Operator and support: FloriM Studios, proprietor Florian May, Glauchauer Straße 3, 01587 Riesa, Germany. Telephone: +49 178 3372818. Email: florian.may@florim-studios.de. These disclosures cover the website, game and their respective platform entries.
Website and game entry
The World of Frontiers information pages do not add tracking cookies or load the game application. Existing campaign parameters in the address may be preserved when you enter the game. The processing described below applies to game entry, existing platform access and the separate DarkOrbit alternative pages.
Your pilot and progress
Our shared Cloudflare game server stores your pilot identifier, name, faction, selected world, ship, inventory, currencies, missions, combat statistics, clan membership and diplomacy. These records provide persistent multiplayer gameplay. Your pilot name, clan tag and gameplay activity are visible to other players in the same world. Rankings are shared across the website, itch.io, CrazyGames and Y8.
Website accounts use a pilot name and a salted password hash. We do not store your password in plain text.
Access through CrazyGames, itch.io and Y8
CrazyGames Basic Launch uses guest pilots without asking for a password or email. The CrazyGames SDK Data Module stores a random recovery credential: locally for guests and synchronized through CrazyGames for signed-in users. Actual progress remains on our shared server, which stores only a hash of this credential. An existing browser-local guest credential is migrated once without replacing a CrazyGames cloud save. Clearing unsynchronized browser data may remove your ability to access a guest pilot.
itch.io uses the same named accounts and progress as the website. Its embedded entry stores an essential random session credential in local browser storage so it can work without third-party cookies. The server stores only its hash. Signing out removes the credential; signing in elsewhere replaces the previous session.
Y8 uses the same named WoF accounts and central progress, or browser-bound guests. Its entry stores an essential session credential and an optional guest recovery credential locally; only their hashes are stored on the game server. Y8 SDK services load only through the Y8 entry. No parallel Y8 cloud save is created. Aggregate daily Y8 starts, registrations, logins, connected playtime, distinct and returning pilots are retained for 90 days. The visit table associates an existing internal pilot identifier with a day and source, without chat, email, Y8 profile or payment data. Existing network abuse limits still apply. Only game administrators can see these statistics.
Account security
Named registrations require an email address. Resend delivers verification and password-reset emails for FloriM Studios and receives the recipient address and message content. Email addresses remain private and never appear on pilot profiles. Verification and reset links work once and expire after 30 minutes. Existing pilots can add a verified email in Profile. Optional authenticator two-factor authentication stores an encrypted secret on the server; recovery codes are stored only as hashes. When enabled, the second factor is also required for password resets. Security changes are recorded in an internal audit log. An optional public biography of up to 1,000 characters is visible on the pilot profile.
Cloudflare Turnstile checks registration and sign-in, including guest entry, to prevent automated abuse. It processes browser and network signals under Cloudflare’s privacy policy. Transactional email delivery is covered by Resend’s privacy policy. Email and security records are retained while the account exists; expired or invalidated recovery links are removed.
Connections and browser storage
Website game sessions use an essential HttpOnly cookie. Embedded platform sessions use a short-lived WebSocket ticket and a session credential. Local browser storage also remembers language, audio, graphics and world preferences. Cloudflare processes network requests and connection metadata to deliver the game and protect it against abuse. Operational logs may contain technical errors and request metadata. Credentials are not intentionally logged.
AI pilots and window preferences
Pilots marked [AI] are server-controlled characters, not human player accounts. AI radio can answer public Global and Faction messages and messages addressed directly to an AI pilot in your selected game language. Cloudflare Workers AI receives a screened excerpt of your message, verified public game hints and up to two recent question-and-answer pairs from your own conversation. This short context is isolated by player, channel and language, kept in server memory for up to five minutes and not added to your saved account.
Messages resembling credentials, contact details or abusive instructions are excluded. Do not include personal or confidential information. Account records, wallet, inventory, credentials and other players’ conversations are not supplied to the model. Ship comparisons use the current game catalogue. AI replies may be imperfect; if the model is slow, unavailable or at its daily limit, reviewed contextual dialogue is used. AI dialogue cannot execute gameplay or administrator commands. Window positions and visibility are saved with your pilot account separately for desktop and mobile and can be reset in Settings.
Chat, mailbox and platform services
Messages are delivered to the selected Global, Faction, Group or Clan channel and filtered for common profanity. Whispers reach only the sender and selected online recipient. The separate in-game mailbox stores sender and recipient pilot identifiers, names, subject, message text, timestamps and read status within your world so mail can be received while offline. Only its sender and recipient can access it through the game. Deleting mail hides your copy but does not remove the other person’s copy. Records are retained for delivery and abuse prevention until removed through a verified deletion request.
