Privacy Policy

Loot Fleet (“Loot Fleet,” “we,” “us”) is a free, browser-based idle space-ARPG available at lootfleet.com. We respect your privacy and designed the game to work with as little personal data as possible — you can even play as a guest without an account.

01Who we are

Loot Fleet is the data controller for the personal information described in this policy. If you have any questions about how we handle your data, you can reach us any time at privacy@lootfleet.com.

02What we collect

Account information

If you create an account, we store your email address and a display name. Passwords are handled by our authentication provider and are stored only as salted, hashed values — we never see or keep your plaintext password.

Game progress

To save and sync your fleet across devices, we store your gameplay state: level, current zone, ships, equipped gear, currencies, skill-tree choices, kills, territory holdings, and other in-game statistics.

Purchase information

When you buy in-game coins or other items, payment is processed by Stripe. We receive a record of the transaction — item, amount, currency, timestamp, and a payment confirmation ID — but we never receive or store your full card number.

Usage & device data

We collect basic, privacy-respecting analytics to understand how the game is used and to fix problems:

• Pages or screens visited and approximate time on them
• Referring site or source that brought you to us
• Browser type, device type, and screen size
• Approximate region (derived from IP — we do not store full IP addresses long-term)

Guest play

If you play as a guest, your progress is stored locally in your browser. We don't tie it to an identity until you choose to create an account.

03How we use your data

• Operate the game — save your progress and sync it across your devices
• Authenticate you and keep your account secure
• Process purchases and provide receipts and support
• Run weekly leaderboard heats and territory features, which display your chosen display name to other players
• Understand usage patterns, diagnose bugs, and improve the game
• Communicate essential account, security, or service messages
• Detect, prevent, and address fraud, cheating, and abuse

04Legal bases (EEA/UK)

If you are in the European Economic Area or the UK, we rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the game, save progress, and process purchases you request
• Legitimate interests — to secure the service, prevent abuse, and improve the game through privacy-respecting analytics
• Consent — where required, for example for non-essential storage; you can withdraw consent at any time
• Legal obligation — to comply with tax, accounting, and other laws

05Who we share data with

We share data only with service providers who help us run the game, under contracts that require them to protect it:

• Supabase — account authentication and database hosting for your game data
• Stripe — payment processing for in-game purchases
• Hosting & delivery providers — to serve the website and game files

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, and property of our players or Loot Fleet.

06Cookies & local storage

We use a small number of cookies and your browser's local storage to keep you signed in, remember settings, and store guest progress. We use only essential and first-party analytics storage — we do not use third-party advertising or cross-site tracking cookies.

You can clear this data at any time through your browser settings, though doing so may sign you out or remove unsynced guest progress.

07Data retention

We keep your account and game data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we must retain certain records (such as purchase records) to comply with legal and accounting obligations. Aggregated, anonymized analytics that cannot identify you may be retained longer.

08Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and personal data
• Export a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these, email privacy@lootfleet.com. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data-protection authority.

09Children's privacy

Loot Fleet is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

10Security

We use industry-standard safeguards — encryption in transit, hashed passwords, access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, but we work to reduce risk and respond promptly to any incident.

11International transfers

Our service providers may process data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards, such as standard contractual clauses, to ensure your data remains protected.

12Changes to this policy

We may update this policy as the game evolves or the law changes. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in-game or by email. Continued use of Loot Fleet after changes take effect means you accept the updated policy.

13Contact us

Questions, requests, or concerns about your privacy? We're happy to help.