Privacy Policy

Effective 25 October 2026. Space Junk Industries publishes Null Expanse for Android.

The essentials

Null Expanse uses Google Sign-In to open your game account. We keep your progress on our server and use limited technical information for security and fair play. We have no ads, advertising or analytics SDKs, or cross-app tracking. We never sell or rent your data.

This policy covers the Google sign-in build. Features marked planned are not collecting data in that build.

Your Google account

Google is our only sign-in provider. It gives us an account identifier (subject ID), its issuer identifier and, when available, a verified email address. Our server verifies Google's response. We keep the identifiers to connect you to the same game account, even if your email changes. We keep the verified email for support.

We do not keep Google's profile name or photo, your Google password, or raw Google sign-in tokens. There is no game password. Google handles Google account recovery; an email request cannot transfer your game account to a different Google identity. Google's services follow Google's privacy policy.

On your device

We save our own game session and an installation signing key in encrypted storage protected by Android's keystore. They let you reconnect and help prevent a copied session being used on another installation. No Google token is saved. If secure storage is unavailable, the session and key stay in memory; you must sign in again after closing the app.

Device preferences also stay on your device. Signing out clears the playable local session. If the server is unreachable, an encrypted sign-out retry stays until the server confirms revocation.

Your game progress

We keep pilots and their names, ships, items, wallet, orders, skills, positions and in-game actions on our server while your account exists. This runs the shared world, restores progress and verifies trades and rewards. Other players can see your public pilot name, ship and visible game actions. Your Google email and private account reviews are not public.

Security and linked-account reviews

We use your IP address for rate limits and abuse prevention. We keep short-lived keyed hashes of address patterns, installation-key observations and session intervals (connection times) to investigate linked accounts and enforce shared limits. We do not use addresses to determine your real-world location.

Planned: scoped device/app-set observations will be stored as keyed hashes. Play Integrity checks, if added, will keep verdict categories and times, not raw Integrity tokens. These native signals are not collected in the current sign-in build. We do not collect payment profiles or card details.

Signals can open a private staff review; they do not automatically link accounts or trigger bans. Shared phones, Wi-Fi and households are not proof of one person. Authorized staff check evidence and household explanations before confirming shared limits. Appeal through Help or [email protected], including your case reference if available. We keep link and appeal decisions with restricted staff access.

Retention

• Identity, support email and game progress: account lifetime, subject to deletion below.
• Link signals: up to 30 days, including hashed device/address observations and session intervals. Hashes are still personal data.
• Operational and review audit: up to 90 days.
• Confirmed links: while the linked accounts exist or until overturned.
• Deletion protection: a keyed identity hash and minimal limit/deletion record during the 30-day deletion window, then erased.

Delete your account

In the account screen, choose Delete account, review the warning and authenticate again with Google. We immediately revoke your sessions, stop play and detach your public profile. The screen shows the deletion date, 30 days after your request.

During those 30 days, sign in with the same Google account to view status or choose Cancel deletion. You cannot play while deletion is pending. Cancellation restores existing records without new rewards or reset limits. Uninstalling the game does not delete your game account. Deleting your game account does not delete your Google account.

At final deletion we erase the Google identifier, support email, personal links and signals, and your pilots and belongings after settling game transactions. The temporary identity hash expires too. Only necessary pseudonymous transaction and receipt records remain for game integrity, such as value created, moved or destroyed. These use internal references instead of your Google identifier or email, but can still be personal data. Before public release we will state how long these records are kept and any legal retention exceptions.

Planned for release: backups will be encrypted and expire on a confirmed schedule. Deletion records will be reapplied before a restored backup serves players, so a restore never revives deleted accounts. These protections still need release testing; current development backups are not encrypted.

Without the app, email [email protected] with the subject “Null Expanse account deletion” and your pilot name. We will verify ownership and help process your request. Do not send passwords or tokens. The same deletion window and retention rules apply.

Google Play crash diagnostics

If your Google Play settings allow it, Google may make crash reports and diagnostics available to us in Play Console, such as device model, Android version and the error. We use these to fix faults. Google controls this collection and retention under its privacy policy. We have no separate crash-reporting or analytics SDK.

Who handles data

Google provides sign-in. Hosting and infrastructure providers process data as needed to run the service for us. We do not share data for others' advertising or analytics. We may disclose information when legally required. Game connections to our server use TLS encryption in transit. Private account and security data is restricted to staff who need access.

Planned: chat and corporations

When these ship, we will store memberships, invitations, notices, messages and moderation reports. Messages will be readable by authorized recipients and authorized staff investigating a case. Chat will use encryption in transit, not end-to-end encryption.

Ordinary Local, public and Fleet chat will expire within 24 hours; corporation, alliance and private-channel chat within 7 days; accepted direct messages within 30 days. Count limits may remove text sooner. Reported context lasts 30 days from the report; moderation decision audit lasts 90 days. Necessary case holds must be documented, restricted and reviewed. Blocking, reporting and appeals will accompany chat.

Planned: cosmetic purchases

Later commerce will offer cosmetics only. Google Play will process Android payments. We will keep verified purchase receipts and entitlement/refund records to deliver purchases and prevent receipt reuse. We will not receive card details or a universal Google payment profile. We will update this policy and Play disclosures before purchases launch.

Children

Null Expanse is not directed at children under 13. We do not knowingly collect their personal information. Contact us if you believe a child under 13 has an account so we can investigate and delete it.

Your rights and contact

Depending on where you live, you may have rights to access, correct, export or delete your data, or object to its use. Contact Space Junk Industries at [email protected] for privacy requests or account appeals.

We will update this page and its effective date when data practices change, including before planned features collect information.