Privacy policy
Updated October 22, 2026
Who we are
Galaxycraft (galaxycraft.app) is run by Seth Stevenson. Questions, or anything you want changed or deleted:
- Email: privacy@galaxycraft.app
- Phone: 515-401-2380
- Mail: 1621 NE Vista Ct., Ankeny, IA 50021
What we keep about players
- Player name (made up by the player) and a 4-number PIN, which we store scrambled so nobody can read it.
- Birthday, so we know if a grown-up needs to say OK. Other players never see it.
- Game progress: what you’ve built, found and crafted, so it follows you to any device.
- Friends and friend requests, and a short friend code to share in person.
- For kids under 13, their first name and last initial (like “Kendall S.”), typed by their grown-up. Only their friends, and players they send friend requests to, see it, so parents know who their kids are playing with.
What we keep about grown-ups
Just your email address. We use it to send your sign-in link (there’s no password) and to tell you about your kids’ accounts, like a friend waiting for your OK or a report. No newsletters, no ads.
Kids under 13
- A kid can make an account and play without a grown-up, but they can’t make friends, chat or use voice until a grown-up says OK.
- To say OK, the grown-up types a code from the kid’s screen and their email on the Family page, then taps the link we email them.
- On the Family page the grown-up chooses whether their kid can chat, use voice, and add friends on their own or only with their OK. They can change these any time.
- We don’t ask kids for more than the game needs, and nobody has to share anything to play.
Chat
- Chat only goes to friends. Before anyone sees a message, we hide phone numbers, emails, links, addresses, other apps’ usernames and rude words, and we stop messages that ask for that kind of thing.
- We don’t save chat. The server remembers each player’s last 20 lines for a short while, only so that if someone is reported, we can see what was said. Those lines are deleted once we’ve looked at the report.
Voice
Voice is push-to-talk with friends only. It goes through our own server so players never see each other’s internet address. We never record or keep it.
Reports
Any player can report another. We look at what was said and may pause that player’s chat. A kid’s grown-up is told when their kid reports someone or is reported, but never who made a report.
Kids who made up characters
Some characters in the game were made up by kids. The game shows “Made by” and their first name only if their grown-up says OK on the Family page, and the grown-up can change their mind any time.
How the game is used
We count things like which planets get visited and how long people play, to make the game better. These counts are kept on our own server, never include internet addresses, chat or device ids, and are deleted after about 13 months. Visits to the site are counted without cookies, in a way that can’t be traced back to anyone.
Who else is involved
- Hostinger runs the computer our server lives on.
- Resend delivers our emails to grown-ups.
- Google Fonts provides the game’s lettering, so Google sees your internet address when the page loads, like any website.
- Like every website, our server keeps short-lived logs (including internet addresses) to keep the game running and safe.
That’s it. We don’t sell or rent anyone’s information, and we don’t give it to advertisers or anyone else unless the law requires it.
How long we keep things
- Accounts stay until they’re deleted.
- Being signed in on a device lasts 180 days after it was last used. Email sign-in links work for 30 minutes.
- Chat lines in a report are deleted once we’ve looked at it.
Your choices (grown-ups)
- See your kid’s name, friends, switches and reports on the Family page.
- Download everything we keep about them (“Download their info”).
- Change their name, birthday, PIN or switches, or take back your OK for chat, voice or friends.
- Delete their account for good (“Delete account”). Their player, progress, friends and reports are erased.
- Or email privacy@galaxycraft.app and we’ll do it for you.
Keeping it safe
Everything travels encrypted (https). PINs are stored scrambled, sign-in links expire, and only the game’s maker can see reports.
Changes
If we change how we use kids’ information, we’ll email their grown-ups first and ask for a new OK where the law says we must.