Space Imperia 4X · Breich Games
Privacy Policy for Space Imperia 4X and Breich Games
Effective date: August 29, 2026 Last updated: August 29, 2026
/1. Introduction and Scope
Breich Games, LLC ("Breich Games," "we," "us," or "our") makes and operates Space Imperia 4X, a turn-based 4X strategy game and the officially licensed digital adaptation of GMT Games' Space Empires 4X. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.
This policy applies to:
- The Space Imperia 4X game on Steam (Windows, Mac, Linux, and SteamOS) and on Google Play (Android).
- Our marketing website at https://breichgames.com.
- Your Space Imperia 4X account and our backend service at https://api.spaceimperia4x.com.
Space Imperia 4X is distributed through Steam (Valve Corporation) and Google Play (Google). When you buy, download, sign in through, or make a payment on those platforms, or when you link your Discord account, those companies handle your data on their own platforms under their own privacy policies. This policy does not govern what Valve, Google, or Discord do on their platforms. Please review their policies directly:
- Steam / Valve: https://store.steampowered.com/privacy_agreement/
- Google (Google Play and Google account services): https://policies.google.com/privacy
- Discord: https://discord.com/privacy
For your data, Breich Games is the "controller" under the EU and UK General Data Protection Regulation (GDPR) and the "business" under the California Consumer Privacy Act as amended (CCPA/CPRA). In plain terms, we are the company that decides how and why your data is used.
/2. Who We Are and How to Contact Us
Breich Games, LLC is a small independent studio based in Austin, Texas, USA.
For privacy questions or to exercise your rights, contact us at:
- Privacy and support: support@breichgames.com
- General contact: brett@breichgames.com
We have not appointed a Data Protection Officer, because our size and activities do not require one under GDPR Article 37. Privacy requests are handled through the address above.
/3. Quick Summary
Here is the short version. The rest of this policy has the detail.
- What we collect: account details you give us (username, and, for email accounts, your email and a securely hashed password), platform identifiers when you sign in with Steam or link Discord, gameplay and multiplayer records, product analytics about how the game is played, technical information like your IP address, and the contents of any bug report you choose to send. On our website, we run Google Analytics through Google Tag Manager.
- Why: to run the game and your account, to enable multiplayer and ranked play, to send the notifications you ask for, to fix bugs and improve the game, and to keep the service secure.
- Who we share it with: our hosting and infrastructure provider (Amazon Web Services), our email delivery provider (Resend), Steam, Discord, and, for the website only, Google Analytics and Google Tag Manager. We do not sell your personal data for money.
- What we do not do: the game contains no advertising SDKs, no third-party analytics SDKs, and no third-party crash-reporting SDKs. The Android app requests only internet access. We do not collect precise location, government IDs, biometric, or health data.
- Children: the service is not directed to children under 13, and we do not knowingly collect their data.
- Deleting your account: you can delete your account from inside the game, which immediately removes your email, password, Steam link, Discord link, username, submitted bug reports, and Steam ownership evidence, and signs you out everywhere. Your game records and product analytics are kept only in de-identified form, keyed to an internal identifier with no personal data behind it; Section 10 has the detail. The page at https://breichgames.com/delete-my-account explains this process and lets you request deletion by email if you cannot use the in-game option.
- Contact: support@breichgames.com.
/4. The Data We Collect
We collect data that you provide, data we collect automatically while you use the game and website, and data we receive from third parties such as Steam and Discord.
4.1 Data you provide
- Account details. If you create an email-and-password account, we store your username, your email address, and a securely hashed version of your password (hashed with Argon2, never stored in plain text). If you sign in only through Steam, we do not store an email or password for you.
- Support and bug reports. If you submit a bug report from inside the game, we receive the username you were signed in with, the title and description you type, and a snapshot of the current game. See Section 6 for exactly what a bug report contains.
- In-game and lobby chat. In multiplayer, chat messages you send are transmitted to the other players in your game or lobby. See Section 6.
- Email you send us. If you email us, we receive your email address and whatever you write.