Whispers, mail, Group and Clan chat are never sent to the AI model. Public Global and Faction radio and direct AI conversations are processed as described above. Do not share private information in chat or mail. CrazyGames receives SDK events such as loading, gameplay and room status when you use that platform; its own privacy policy applies to its website and account services. The game does not load the CrazyGames SDK through the ordinary website or itch.io. itch.io operates its own pages and hosting services under its own privacy policy.
Optional purchases
Optional purchases through the website and itch.io use Stripe-hosted checkout. Stripe handles card details; our server stores payment identifiers and the entitlements needed to deliver purchases. Purchases and external payment redirects are disabled in CrazyGames Basic Launch and Y8 entries. Previously earned or acquired entitlements remain available.
Gameplay trailer in game entry
Where game entry offers a trailer preview, its preview image is hosted on our server. The embedded YouTube player from youtube-nocookie.com loads only when you play the trailer. YouTube then receives technical connection data, including your IP address and website origin, and processes playback under Google’s privacy policy. Our game does not pass account or registration data to the player.
Recruit a Pilot — invitations
Invitation links contain a random referral code. If you register with a valid invitation, we permanently associate the new pilot with the recruiter in the same world. The recruiter can see your public pilot name, faction, level and referral milestones. The relationship and reward ledger are saved with the account to grant rewards once and prevent duplicate payments. Referral codes are not login credentials. A pending invitation stays in tab session storage for at most 24 hours and is cleared after sign-in.
Referral checks use existing account creation times, progression, reward timing and account restrictions; they do not create extra IP, device or browser-fingerprint records. Suspicious rewards may be held for administrator review without automatically banning a shared network. Review reasons are removed when resolved; administrative decisions are logged. Reward notifications expire after 90 days, while reward history stays with the account. Verified account deletion removes referral relationships, codes, rewards and notifications involving that account. Historical balances already earned by other pilots remain. Contact the operator for access, deletion or reward review.
Campaign measurement
Successful registrations from tagged YouTube links are associated with the campaign, paid or organic medium, time and a hash derived from the world and internal pilot ID. Later successful sign-ins or authenticated game loads may count as a return. Daily aggregate counts by channel also cover form views, input focus, input starts including autofill, validation errors by field type, submission attempts, CAPTCHA outcomes and page exits before completion. No form contents are transmitted. An exit indicates possible abandonment, not proof that a player has permanently left.
For attributed pilots, the first observed time is recorded once per milestone: playable entry, training start and completion, first regular kill, completed mission and equipped upgrade. Playable entry is a browser report with authenticated access; the other milestones are checked against server game state. Timestamps represent first observation since measurement began, not necessarily the original gameplay time.
These measurement records are deleted after 90 days. Only game administrators receive aggregate results. Measurement adds no cookies or browser identifiers and sends no registration events to Google. Email addresses, callsigns, passwords, IP addresses and Google click identifiers are not stored in these records. Attribution requires the same-site campaign address in the browser, preserved by the game logo link. For access, objection or deletion requests, identify your pilot name and world.
Entry and guest-practice measurement
Since 22 October 2026, counts also cover interactive entry, ready or visible input fields, coarse timing buckets (below one second, one to three seconds, at least three seconds), slow or failed session checks and local guest-practice start, progress and completion. Viewport width is sent only as small, medium or large, without exact dimensions or browser identifiers. These categories describe the viewport, not reliably identified hardware. Guest events are unverified browser reports, not registrations or server-confirmed training completions.
Practice progress is saved in the browser for functionality, without an extra visitor identifier or credentials. Completed guest practice may skip the optional server academy after registration; this remains distinct from confirmed training completion. Aggregate counts also cover whether the guest-start button was mostly visible or clicked, whether the first practice frame was drawn and whether loading failed, timed out, was retried or exited early. Each such event is counted at most once per document and contains no form contents or individual visitor identifier. The same aggregate reporting and 90-day retention apply.
DarkOrbit alternative pages
Since 29 October 2026, the German and English DarkOrbit alternative pages use the existing measurement: page views and CTA clicks are counted by page language. Game-entry links carry only fixed campaign values (seo / landing / darkorbit_de or darkorbit_en). Search terms, external referrers, arbitrary UTM values and visitor identifiers are not stored. Confirmed registrations and game starts follow the attribution, access and deletion rules above. Page views are not unique people and do not prove that traffic came from Google.
Contact and deletion requests
For questions or access, correction and deletion requests, contact florian.may@florim-studios.de with your pilot name and world. We may need to verify that you control the pilot before changing account data. Never email passwords, session tokens or guest recovery credentials. Pilot progress stays stored until removed; payment records may need to be retained separately.
Service privacy policies
itch.io · CrazyGames · Cloudflare · Stripe · Resend · Google / YouTube