Updated 12 October 2026. Operator and support: FloriM Studios, florian.may@florim-studios.de.
Our shared Cloudflare game server stores your pilot identifier, name, faction, selected world, ship, inventory, currencies, missions, combat statistics, clan membership and diplomacy. These records provide persistent multiplayer gameplay. Your pilot name, clan tag and gameplay activity are visible to other players in the same world; rankings are shared across website, itch.io, CrazyGames and Y8 entry points.
Website accounts use a pilot name and a salted password hash. We do not store your plain-text password. CrazyGames Basic Launch uses guest pilots without asking for a password or email. The CrazyGames SDK Data Module stores a random recovery credential for the pilot: locally for guests, and synchronized through CrazyGames for signed-in users. The actual game progress remains on our shared server, which stores only a hash of that credential. An existing browser-local guest credential is migrated once without replacing a CrazyGames cloud save. Clearing unsynchronized browser data may remove your ability to access a guest pilot.
itch.io uses the same named accounts and progress as our website. Its embedded entry stores an essential random session credential in local browser storage to work without third-party cookies. The server stores only its hash. Signing out removes the credential; signing in elsewhere replaces the previous session.
Y8 uses the same named WoF accounts and central progress, or browser-bound guests. Its entry stores an essential session credential and optional guest recovery credential locally; only hashes are stored on the game server. Y8 SDK services are loaded only on the Y8 entry. No parallel Y8 cloud save is created. Aggregate daily Y8 starts, registrations, logins, connected playtime, unique and returning pilots are retained for 90 days. The visit table associates an existing internal pilot identifier with a day and source, without chat, email, Y8 profile or payment data. Existing network abuse limits still apply. These statistics are visible only to game administrators.
Named registrations require an email address. Resend delivers verification and password-reset emails on behalf of FloriM Studios; it receives the destination address and message content. Email addresses are private and are never shown on pilot profiles. Verification and reset links expire after 30 minutes and work once. Existing pilots can add a verified email in Profile. Optional authenticator two-factor authentication stores an encrypted secret on the server; recovery codes are stored only as hashes. Password resets also require the second factor when enabled. Security changes are recorded in an internal audit log. An optional public biography of up to 1,000 characters is visible on the pilot profile.
Cloudflare Turnstile checks registrations and sign-ins, including guest entry, to prevent automated abuse. It processes browser and network signals under Cloudflare's privacy policy. Transactional email delivery is covered by Resend's privacy policy. Email and security records are retained while the account exists; expired or invalidated recovery links are removed.
Website sessions use an essential HttpOnly cookie. Embedded platform sessions use a short-lived WebSocket ticket and a session credential. Local browser storage also remembers language, audio, graphics and world preferences. Cloudflare processes network requests and connection metadata to deliver the game and protect it against abuse. Operational logs may contain technical errors and request metadata. Credentials are not intentionally logged.
Pilots marked [AI] are server-controlled characters, not human player accounts. AI radio can answer public Global and Faction messages, and messages addressed to an AI pilot, in your selected game language. Cloudflare Workers AI receives a screened excerpt of your message, verified public game hints, and up to two recent question-and-answer pairs from your own conversation. This short context is isolated by player, channel and language, kept in server memory for up to five minutes, and is not added to your saved account. Messages resembling credentials, contact details or abusive instructions are excluded. Do not include personal or confidential information. Account records, wallet, inventory, credentials and other players' conversations are not supplied to the model. Ship comparisons use the current game catalogue. AI replies may still be imperfect; if the model is slow, unavailable or its daily limit is reached, contextual reviewed dialogue is used. AI dialogue cannot execute gameplay or administrator commands. Window positions and visibility are saved with your pilot account, separately for desktop and mobile, and can be reset in Settings.
Messages are delivered to the selected global, faction, group or clan channel and filtered for common profanity. Whispers are delivered only to the sender and the selected online recipient. The separate in-game mailbox stores sender and recipient pilot identifiers, names, subject, message text, timestamps and read status within your world, so messages can be received while offline. Mail is accessible only to its sender and recipient through the game. Deleting a mail hides your copy; it does not remove the other participant’s copy. Records are retained for delivery and abuse prevention until removed through a verified deletion request. Whispers, mail, group and clan chat are never sent to the AI model. Public Global and Faction radio and direct AI conversations are processed as described above. Do not share private information in chat or mail. CrazyGames receives SDK events such as loading, gameplay and room status when you play through that platform. Its own privacy policy applies to its website and account services. This game does not load the CrazyGames SDK through the normal website or itch.io. itch.io operates its own page and hosting services under its own privacy policy.