4.2 Data we collect automatically
- Account and security data. A unique internal account identifier, an authentication token version used to sign you out when needed, and rate-limiting counters that guard sign-in, sign-up, and password-reset from abuse.
- Gameplay and multiplayer records. Your seat in each game, player color, turn order, technologies purchased, per-game statistics (such as ships built and destroyed, resources spent, and planets colonized), your private exploration scans, saved multiplayer game state, and, for competitive play, your ranking, rating, match results, leaderboard placement, and awards.
- Product analytics (telemetry). The game sends gameplay analytics events to our own backend. Each event includes:
- an event name and timestamps;
- a per-launch session identifier;
- your account identifier, or, if you signed in with Steam and have no separate account, your Steam ID;
- the current game identifier;
- gameplay context such as player color, round, turn, phase, and combat details, and, for some events (for example when a game starts or finishes, or when you move, colonize, or explore), a full snapshot of your masked view of the game and board, including per-hex unit listings;
- a client source tag identifying the build, which is "godot" for the full game or "godot_demo" for the demo;
- your IP address as seen by our server.
The operating-system name is sent once per session, on the "Session Started" event, rather than with every event. This telemetry is on by default and you can turn it off (see Section 7).
- Technical data. Your IP address is visible to our servers on every network request, as it is for any internet service. Bug reports also include technical details about your device and app (see Section 6).
- Website usage. When you visit https://breichgames.com, our analytics record page views and route changes, passive engagement signals (a short time on the page or scrolling partway down), outbound link clicks (for example to Steam, to spaceimperia4x.com, to our Discord, YouTube, and X profiles, and on the email links in our contact and footer areas), and any marketing campaign parameters (UTM tags) in the link you arrived from. See Section 7.
4.3 Data we receive from third parties
- Steam. When you sign in with Steam, Steam confirms your identity to us and we store your Steam ID. We also check, through Steam, whether you own the game, which we use to award a founding-player recognition. We store the earliest evidence of your ownership and the time we last checked.
- Discord. If you choose to link Discord, we receive and store your Discord user ID and your Discord display name, along with the time you linked and your notification preferences.
- Stores. Valve (Steam) and Google (Google Play) are the sellers of record for purchases, which means they process your payment, not us. We do not receive your full payment card details. Steam also confirms to us whether you own the game, which we use to award founding-player recognition. Google Play does not send us any ownership or license confirmation; it only distributes the game and processes Android payments.
4.4 What we do not collect
- We do not use advertising identifiers, device fingerprinting, or hardware IDs. The game does not read an advertising ID, a device serial, or similar identifiers.
- The Android app requests only the internet permission. It does not request location, camera, phone state, contacts, or account-manager permissions.
- The game contains no advertising SDKs, no third-party analytics SDKs (such as Firebase, GameAnalytics, Amplitude, Adjust, or AppsFlyer), and no third-party crash-reporting SDKs (such as Sentry, Crashlytics, or Bugsnag). All product analytics and bug reports go to our own backend.
- We do not intentionally collect precise geolocation, government identifiers, biometric data, health data, or other special categories of sensitive personal information. We treat your IP address as personal data even though it is basic network plumbing.
/5. How and Why We Use Your Data, and Our Legal Bases
Providing a username, and, for email accounts, an email address and password, is necessary to create and operate an account. If you do not provide these, you cannot create an account or use online, multiplayer, or ranked features, though you can still play offline single-player content. Providing gameplay telemetry is optional, and you can decline it in the settings menu without losing access to the game.
