Privacy — Fill the Sky

Before you press Send, the panel lists every part and its exact size, and shows you any text you yourself have typed into the game that a report would carry — the names you gave power grids and shipping routes — so you can read it before it goes. Two parts are optional and you can switch either one off:

• Your message — whatever you type in the box.
• A snapshot of your world (optional) — a copy of the factory you have built, so the problem can be reproduced. It is taken from memory rather than from your save files, so it carries no save name and nothing linking it to your saved games.
• Session statistics (optional) — the same numbers described below.
• Which build you are running, and how far into the game the world is.

When a report arrives you get a short reference code back. It is yours to use if you want to — quoting it lets us find your exact report. Nothing links it to you unless you choose to share it.

There is no background uploader, no retry queue, and nothing is saved up to send later. If an upload fails, it fails and stops — the game does not try again on your next launch.

Numbers about the factory and about how the session went — never anything you wrote. Specifically: which recipes ran and for how long, which machines were starved or stalled, how long the session lasted in game-time and in real time, how much of that was spent paused or in menus, gaps where nothing was being built, and what you could and could not afford at the time.

It also carries two facts about your computer, because performance problems cannot be diagnosed without them: your graphics adapter's name and the quality preset the game was running at.

What it does not carry: your name, your files, your saved games, your messages, or anything you have typed. That is enforced by an automated check in the game's own test suite, which fails the build if a field that could hold text you wrote is ever added to this file.

Each installation generates a random id — something like K7QM-2XPD. It is attached to what you upload so that several uploads from one installation can be read together. Without it, every upload would be an unconnected fragment and questions like did people get stuck at the same point? could not be answered at all.

What it is: a random string, generated on your machine, stored in your settings file on your machine. What it is not: your name, your account, an advertising identifier, or anything shared with anyone else. It is not used to recognise you anywhere outside this game.

You can see it in Settings ▸ Privacy, and there is a Reset button beside it. Resetting generates a new id immediately, so nothing you do afterwards is connected to anything you did before. It does not reach backwards — uploads already sent keep the id they were sent with, and are deleted on the same 30-day clock as everything else.

Because the id lives in your settings file, it survives reinstalling the game, and it does not survive deleting or resetting your settings — either of those generates a new one, exactly as the Reset button does.

Three sentences, and the third is the one that makes the other two honest:

• Uploads are deleted 30 days after they arrive. This is an automatic expiry rule on the storage itself, not a promise somebody has to remember to keep.
• Working copies downloaded for analysis are deleted when the playtest ends.
• Conclusions drawn from them are kept. "Players stall at the first harbour" or "this crash happens when a dock is deleted mid-delivery" outlive the data they came from — they are observations about the game, not about a person.

There is no account to close and no profile to delete, because none is created. Reset is the control this page offers, and expiry does the rest.

Uploads are received and stored by Cloudflare, acting as our service provider. Two different things happen in two different places, and it would be inaccurate to describe them as one:

• Receiving your upload happens at whichever Cloudflare location is nearest you at the time. This cannot be pinned to a region, and we do not claim it can be.
• Storing it happens in the European Union. The storage is created under a restriction that keeps the stored files there.

Your IP address

Saying "we never see your IP address" would be false, so this page does not say it. Connecting to any server on the internet means that server sees the address you connected from — that is how a connection works, not a choice we made. What we do with it is the part we control:

• Your address is kept for a few seconds in a counter, purely to stop one source flooding the endpoint with junk.
• It is never written to a log, never stored durably, and never attached to your report or your statistics. There is no field in either upload that holds it.

The game also identifies itself when it connects, in the ordinary way any program does. That identification includes the game engine and its version, and which operating system family the build is for — it does not include anything about you or your specific machine.

Automated analysis

We may use automated tools, including AI assistants, to help read and summarise reports. This means the contents of a report — including a message you typed — may be processed by a third-party AI provider for that purpose.

• Your name, email address, or any account identifier — none is ever asked for.
• Your saved games, screenshots, blueprints or any other file on your computer. Uploads are built in memory from the running game; nothing reads your folders.
• Anything while you play, by anything running in the background. The game contains no analytics service, no advertising code and no third-party tracking of any kind. It talks to exactly one address, only at the moments described above.
• Payment details. Nothing here handles them.

One thing worth being precise about

The game does keep a record of your session as you play — that is the file described above — and it writes it to your own computer whether or not you agreed to send anything. Saying otherwise would be untrue, so this page says it plainly instead.

What your answer controls is whether that file ever leaves. If you did not say yes, it stays on your disk, is never uploaded, and is deleted by the game itself as newer ones replace it. You can delete the folder at any time and the game will carry on without it.

Two things run by other people

Steam. The game has no Steam integration of its own and sends Valve nothing. Steam itself, as the platform you launched the game from, collects its own data under Valve's privacy policy. Playtime and similar figures come from there and reach us only as totals, with no way to trace one to a person.

A feedback survey. If a build offers a Give feedback link, it opens in your browser and the form is run by a third party under their own privacy policy. The game itself sends nothing to it — it only opens the page.

Legal basis and your rights

Where the GDPR applies, our basis for processing is consent — the report you press Send on, or the session-statistics question you answered yes to. You can withdraw it at any time in Settings ▸ Privacy, which stops all future uploads immediately.

The data controller is Orbital Entry Studios. If you have a question about anything on this page, write to orbitalentrystudios@gmail.com.

Changes

If this page changes in a way that affects what is collected, the change ships with a build, and we will ask the consent question again rather than treat your earlier answer as covering something new.