What the game keeps
You must sign in before playing. Starlasso uses Apple sign-in on iPhone and iPad and Google Play Games on Android. The game receives an account identifier from the provider. It does not receive your email, name, contacts or photos. There is no guest play.
The following data is kept against that identifier:
- Your chosen callsign and its added number, portrait and ring.
- Your match record: matches, wins, best capture, streaks, rating and tier; which bonuses and milestones have been paid; and the season when the record was last seen.
- Your last 20 matches, including place, capture, cuts, and the callsigns and portraits of the other pilots at each table, and for an online match how your connection held up: its round-trip time, how much that varied, how often it stalled, and whether it was Wi-Fi or cellular.
- Your Stardust balance and owned items, plus a receipt for each item bought: the item, its Stardust cost and when it was bought.
- Your friends list, requests sent and received, and a party code while you are in a party.
- If notifications are on: the push token of your phone (from Apple on iPhone, from Google's Firebase on Android) and the app build it came from, kept with your account so friends' requests, acceptances and party invitations can reach you while the app is closed, and so you can be told when a new version is out. Turning notifications off on the settings sheet removes it.
- Your invite code, the short code in your invite link (starlasso.app/r/…), and, if you joined through someone's link, who invited you. The pilots who joined through yours are listed with your account, so their friend requests are accepted and referral bonuses paid. Anyone opening your link sees your callsign and portrait, as the season ladder already shows them.
- If you connect Game Center on iPhone: your Game Center player identifier, kept with your account so friends who play can find you. Your Game Center friends list is read on your phone, and their Game Center identifiers are checked against Starlasso's players to show which of them play; the list is not stored by us.
Crash reports include the device model, operating system version and the crash. They use an installation identifier rather than your account identifier.
Usage data, when you allow it, goes to Unity Analytics: sessions and their length, device model and operating system version, the country the connection comes from, and a few events of the game's own, such as a match finished with its place and share, a purchase made with Stardust, a callsign chosen or a report filed. It is kept under a Unity-generated identifier and your account identifier. Usage data is off until you answer a one-time question after choosing your callsign, and you can change your answer on the settings sheet. Saying no, turning it off later, or deleting your account asks Unity to delete what it holds.
The match server checks your sign-in token and sees the IP address used to connect. The IP address is needed to play and is not kept after the match.
Ad measurement, on iPhone, only if you allow tracking. From version 1.0.3 the game asks once, with Apple's own "Allow this app to track you?" prompt. If you tap Allow, the game starts Tenjin, a measurement service, which receives your phone's advertising identifier, its identifier for Starlasso's developer and an identifier Tenjin creates for the installation, Apple's ad attribution token, the IP address, device model, operating system and app version, language, country and time zone, and when the app is opened and for how long. Tenjin uses them to tell the ad networks Starlasso advertises on which of their ads led to installs. If you do not allow tracking, the game never starts Tenjin and sends it nothing from your phone. You can change your answer at any time in your iPhone's Settings, under Privacy & Security, Tracking. Whatever you answer, Apple may tell an ad network that one of its ads led to an install, anonymously and a day or more later, and sends Starlasso's copy of that report to Tenjin; the report comes from Apple and contains nothing about you.
Ad measurement on Android. Android has no tracking prompt, so from version 1.0.4 the game starts Tenjin when it opens. Tenjin receives your phone's advertising identifier and its app set identifier, Google Play's install referrer (which says which link or ad led to the install), an identifier Tenjin creates for the installation, the IP address, device model, operating system and app version, language, country and time zone, and when the app is opened and for how long, and uses them to tell the ad networks Starlasso advertises on which of their ads led to installs. You can reset or delete your advertising identifier at any time in your phone's settings, under Privacy, Ads (on some phones, Google, Ads); once it is deleted, Tenjin receives none.