The table below lists what we do with your data and, for users in the European Economic Area (EEA), the United Kingdom, and Switzerland, the legal basis under GDPR Article 6 that we rely on.
| Purpose | Data used | GDPR legal basis |
|---|---|---|
| Create your account, sign you in, and identify you | Username, email, hashed password, Steam ID | Performance of a contract; legitimate interests in account security |
| Deliver and run the game and multiplayer | Gameplay and multiplayer records, saved game state, real-time connection data | Performance of a contract |
| Operate ranked play, matchmaking, and leaderboards | Rating, rank, match results, queue entries, seat data | Performance of a contract; legitimate interests in fair competitive play |
| Send you the notifications you enable (turn reminders and similar) | Discord ID, notification preferences, opponents' usernames in the message | Performance of a contract; consent, since you choose to link Discord and enable notifications |
| Verify game ownership and award founding-player recognition | Steam ID, ownership evidence | Legitimate interests in rewarding early supporters |
| Fix bugs and improve and balance the game | Product analytics, bug reports, diagnostics | Legitimate interests in maintaining and improving the game; consent where telemetry is optional |
| Keep the service secure and prevent abuse | IP-derived rate-limit counters, IP address in security logs, authentication data | Legitimate interests in security; legal obligation where relevant |
| Provide support | Support email, bug report contents | Performance of a contract; legitimate interests in helping you |
| Send transactional email (for example password reset) | Your email address and the message | Performance of a contract; legitimate interests |
| Measure and improve our website | Website usage and analytics events, cookies or similar technologies set by Google Analytics | Legitimate interests in measuring and improving our website (see Section 7 for the controls available and their limits for EEA and UK visitors) |
In the table, "performance of a contract" means we need the data to give you the service you signed up for, and "legitimate interests" means we have a genuine business reason that we have weighed against your rights and freedoms. You can object to processing based on legitimate interests (see Section 11).
/6. In-Game and Multiplayer Data
Because Space Imperia 4X is a competitive multiplayer game, some data is shared with, or visible to, other players by design. This section explains that.
- Multiplayer visibility. Your username, player color, and in-game presence are visible to the other players in your game or lobby. Your ranked display name, rating, and results are used to build competitive ladders and leaderboards, which are visible to other players.
- In-game and lobby chat. Chat messages are delivered in real time to the other players in your game or lobby. The message is the delivery: we do not store chat messages on our servers, and the game client does not save them either. Content you share with other players cannot always be fully retracted from their view.
- Saved multiplayer state and match records. We store saved game state and per-game results so that games can continue and so that competitive history stays coherent. As described in Section 10, multiplayer and result records are kept in anonymized form after you delete your account, so that other players' games and leaderboards remain intact.
- Turn notifications through Discord. If you link Discord and enable notifications, then when it is your turn, when your economy phase is due, when a game starts, or when a ranked match is found, we send a direct message to you through Discord. To deliver it, we send your Discord ID and a message to Discord. The message can include a short game label, the round, turn, and phase, and the usernames of the other players in that game.
- Anti-abuse. We process sign-in and request patterns to protect the accounts and endpoints from abuse. We keep rate-limit counters keyed to a one-way hash of the IP address or target email, not the raw IP, and we record the raw IP in our security logs when a rate limit is triggered. We do not currently operate an automated anti-cheat system or keep other automated enforcement records beyond this rate-limiting.
- Bug reports. A bug report is only sent when you fill in and submit the in-game form. There is no automatic or background crash uploader. When you submit one, it includes:
- the username you are signed in with, and the title and description you type;
- a snapshot of the current game (your own masked view of the board and game state, game options, and statistics), including your private exploration scans;
- technical diagnostics: the app version, the game engine build, your operating system name and version (for example "Windows 10.0.26200" or "Android 14"), basic performance counters (frame rate, memory, object counts), the camera view, and the current phase, turn, and round;
- the tail of your local game log (roughly the last 12 kilobytes). This log can incidentally contain identifiers such as a masked sign-in token, a username, an email address, or a Steam ID, because the game writes those to the log during sign-in.
We use bug reports only to diagnose and fix problems and to improve the game.
/7. Analytics, Cookies, Tracking Technologies, and Game Telemetry
We treat the website and the game apps separately, because they work differently.
7.1 The website (breichgames.com)
- Google Tag Manager and Google Analytics. Our website loads Google Tag Manager (container GTM-PK9NJ7MB) on every page, which in turn runs Google Analytics 4 (measurement ID G-CW0PRRLLRJ) and any tags configured inside that container. These measure page views, engagement, and outbound clicks so we can understand and improve the site. They currently load when you visit, without a separate cookie consent banner.
