Legal · Document 01
Privacy Policy
This policy explains how we capture data, how we use it, who we share it with, and how long we keep it — for the game Astral Sever on every platform, and for this website and astralsever.com.
Who we are
Astral Sever is developed and published by Everreach Labs, Inc. ("Everreach Labs", "we", "us"). We are the data controller for the information described in this policy.
Everreach Labs, Inc.
2803 Philadelphia Pike, Suite B #1255
Claymont, DE 19703
United States
Privacy enquiries: contact@everreachlabs.io
How we capture data
We obtain data in exactly three ways. We do not buy data, and we do not scrape it.
a. Automatically, from the game
When you run Astral Sever, the game generates technical and gameplay data on your device and transmits it to us over an encrypted connection. This happens in the background while you play. It includes crash and diagnostic reports produced at the moment of a fault, and gameplay telemetry produced as you progress. No keystroke logging, screen capture, microphone or camera access is involved.
b. Automatically, from this website
When you visit astralsever.com, our host records standard server request data, and our
analytics measure page views and loading performance. This analytics is
cookieless: it sets no advertising or tracking cookies, builds no
cross-site profile, and does not identify you personally. The site stores a single flag in
your browser's sessionStorage so the intro sequence does not replay on every
page load; it is deleted when you close the tab and is never sent to us.
c. From you, or from a platform you have connected
You give us data directly when you email us or subscribe to updates. Where you launch the game through a storefront such as Steam or the Epic Games Store, that platform passes us the account identifiers needed to run online features. We only ever receive what the platform's own privacy settings permit.
What we collect, and why
| Data | How captured | Why we use it | Legal basis (GDPR) | Retained for |
|---|---|---|---|---|
| Crash & diagnostic reports — device model, OS, GPU/driver, game build, crash stack, an install identifier | Automatically, from the game | Reproduce and fix crashes and stability bugs | Legitimate interests | 24 months |
| Gameplay analytics — session length, level and rift reached, difficulty and drop-off events, aggregate performance | Automatically, from the game | Balance difficulty, find where players get stuck, prioritise fixes | Legitimate interests | 24 months |
| Platform identifiers — Steam ID or Epic Account ID, display name | From the storefront when you launch the game | Achievements, leaderboards, cloud saves, friends and co-op sessions | Performance of a contract | While your account is active |
| Website analytics — page URL, referrer, coarse country, device type, page-load timings | Automatically, from this website | Count visits and measure site speed | Legitimate interests | Aggregated; no raw event log kept beyond 25 months |
| Server logs — IP address, user agent, request time | Automatically, by our host | Serve the site, prevent abuse, investigate faults | Legitimate interests | 30 days |
| Email address, if you subscribe | From you | Send development updates and launch news | Consent | Until you unsubscribe |
| Correspondence — what you send us and our reply | From you | Answer your question, keep a record of the request | Legitimate interests | 24 months after the matter closes |
How we use data
We use the data above only for these purposes:
- Making the game run — delivering online features such as saves, achievements and co-op matchmaking.
- Fixing it when it breaks — diagnosing crashes, tracking down platform-specific faults, confirming a fix worked.
- Making it better — understanding in aggregate where players struggle, so we can balance difficulty and design.
- Running the website — serving pages, counting visits and measuring load speed.
- Talking to you — replying to your emails and, if you asked for them, sending updates.
- Meeting our obligations — security, fraud prevention, and legal or regulatory duties.
We do not sell your data, share it with data brokers, use it for behavioural advertising, build advertising profiles, or use it to train AI models. We do not make automated decisions that produce legal or similarly significant effects.
How we share data
We share data only with service providers who process it on our behalf, under written contract, and only for the purposes above. They may not use it for their own ends.
| Recipient | Role | What they receive |
|---|---|---|
| Valve Corporation (Steam) | Storefront and online services | Steam ID, display name |
| Epic Games, Inc. (Epic Games Store / Epic Online Services) | Storefront and online services | Epic Account ID, display name |
| Vercel Inc. | Website hosting and cookieless site analytics | Server request data, page-view and performance events |
| Crash reporting and gameplay analytics provider | Diagnosing crashes, aggregate telemetry | Device data, install identifier, gameplay events |
| Email delivery provider | Sending updates you subscribed to | Email address |
The last two are shown by role because those vendors are not yet contracted; this page will name them before the game ships, and you can ask for the current named list at any time at contact@everreachlabs.io. We may also disclose data where the law requires it, to enforce our terms, or to protect the rights and safety of players. If Everreach Labs is ever acquired or merged, data may transfer to the successor, who would remain bound by this policy.
How long we keep data
We keep data only as long as the purpose that justified collecting it requires. The specific periods are set out in the Retained for column above. In summary:
- Crash reports and gameplay analytics — 24 months from collection.
- Website analytics — held in aggregate; no raw event log beyond 25 months.
- Server logs — 30 days.
- Platform identifiers — while your account remains active with us.
- Newsletter email — until you unsubscribe, which you can do from any email we send.
- Correspondence — 24 months after the matter is closed.
When a period ends, we delete the data or irreversibly anonymise it so it can no longer be linked to you. Anonymised and aggregated statistics may be kept indefinitely, because they are no longer personal data. Where we must keep something longer to meet a legal obligation, we keep only what that obligation requires, and only for as long as it lasts.
Cookies and similar technologies
This website sets no cookies. Our analytics are cookieless by design,
which is why you are not asked to dismiss a consent banner. The only browser storage we
use is the single sessionStorage flag described above, which never leaves
your device. Storefronts and any embedded third-party page you navigate to may set their
own cookies under their own policies.
International transfers
We are based in the United States and our providers may process data in the United States and elsewhere. Where data is transferred out of the UK, EEA or Switzerland, we rely on the European Commission's Standard Contractual Clauses, or an equivalent lawful transfer mechanism, together with technical measures such as encryption in transit.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you, and receive a copy;
- correct data that is inaccurate or incomplete;
- delete your data;
- object to, or ask us to restrict, processing based on legitimate interests;
- withdraw consent at any time, without affecting processing already carried out;
- receive your data in a portable, machine-readable format;
- opt out of any sale or sharing of personal data — we do neither, so there is nothing to opt out of;
- be free from discrimination for exercising any of these rights.
Email contact@everreachlabs.io and we will respond within 30 days. We may need to verify your identity first. You can also complain to your local data protection authority; in the EEA that is the regulator for the country you live in, and in the UK it is the Information Commissioner's Office.
Children
Astral Sever is not directed at children under 13 (or under 16 in the EEA, where local law sets that age). We do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
Security
We protect data in transit with TLS, restrict internal access to the people who need it for their work, and require our providers to maintain appropriate safeguards. No system is perfectly secure. If a breach affects your personal data and creates a real risk to you, we will notify you and the relevant regulator within the timeframes the law requires.
Changes to this policy
If we change how we handle data, we will update this page, raise the version number and revise the effective date above. For material changes we will give notice in the game or by email before they take effect.
Contact
Questions, requests or complaints: contact@everreachlabs.io, or write to Everreach Labs, Inc., 2803 Philadelphia Pike, Suite B #1255, Claymont, DE 19703, United States.