Optional website and itch.io purchases use Stripe-hosted checkout. Card details are handled by Stripe; our server stores payment identifiers and entitlements needed to deliver purchases. Purchases and external payment redirects are disabled in the CrazyGames Basic Launch and Y8 entry points. Previously earned or acquired entitlements remain available.
The landing page displays a locally hosted trailer preview. Only when you press Play does it load the embedded YouTube player from youtube-nocookie.com. YouTube then receives technical connection data, including your IP address and our website origin, and processes playback under its own privacy policy. No account or registration data is passed to the player by our game.
Die Vorschau des Trailers liegt auf unserem Server. Erst beim Abspielen wird der eingebettete YouTube-Player über youtube-nocookie.com geladen. Dabei erhält YouTube technische Verbindungsdaten wie IP-Adresse und Website-Herkunft; für die Wiedergabe gilt die Datenschutzerklärung von Google. Das Spiel übermittelt dem Player keine Konto- oder Registrierungsdaten.
Invitation links contain a random referral code. If you register with a valid invitation, we permanently associate the new pilot with the recruiter in the same world. The recruiter can see your public pilot name, faction, level and referral milestones. We store the relationship and reward ledger with your account to grant rewards once and prevent duplicate payments. Referral codes are not login credentials. A pending invitation is kept in tab session storage for at most 24 hours and cleared after sign-in. Referral checks use existing account creation times, progression, reward timing and account restrictions; we do not create additional IP, device or browser-fingerprint records. Suspicious rewards may be held for administrator review, without automatically banning a shared network. Review reasons are cleared when a review is resolved; administrative decisions are logged. Reward notifications expire after 90 days; the reward history remains with the account. Verified account deletion removes referral links, codes, rewards and notifications involving that account; historical balances already earned by other pilots remain. Contact the operator for access, deletion or a reward review.
For questions, access, correction or deletion requests, contact florian.may@florim-studios.de with your pilot name and world. We may need to verify control of the pilot before changing account data. Never send passwords, session tokens or guest recovery credentials by email. Pilot progress remains stored until it is removed; payment records may need to be retained separately.
itch.io privacy policy · CrazyGames privacy policy · Cloudflare privacy policy · Stripe privacy policy
Bei einer erfolgreichen Registrierung über einen gekennzeichneten YouTube-Link speichern wir die Kampagne, den Kanal (Werbung oder normales Video), den Zeitpunkt und einen aus Welt und interner Piloten-ID abgeleiteten Hash. Ein späterer erfolgreicher Login oder Spielaufruf kann als Rückkehr erfasst werden. Zusätzlich zählen wir für diese Links pro Tag und Kanal die Formularanzeige, das Fokussieren eines Eingabefelds, den Beginn der Eingabe einschließlich Autofill, Eingabefehler nach Feldart, Absendeversuche, CAPTCHA-Status und das Verlassen der Seite vor dem Abschluss. Formularinhalte werden dabei nicht übertragen. Das Verlassen der Seite ist nur ein möglicher Abbruch; es beweist nicht, dass jemand dauerhaft aufgibt.
Für zugeordnete Piloten speichern wir außerdem einmalig je Meilenstein den ersten bestätigten Zeitpunkt: spielbereiter Einstieg, Trainingsbeginn und -abschluss, erster regulärer Abschuss, abgeschlossener Auftrag und eingebaute bessere Ausrüstung. Der spielbereite Einstieg ist eine Meldung des Browsers mit bestätigter Anmeldung; die übrigen Meilensteine werden gegen den Spielstand auf dem Server geprüft. Zeitpunkte bedeuten erste Messung seit Einführung, nicht zwingend den ursprünglichen Spielzeitpunkt.
Die Messdaten werden nach 90 Tagen gelöscht. Nur Spieladministratoren sehen die zusammengefassten Ergebnisse. Wir setzen dafür keine zusätzlichen Cookies oder Browserkennungen und übermitteln keine Registrierungsdaten an Google. E-Mail-Adressen, Pilotenname, Passwörter, IP-Adressen und Google-Klickkennungen werden in diesen Messdatensätzen nicht gespeichert. Die Zuordnung benötigt die eigene Kampagnenadresse im Browser; beim Klick auf unser Logo bleibt diese erhalten. Bei Auskunfts-, Widerspruchs- oder Löschanfragen bitte Pilotenname und Welt an den oben genannten Kontakt senden.