- First-party tracking. Our own website code records, only inside the analytics tool running on the page, page views and route changes, a passive engagement signal (whether you stayed about 10 seconds or scrolled halfway down), and clicks on outbound links to Steam, to spaceimperia4x.com, to our Discord, YouTube, and X profiles, and on our contact and footer email links, tagged with any UTM campaign parameters from the link you arrived on. This first-party code does not collect your name, email, or any identifier, and it does not send anything to a server of ours.
- Meta. Our site includes a Meta domain-verification tag, which only proves to Meta that we own the domain. It is not a tracking pixel, and there is no Meta Pixel in our website code.
- Cookies and local storage. Our own website code does not set cookies. Google Analytics and Google Tag Manager may set analytics cookies (such as
_ga) as configured in the tag manager. Our website stores three first-party values in your browser's session storage (breichgames_engaged,breichgames_utms, and per-event flags that prevent double-counting a click). These are cleared when you close the tab and are never transmitted. We do not use browser local storage. - Fonts. Website fonts are served from our own domain, so visiting the site does not share your IP address with a font provider.
- Do Not Track. Some browsers send a "Do Not Track" signal. There is no industry standard for how to respond to it, so our website does not respond to Do Not Track signals.
- Your choices on the website. You can control or block cookies and analytics through your browser settings and privacy extensions, including extensions that block analytics scripts and cookies before they load. You can also ask us not to process your website analytics data by emailing support@breichgames.com. Our website does not currently detect the Global Privacy Control (GPC) browser signal automatically, so please use one of these routes to opt out. If you are in California, see Section 15; for other US states, see Section 16.
7.2 The game (telemetry)
- The game sends gameplay analytics only to our own backend, as described in Section 4.2. It is not fully anonymous: each event carries your account identifier (or your Steam ID) and your IP address, so we treat it as personal data.
- Each event carries a client source tag ("godot" or "godot_demo"). The operating-system name is sent only once per session, on the "Session Started" event, and not with every event.
- Telemetry is on by default. You can turn it off at any time in the game's settings menu using the analytics setting. Turning it off stops the game from sending these analytics events.
- The game apps do not use web cookies. On Steam and Android, the underlying platforms may use their own identifiers under their own policies.
/8. Who We Share Data With
We share data with the service providers and platforms below. Some act as our processors or service providers (they handle data only to provide a service to us, under contract, and are not allowed to use it for their own purposes). Others are independent controllers of their own platforms.
- Amazon Web Services (AWS) (processor). Cloud hosting, database, storage, and related infrastructure in AWS region us-east-2 in the United States. Substantially all of the data described in this policy is stored and processed on AWS on our behalf, including the account database, the analytics warehouse, application and security logs (retained about 14 days), and short-lived real-time connection records.
- Resend (processor). Delivers our transactional email (today, password-reset emails) from no-reply@breichgames.com. Resend receives the recipient's email address and the message content.
- Google Analytics / Google Tag Manager (processor or service provider for our website analytics). Receives website usage data as described in Section 7. Depending on configuration, some Google signals can constitute "sharing" for cross-context behavioral advertising under California law; see Section 15.
- Meta Platforms. Receives only a domain-verification token proving we own our domain. We do not run a Meta Pixel in our code, so no visitor tracking data flows to Meta from our website code.
- Valve Corporation (Steam) (independent controller; seller of record for Steam purchases, meaning it processes your payment). We send Steam a session ticket and our publisher key to authenticate you, and we query Steam to confirm game ownership. Steam distributes the game on Windows, Mac, Linux, and SteamOS.
- Google (Google Play) (independent controller; seller of record for Android purchases, meaning it processes your payment). Distributes the game and processes payments on Android.
- Discord (independent controller). When you link Discord, we exchange your authorization with Discord and receive your Discord ID and display name. When we send you turn notifications, we send your Discord ID and the message (which can include other players' usernames) to Discord to deliver the direct message. You control this link and can unlink it at any time.
