This policy explains how Star Harbor handles your data.
Who we are
Star Harbor is published by RuiCodex, a company established in Belgium (European Union). RuiCodex is the controller (Art. 4(7) GDPR) for the processing described here, except where Google acts as an independent controller for its own processing (ads and Google Play). Because RuiCodex is established in the EU, the GDPR applies to this processing wherever you live. Our lead supervisory authority is the Belgian Data Protection Authority.
Data we collect
Star Harbor needs no sign-up and never asks for your name, email address, contacts or location. Your station, charters, Quanta, missions and settings are stored on your device.
To stay free the game shows advertising through Google AdMob, sells optional in-app purchases through Google Play, sends anonymous usage events to our own analytics server and, if you have an internet connection, lists your progress on an online leaderboard. Each is described below.
Leaderboard
The leaderboard runs on RuiCodex's own server (Appwrite, operated by RuiCodex, not shared with third parties). The game creates an anonymous account for your installation — no email, name or phone number — and stores only: a nickname (a generated "Captain-1234" or one you choose), the number of charters you completed, your station level, your singularity cores and the sector you reached. Other players can see your nickname and these numbers. Test devices used by Google Play's pre-launch checks never appear on the board.
You can hide any player from your own board and report an offensive nickname. A report stores only the reported entry's ID and nickname; RuiCodex reviews reports and resets or removes offending names. Nicknames that match our block list are never displayed.
You can remove your entry at any time in Settings › Remove me from the leaderboard; to delete the anonymous account as well, write to info@ruicodex.com.
Game analytics
To learn which charters are too hard or too easy and where players get stuck, the game sends usage events to our own analytics server (PostHog, operated by RuiCodex on its own infrastructure and not shared with third parties): for example that a charter or delivery was completed, which screens were opened and whether the store was visited. The events are linked to a random identifier created on your device — not to your name, email address or advertising ID — and are used only to improve the game. Session recording is not used. To have this data deleted, write to info@ruicodex.com.
Advertising
Ads are served by Google AdMob. To deliver them, AdMob processes your device's advertising identifier, an approximate location derived from your IP address, device and operating-system information, and your interaction with ads. We only receive aggregated reports. Buying "Remove Ads" or the Admiral Pass turns off banner and interstitial ads; optional reward videos remain available if you choose to watch them.
Google's policies: policies.google.com/technologies/partner-sites and support.google.com/admob/answer/6128543.
Purchases
Purchases are processed by Google Play. We never see your payment details. The game stores on your device which items you own so they keep working; Google Play restores durable items (Remove Ads, Starter Pack, Admiral Pass) on a new installation.
In-app feedback
The feedback form records only the category you pick and your optional vote. If you write a message, your own email app opens and you decide whether to send it to info@ruicodex.com. Feedback is separate from store ratings; the game never asks you for a particular rating.
Consent and your choices
Players in the European Economic Area, the United Kingdom and Switzerland see Google's consent form before the first ad. You can refuse personalised ads; ads are then shown without personalisation. Where required, you can change your choice later under Profile › Ad privacy choices.
On Android you can reset or delete your advertising ID under Settings › Google › Ads. "Erase all data" in the game's settings erases your progress on the device; uninstalling the app removes everything stored on the device.
Children
The game is intended for players aged 13 and over and is not directed to children. Ads are limited to the "G" (general audiences) content rating. If you are below the age at which you can consent to data processing in your country (13 in Belgium; up to 16 in some EU countries, Art. 8 GDPR), use the game only with a parent's or guardian's consent, who should also approve purchases.
Legal bases
Keeping your progress, the leaderboard you join and delivering purchases: performance of our contract with you (Art. 6(1)(b) GDPR). Non-personalised ads, fraud prevention, game analytics and leaderboard moderation: our legitimate interest in running and improving a free game (Art. 6(1)(f)). Personalised ads: your consent (Art. 6(1)(a)), which you can withdraw at any time.
International transfers
The leaderboard and game-analytics servers operated by RuiCodex are located in the United States. These transfers are based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) with the hosting provider, together with encryption in transit, restricted access and data minimisation (no names, email addresses or advertising IDs). Google may process data in the United States under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses. For users in Türkiye, cross-border transfers follow Article 9 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). You can ask us for a copy of the safeguards.
Your rights
Under the GDPR you may request access to, correction, erasure or portability of your data, restrict or object to its processing and withdraw consent at any time. You can also complain to a supervisory authority — in Belgium the Data Protection Authority (dataprotectionauthority.be), or the authority of the EU country where you live or work. Users in Türkiye additionally have the rights in Article 11 KVKK; users elsewhere have the rights their local law grants. Write to info@ruicodex.com; we answer within one month, free of charge.
Contact
RuiCodex (Belgium) — info@ruicodex.com