Successful registrations from tagged YouTube links are associated with the campaign, paid or organic medium, registration time and a hash derived from world and internal pilot ID. Later successful sign-ins or authenticated game loads may count as a return. We also keep daily aggregate counts of form views, input focus, input starts including autofill, validation errors by field type, submission attempts, CAPTCHA outcomes and page exits before completion. No form contents are transmitted with these events. Exits indicate potential abandonment, not a confirmed lost player. Records expire after 90 days; only administrators receive aggregate reports. No additional tracking cookies, browser identifiers, email addresses, callsigns, passwords, IP addresses or Google click IDs are stored for this measurement, and no registration events are sent to Google. Attribution requires the same-site campaign URL, which our logo link preserves. Contact the operator above for access, objection or deletion requests, identifying your pilot and world.
For attributed pilots, we also record the first observed time per milestone: playable entry, training start and completion, regular kill, completed mission and equipped upgrade. Playable entry is client-reported with authenticated access; other milestones are checked against the server game state. Timestamps denote first observation since measurement began. The same 90-day retention and access restrictions apply.
Seit 22. Oktober zählen wir außerdem den betriebsbereiten Einstieg, die bereiten beziehungsweise sichtbar gewordenen Eingabefelder, grobe Zeitklassen (unter einer Sekunde, ein bis drei Sekunden, ab drei Sekunden), langsame oder fehlgeschlagene Sitzungsabfragen sowie Beginn, Fortschritt und Ende des lokalen Gast-Übungsflugs. Die Bildschirmbreite wird ausschließlich als klein, mittel oder groß übermittelt, ohne exakte Maße oder Browserkennung. Diese Klassen beschreiben die Ansicht, nicht ein sicher erkanntes Gerät. Gast-Ereignisse sind unbestätigte Browsermeldungen und keine Registrierungen oder serverseitigen Trainingsabschlüsse. Der Übungsstand wird funktional in diesem Browser gespeichert, ohne eine zusätzliche Besucherkennung zu vergeben. Er enthält keine Zugangsdaten. Bei der Registrierung wird ein erfolgreich absolvierter Gastflug als lokale Einstiegseinstellung verwendet; serverseitig bleibt ein übersprungenes Training von einem bestätigten Trainingsabschluss unterscheidbar.
Since October 22 we also count interactive entry, ready or visible form fields, coarse timing buckets (below one second, one to three seconds, at least three seconds), slow or failed session checks, and local guest-practice stages. Viewport size is sent only as small, medium or large, without exact dimensions or browser identifiers; it does not identify actual hardware. Guest events are unverified browser reports, not accounts or server-confirmed training. Practice progress is functionally saved in this browser without a visitor identifier or credentials. Completed practice may skip the optional server academy after registration; this is distinct from verified academy completion. The same aggregate reporting and 90-day retention apply.
Zusätzlich erfassen wir zusammengefasst, ob der Gast-Startknopf überwiegend sichtbar war, ob er angeklickt wurde, ob das erste Übungsbild gezeichnet wurde und ob das Laden fehlschlug, zu lange dauerte, erneut versucht oder vorzeitig verlassen wurde. Diese Ereignisse zählen je Seitenaufruf höchstens einmal und enthalten keine Formularinhalte oder individuelle Besucherkennung.
We additionally count whether the guest-start button was mostly visible, whether it was clicked, whether the first practice frame was drawn, and loading failures, timeouts, retries or exits before loading completed. Each event is counted at most once per document, without form contents or an individual visitor identifier.
Auch die deutsche und englische DarkOrbit-Alternative-Seite verwendet diese bestehende Messung: Seitenaufrufe und CTA-Klicks werden nach Seitensprache gezählt. Beim Spieleinstieg bleiben nur feste Kampagnenwerte (seo / landing / darkorbit_de oder darkorbit_en) erhalten. Wir speichern keine Suchbegriffe, fremden Referrer, beliebigen UTM-Werte oder Besucherkennung. Bestätigte Registrierungen und Spielstarts werden wie oben beschrieben zugeordnet; Löschfristen und Zugriffsregeln bleiben gleich. Seitenaufrufe sind keine eindeutigen Personen und beweisen keine Herkunft aus Google.
The German and English DarkOrbit alternative pages use the same measurement: page views and CTA clicks are counted by page language. Entry links carry only fixed campaign values. We do not store search terms, external referrers, arbitrary UTM values or visitor identifiers. Confirmed registrations and game starts follow the attribution, access and retention rules above. Page views are not unique visitors and do not prove traffic came from Google.