We require our processors to protect your data under contract and not to use it for their own purposes beyond providing their service to us. We do not sell your personal data for money. We may share data where required by law or to protect the rights, safety, and integrity of the game and its players, and we may transfer data as part of a business transaction such as a merger or acquisition, subject to this policy.
A current list of our processors is available on request at support@breichgames.com, so that we can update providers without republishing this entire policy each time.
/9. International Data Transfers
Breich Games is based in the United States, and we process data in the United States, primarily on AWS in region us-east-2.
If you are in the EEA, the United Kingdom, or Switzerland, your data is transferred to the United States. Where we make such transfers, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent Swiss measures, together with technical and organizational protections. We also rely on our processors' own approved transfer mechanisms where they maintain them. You can ask us for more information about these safeguards at support@breichgames.com.
/10. How Long We Keep Data, and Account Deletion
10.1 Retention
We keep personal data only as long as we need it for the purposes in this policy, then delete or anonymize it. In practice:
- Active accounts: kept for the life of the account.
- Multiplayer and result records (match results, ranked history, leaderboards, saved multiplayer state): kept so that other players' games and competitive history remain intact. After account deletion they are retained in anonymized form (see below).
- Bug reports: kept for as long as they are useful for diagnosing and fixing the issue they report, and for a reasonable period after the related fix has shipped, and no longer than needed for that purpose. When you delete your account, the bug reports you submitted are deleted with it (see Section 10.2). You can also ask us to delete a bug report you submitted at any time by emailing support@breichgames.com.
- Product analytics: retained in our analytics warehouse for as long as they are useful for understanding and improving the game. These records are keyed to your internal account identifier, the same identifier used for your game records. When you delete your account, that identifier is stripped of all personal data, so the analytics are retained only in de-identified form (see Section 10.2).
- Security and application logs: application logs are retained about 14 days. Short-lived real-time connection records expire automatically (within about 24 hours, and single-use connection tickets within seconds). Certain queued messages are retained for a few days. Rate-limit counters are pruned automatically once they age out.
10.2 Deleting your account
You can delete your account at any time from inside the game. The page at:
https://breichgames.com/delete-my-account
explains how deletion works and, if you cannot use the in-game option, lets you request deletion by emailing support@breichgames.com.
Deletion is anonymize-in-place, not a full row deletion, because your game records are referenced by other players' games. When you delete your account from inside the game:
- We immediately remove your email address, your password, your Steam link, your Discord link (both the ID and the display name), and your username from your account. Your username is replaced with an anonymous placeholder.
- We immediately invalidate your existing sign-in tokens, signing you out everywhere.
- We delete the bug reports you submitted, including their saved game state and attached diagnostic logs, which can contain identifiers such as a masked sign-in token, an email address, or a Steam ID (see Section 6).
- We clear your Steam ownership evidence.
- We keep your game records (such as multiplayer seats, match results, ratings, awards, and single-player progress) in anonymized form, so that other players' completed and in-progress games and the leaderboards stay coherent.
Product analytics are also retained, and only in de-identified form: they are keyed to your internal account identifier, which this deletion strips of all personal data, so they remain in the same anonymous state as the game records above. If you would still like us to remove analytics associated with you, email support@breichgames.com.
Residual copies in our encrypted backups are purged within 30 days.
Deletion is permanent and cannot be reversed, and there is no way to reactivate a deleted account.
/11. Your Rights and How to Exercise Them
Depending on where you live, you have some or all of the rights below. We offer one set of channels for all of them (see "How to exercise your rights").
11.1 If you are in the EEA, the UK, or Switzerland (GDPR / UK GDPR / FADP)
- Access: get a copy of your data and information about how we process it.
- Rectification: correct inaccurate or incomplete data.
- Erasure: delete your data, subject to lawful retention.
- Restriction: ask us to limit processing in certain cases.
- Portability: receive data you provided in a structured, commonly used, machine-readable format, and have it sent elsewhere where technically feasible.
- Object: object to processing based on legitimate interests, and to any direct marketing.
- Withdraw consent: where we rely on consent, withdraw it at any time. This does not affect processing done before you withdrew.
