Privacy Policy · Darkastral TEST

This page explains which personal data is processed when you use Darkastral, why it is processed and what your rights are. We only process the data needed to run the game, keep your account secure and meet legal obligations; we do not sell your data or share it for advertising.

Data we process

Account details: username, email address and an irreversible hash of your password (the password itself is never stored).
Security records: last login time and IP address, failed login attempts, password reset requests and account activity logs.
Game data: your commander profile, ships, items, progress, ranking, clan membership, in-game chat and messages.
Payment records: the amount, status and date of your Quartz orders and the transaction number issued by the payment provider. Your card details are processed by the payment provider iyzico; Darkastral never sees or stores your card number.
Cookies: a session cookie that keeps you logged in, a security token used to protect forms and a "lang" cookie that remembers your language. No advertising or tracking cookies are used.

Why we use it

To create your account, verify your login and provide the game.
To send email verification, password reset, payment receipt and security notifications.
To prevent cheating, abuse and unauthorised access, and to review rule violations.
To process payments and meet legal record-keeping obligations.
To choose the site language based on your country (your IP address is checked locally on our server and is not sent to any third party).

Service providers

iyzico: secure processing of Quartz payments.
Email server: delivery of account and payment emails.
Google Fonts: loading the fonts on the page; your browser connects to Google servers to do this.

Apart from these providers, your data is not shared with third parties unless required by law.

How long we keep it

Account and game data are kept while your account is open. Password reset links are valid for at most 60 minutes and are deleted once used. Payment records are kept for the period required by law.

Your rights

Under the Turkish Personal Data Protection Law No. 6698 you have the right to learn whether your data is processed, request information, ask for it to be corrected or deleted, and object to its processing. To request deletion of your account or a copy of your data, write to us from your registered email address.

Contact

Email us with privacy questions at: destek@binvar.com