Why
The account identifier connects your sign-in to your callsign, choices, record, Stardust, items and friends. Match information provides results and history, updates your rating and tier, and places you on the season ladder. Friends and party information supports requests, presence and joining an arena together. On your first launch the game sends one friend request on your behalf to the studio's own account, so every pilot starts with a friend; you can remove it like any other. If you opened a friend's invite link, the game sends that friend a request too. If you are new and came through an invite link, it records who invited you so the first online match pays you both a referral bonus. When you install after tapping an invite link, the link's page puts the invite on your clipboard, and on your first launch the game offers to read it back; it reads the clipboard only when you tap Accept invite, and iOS asks you first.
A notification about a friend carries only their callsign and what they did. Other notifications say that a limited-time event is opening or that a new version is out. The words are written by the game's own notification service, and nothing typed on a phone is sent to another.
The match server uses the sign-in token and connection address to admit you and run the match. Your connection's round-trip time and stalls are kept with the match so a report of lag can be looked into. Crash reports help identify and fix crashes.
Usage data shows how the game is played, so it can be improved: whether players return, where they stop, and which matches and items are played and bought. Usage data is never shared for advertising, and there are no ads in the game. Ad measurement, when you allow tracking, shows which of Starlasso's own ads bring new players, so its advertising money goes to the ones that work; without your permission the game does not track you across other companies' apps or sites.
Where it lives
Account and game data is stored on Unity Gaming Services, operated by Unity Technologies, in the United States. Crash reports go to Unity Cloud Diagnostics and usage data to Unity Analytics, both operated by Unity Technologies. Matches run on Edgegap servers in the United States. Notifications are sent through the game's own service on Cloudflare and delivered by Apple's push service on iPhone and by Google's Firebase Cloud Messaging on Android. They receive the push token and each notification: its words, and what the game needs when it is tapped (who it is from and, for a party invitation, the party's code). On Android, Firebase also keeps an installation identifier for the phone while notifications are on. Ad measurement, on iPhone when you allow tracking and on Android from version 1.0.4, goes to Tenjin, Inc., in the United States, which reports installs to the ad networks Starlasso advertises on; Tenjin describes its handling in its privacy policy. Unity, Edgegap, Cloudflare, Google and Tenjin process this data only to run Starlasso's services, and their terms with us require them to protect it at least as well as this policy does.
Who sees it
Your friends see your presence while the app is open: whether you are online, a short status such as “In a match,” your portrait and your tier. A friend who has turned on Friends online gets a notification when you open the game. Everyone else who can see the season ladder sees only whether you have had the game open in the last few minutes, as a dot beside your ladder entry.
Every player can see the season ladder. It shows callsign, portrait, tier and rating. Unity operates the account data, usage data and crash-report services, and Edgegap operates the match servers.
How long
Signing out leaves your game data in place. Your account data remains until you use Delete account. Match history keeps the latest 20 matches. A party code is kept only while you are in a party, and the connection IP address is not kept after a match.
The season ladder resets at the end of each calendar month, Pacific time; the first reset is at the end of 31 October 2026.
Usage data is kept by Unity Analytics under Unity's own retention period. Turning usage data off asks Unity to delete what it holds for this installation, and Delete account asks Unity to delete what it holds for the account.
Your choices
Open the settings sheet from the gear on the hub, then your account at the top of it. Sign out signs you out and leaves your data in place. Delete account removes your record, Stardust balance, items, friends links and usage data, and empties your ladder row.
Under Friends & notifications, Notifications turns notifications on or off; off removes your push token. Friends online and Limited-time events choose whether you hear when a friend opens the game and when an event opens. Accept requests lets friend requests join your crew as they arrive.
Under Privacy & data, Usage data turns collection on or off. Off also asks Unity to delete the usage data it holds for this installation. Unity describes how it handles player data in its game player and app user privacy policy.
Deleting your Starlasso account does not delete the Apple or Google account you used to sign in. You manage that provider account separately.
Children
Starlasso is not directed at children under 13. Sign-in requires an Apple or Google account and follows that provider’s age rules.
Changes
This policy may change. The effective date at the top says when the current policy took effect.
Ads may be added in a later version. If that happens, this policy will be updated before any ads appear.
Contact
Questions about this policy or your data: [email protected]