- Automated decisions: you have the right not to be subject to decisions with legal or similarly significant effects that are based solely on automated processing. We use automated rules to protect sign-in, sign-up, and password-reset from abuse. These rules can temporarily block requests from an IP address, account, or target email when they exceed safe rate limits, which protects the service and other players. We do not currently operate an automated anti-cheat system or keep other automated enforcement records. You can ask a person to review any automated action that affects your account by emailing support@breichgames.com.
- Complain: lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).
11.2 If you are in California (CCPA / CPRA)
- Know and access the categories and specific pieces of personal information we collect, the sources, the purposes, and the third parties we disclose to.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information for cross-context behavioral advertising (see Section 15).
- Non-discrimination for exercising your rights.
- Authorized agent: use an authorized agent to submit a request.
We describe sensitive personal information in Section 15.
11.3 If you are in another US state
Residents of states with comprehensive privacy laws (for example Texas, Virginia, Colorado, Connecticut, Oregon, and others) may request access, correction, deletion, and portability, and may opt out of targeted advertising and any sale, through the same channels below. See Section 16.
11.4 How to exercise your rights
- Delete your account (self-service): delete your account from inside the game, which immediately removes your email, password, Steam link, Discord link, and username from your account, as described in Section 10. If you cannot use the in-game option, request deletion by email at support@breichgames.com.
- All other requests: email support@breichgames.com. We will verify your identity in proportion to the request. We aim to respond within the time the law requires. Under the GDPR, we respond without undue delay and within one month, which can be extended to three months for complex requests. Under the CCPA, we acknowledge your request within 10 business days and respond within 45 days, which can be extended by another 45 days. We do not charge a fee unless a request is manifestly unfounded or excessive, where the law permits a fee.
- Withdraw consent and manage tracking: turn off game telemetry in the game's settings menu; manage website cookies and analytics through your browser controls and privacy extensions; and, for opt-out of sale or sharing, use the routes in Sections 15 and 16. You cannot opt out of transactional emails tied to your account while the account exists, because they are necessary to operate the account.
- Authorized agents (California): an authorized agent may submit a request on your behalf; we may ask for proof of authorization and may still ask you to verify your identity directly.
We will not retaliate against you for exercising any of these rights.
/12. Children's Privacy
Space Imperia 4X is intended for adults and older teens. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Where local law sets a higher minimum age for consent to data processing (for example up to 16 in parts of the EEA), that higher age applies to you.
The game is rated [CONTENT RATING] and is declared on Google Play for a target age of [TARGET AGE GROUP]. We do not knowingly allow children under the applicable minimum age to create accounts. If you tell us, or we otherwise learn, that an account belongs to someone under that age, we will close it and delete the associated data.
If you believe a child under the applicable minimum age has provided us with personal data, contact us at support@breichgames.com. If we learn we have collected such data without the required consent, we will delete it promptly and, where required, involve the child's parent or guardian.
/13. Security
We take reasonable steps to protect your data, including:
- Encryption in transit (HTTPS/TLS) for the website and the API.
- Encryption at rest for our database and backups.
- Access controls and least-privilege practices on our AWS environment.
- Passwords stored only as strong one-way hashes, never in plain text.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident occurs, we will respond as described in Section 14.
/14. Data Breach Handling
If we become aware of a personal-data breach, we will assess it promptly and, where required by law, notify the affected users and the relevant regulators without undue delay. This includes the GDPR expectation of notifying the competent supervisory authority within 72 hours where feasible, and applicable US state breach-notification laws, including the Texas Business and Commerce Code Chapter 521. We will not commit to a fixed internal deadline we cannot guarantee, but we will act without undue delay.
/15. California Privacy Notice
This section provides additional detail for California residents under the CCPA/CPRA.
- Notice at collection. The categories of personal information we collect, and the purposes, are described in Sections 4 and 5. In the California statutory taxonomy, the categories we collect are: identifiers (such as username, email, account identifier, Steam and Discord IDs, and IP address); internet or network activity (gameplay telemetry, multiplayer and matchmaking records, website usage); customer records and commercial information (support correspondence and ownership or entitlement signals); and coarse location inferred from IP address. We collect these from you, automatically from your use of the game and website, and from Steam and Discord.
