request time/status are kept separately to prevent a deleted account returning from an old backup. The current system has no automatic expiry or fixed maximum retention period. |
| Server backups | Copies may remain in separate backups after active account deletion. An automated backup cleanup schedule and fixed maximum retention period are not yet implemented. Contact support to request removal from backups. |
| Support correspondence / hosting records | Not automatically removed with the game account. A common maximum retention period has not yet been established; contact support about scope and deletion. |
11. Account and data deletion
Use Settings > Account > Delete account in the game, or the secure form linked from this website’s Account deletion page. You can submit a request with your username and current password without reinstalling the game. The private tracking code distinguishes request receipt from active server data deletion. Separate backups and support records are explained in the retention table. Signing out or uninstalling does not delete the account. Contact support if you cannot access your account; do not send passwords or recovery codes.
Account deletion12. Your rights and requests
Depending on applicable law, you may request information about processing and recipients, access, correction, deletion or destruction, and notification of relevant recipients. Where available, you may also object, request restriction or portability, or withdraw consent. Statutory rights, including challenging adverse solely automated decisions and seeking redress for unlawful processing, remain intact. This contact route does not limit your right to approach an appropriate data protection authority.
13. Children’s privacy
The initial service country is Türkiye, with intended age groups of 16–17 and 18+. The game is not designed for children. The intended 16–17 group nevertheless includes minors; this audience choice does not mean that no under-18 data is processed. This version does not claim to implement verified age checks or a parent/legal representative process. Contact support about a minor’s account or data; do not send unnecessary identity documents.
14. Security measures
The source includes password hashing, session checks, protected session storage on supported devices and secure transport checks for remote connections. Source review, device testing, live infrastructure and an independent security assessment are distinct; absolute security is not guaranteed. Do not share passwords, recovery codes, session secrets or full save files. This source review found no dedicated push notification or advertising identifier collection SDK integration.
15. Policy changes
Last updated: 20 October 2026. This page is updated when processing or service providers change, with additional notice and consent where required.
16. Contact
Send privacy, access, correction or deletion requests to support@averiainteractive.com with the subject “Rex Stellarum — Privacy Request”. Include your player identifier if available, the request and an address for a reply. Only information necessary to verify the request should be sought; never attach account secrets.