- Disclosures in the last 12 months. In the preceding 12 months, we disclosed the categories of personal information above to service providers for business purposes (hosting and infrastructure, email delivery, and website analytics) and to the platforms named in Section 8. We did not sell personal information for money. Whether our website analytics constitute "sharing" for cross-context behavioral advertising is addressed below, and we let you opt out regardless.
- No sale for money. We do not sell your personal information for money.
- Sharing for cross-context behavioral advertising. Our website loads Google Analytics and Google Tag Manager. Depending on how these are configured, some data they receive can constitute "sharing" for cross-context behavioral advertising under California law. We do not use this data for advertising ourselves, and we run no advertising pixels in our own code. To be safe, we let you opt out of any such sharing regardless.
- How to opt out of sale or sharing. You can opt out by emailing support@breichgames.com, or by using browser settings or privacy extensions that block analytics scripts and cookies. Our website does not currently detect the Global Privacy Control (GPC) browser signal automatically, so please use one of these routes.
- Sensitive personal information. The only sensitive personal information we collect is your account log-in credentials (your username together with your password). We use them solely to authenticate you and secure your account, and we do not use or disclose them to infer characteristics or for any purpose beyond providing and securing the service, so the right to limit their use does not apply. We collect no other sensitive personal information. If this changes, we will offer that right and update this section.
- Do Not Track. As noted in Section 7, our website does not respond to Do Not Track browser signals, because there is no industry standard for them.
- Shine the Light (California Civil Code 1798.83). We do not disclose your personal information to third parties for their own direct marketing purposes.
- Non-discrimination. We will not discriminate against you for exercising your California privacy rights.
/16. Other US State Privacy Rights
If you are a resident of another US state with a comprehensive consumer privacy law, including our home state of Texas (the Texas Data Privacy and Security Act) as well as Virginia, Colorado, Connecticut, Oregon, and others, you may exercise the applicable rights to access, correct, delete, and port your data, and to opt out of targeted advertising and any sale, by contacting us at support@breichgames.com or by using the in-game account-deletion flow.
To opt out of targeted advertising or any sale, use the same routes described for California in Section 15: email support@breichgames.com, or use browser settings or privacy extensions that block analytics scripts and cookies. Our website does not currently detect the Global Privacy Control signal automatically, so please use one of these routes.
If we deny a request, you may appeal by replying to our decision, and we will inform you of the outcome and, where applicable, how to contact your state attorney general.
/17. Contact, EU/UK Representative, and Governing Law
- Contact. For any privacy question or request, email support@breichgames.com. For general inquiries, brett@breichgames.com. We are Breich Games, LLC, Austin, Texas, USA.
- EU representative (GDPR Article 27). [EU REPRESENTATIVE: name, address, and email, to be confirmed and appointed if required.]
- UK representative (UK GDPR Article 27). [UK REPRESENTATIVE: name, address, and email, to be confirmed and appointed if required.]
- Governing law. This policy is governed by the laws of [GOVERNING LAW AND VENUE, expected to be the State of Texas, USA], without regard to its conflict-of-laws rules, and consistent with the terms of the Steam and Google Play distribution agreements. This does not remove any mandatory rights you have under the law of your own country or state.
/18. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the effective date and notify you by a reasonable means, such as an in-app notice, a notice on the website, or an email to registered users. The version with the current effective date at the top is the one in force. Please review this policy periodically.
/19. Platform Notices
For how the stores and linked platforms handle your data on their own services, please see:
- Steam / Valve: the Space Imperia 4X store page and Valve's privacy policy at https://store.steampowered.com/privacy_agreement/
- Google Play: the Space Imperia 4X Data safety summary on the Google Play listing, and Google's privacy policy at https://policies.google.com/privacy
- Discord: https://discord.com/privacy
These platform notices are provided for your convenience and are governed by those companies, not by Breich Games.
