Privacy
Constelia privacy policy
Last updated: October 23, 2026. The Spanish version prevails in case of discrepancy.
This policy explains which personal data the Constelia game (Android and iOS) processes, why, on what legal basis, for how long and what rights you have. It is written from what the app actually does and also covers this website.
1. Data controller
- Controller
- Víctor de Frutos (trading as Vertey)
- Tax ID (NIF)
- 47287107G
- Address
- [Domicilio: pendiente de completar]
- info@vertey.com · info@vertey.com
Write to that address for any privacy question, including to exercise your rights.
2. Data we process
| Category | Data | When |
|---|---|---|
| Account | Firebase Authentication user ID (the "ID" shown in your Profile). As a guest (anonymous sign-in), only that ID. With email: your email address (Firebase stores the password securely; we never see it). With Google or Apple: that account's identifier and the email the provider shares (Apple lets you hide it behind a relay address). | On sign-in. Email only if you choose that sign-in type. |
| Game profile | Pilot name (public on leaderboards), flag if you choose one, time-zone offset (for the Daily Expedition) and game preferences. | If you set them. |
| Progress and runs | Scores, Planetary Journey progress (sectors and moons), achievements, streaks, statistics and the move log of each run, which the server replays to verify the score. | When playing online. |
| Leaderboards | Pilot name, flag and score, visible to other players. | After runs that count. |
| Wallet and perks | Stardust (✦) balance, balance movements and active perks (No ads, Cosmos Pass) with their expiry. | While you have an account. |
| Purchases | Product and transaction IDs, date, subscription status and store country or currency, received through RevenueCat. We never receive your card or payment details: Google Play or the App Store charge you. | If you buy something. |
| Ads | Google AdMob processes your IP address, technical device data, ad interactions and, if you allow it, the advertising identifier (the advertising ID on Android; on iOS, the IDFA only if you accept Apple's tracking prompt). For rewarded ads we store the reward ID verified by Google. | When ads are shown, according to your consent. |
| Diagnostics and performance | Firebase Crashlytics (crash and error reports: model, OS, app version, installation ID), Firebase Performance Monitoring (load and network timings) and Google Analytics for Firebase (game usage events, app instance ID, device data and approximate location derived by Google from the IP). They do not include your email or name. | You can turn this off in Settings → "Diagnostics and performance". |
| Remote configuration | Firebase Remote Config uses an installation ID to download game parameters. | When the app opens. |
| Security | Firebase App Check verifies that requests come from the genuine app using Play Integrity (Android) or App Attest/DeviceCheck (iOS). | On every server call. |
| Notifications | If we ever offer reminders and you grant notification permission, Firebase Cloud Messaging creates a device token to deliver them. | Only with your permission. |
| Support | Whatever you send us by email (address, message, ID, order number). | If you contact us. |
| On your device only | Preferences (sound, music, haptics, language, reduce motion), ad frequency history and your consent choice. They do not leave the device except as described above. | While the app is installed. |
What we do not collect
- Precise location (GPS), contacts, photos, microphone or camera.
- Card or payment data.
- Your email, unless you choose email, Google or Apple sign-in, or write to us.
We do not sell your personal data.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the game: account, saved progress, runs, Daily Expedition, leaderboards, wallet and purchased perks. | Performance of a contract (Art. 6(1)(b) GDPR): the terms of use you accept when playing. |
| Verifying runs, preventing cheating and fraud in purchases and rewards, and protecting the backend (App Check). | Legitimate interest (Art. 6(1)(f)) in a fair and secure game. |
| Handling purchases, refunds and subscriptions. | Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). |
| Personalised ads and ad measurement. | Consent (Art. 6(1)(a)), collected through Google's consent platform (UMP) in the EEA, the UK and Switzerland. Without consent Google may serve non-personalised or limited ads. |
| Usage analytics (Google Analytics). | Consent (Art. 6(1)(a)), linked to the consent form through Google consent mode. |
| Crash and performance reports (Crashlytics, Performance). | Legitimate interest (Art. 6(1)(f)) in a working game. You can object by turning off "Diagnostics and performance". |
| Answering your questions and requests. | Legitimate interest (Art. 6(1)(f)) and, for data protection requests, legal obligation (Art. 6(1)(c)). |
| Notification reminders, if any. | Consent (system notification permission). |
Automated decisions. Run verification is automatic: a score that cannot be reproduced does not enter the leaderboard or is held for review. It has no legal effect on you; if you disagree, write to us and a person will review it.
4. Service providers and recipients
- Google (Firebase: Authentication, Cloud Firestore, Cloud Functions, App Check, Analytics, Crashlytics, Performance Monitoring, Remote Config and Cloud Messaging; Firebase Hosting for this website), as processor. Our Cloud Functions run in the europe-west1 region (Belgium). Firebase privacy.
- Google AdMob and its consent platform. For some advertising processing Google acts as an independent controller under its own terms. How Google uses data from partner apps.
- RevenueCat, Inc., to manage purchases and subscriptions; it receives your user ID and purchase data. RevenueCat privacy.
- Google Play and the App Store process payments as sellers, under their own policies.
- If you sign in with Google or Apple, that provider processes your data under its own policy.
- Other players see your pilot name, flag and scores on the leaderboards.
We only disclose data to authorities when the law requires it.
5. International transfers
Google and RevenueCat may process data outside the European Economic Area, notably in the United States. These transfers rely on the EU-US Data Privacy Framework where the company is certified and, otherwise, on the European Commission's standard contractual clauses.
6. Retention
| Data | Period |
|---|---|
| Account, profile, progress, wallet, perks and leaderboard entries | While you keep your account. Deleted when you delete it. |
| Detailed run log | Up to 7 days; deleted automatically. |
| Technical purchase and ad-reward records, and anti-fraud flags | On account deletion they are pseudonymised (your ID is replaced by a code that does not identify you directly) and kept as long as needed to avoid crediting a purchase twice, prevent fraud and handle claims, at most for the applicable statutory limitation periods. |
| Deleted-account marker | 90 days, pseudonymised, so that no in-flight process recreates your data. |
| Crashlytics reports | 90 days. |
| Google Analytics data | According to the Google Analytics data retention setting (2 months by default). |
| Performance Monitoring, Remote Config, App Check and Cloud Messaging | According to the periods Google sets for those services. |
| AdMob advertising data | According to Google's policy. |
| Support emails | As long as needed to handle your request and then for the statutory periods in which liabilities could arise. |
| Purchase records required by law | Kept by Google Play or Apple as sellers. |
7. Your rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time without affecting prior processing. Email info@vertey.com with your pilot name, the ID shown in your Profile and your sign-in type; writing from your account email makes it easier to identify you. We may ask for reasonable information to confirm the account is yours. We reply within one month, extendable by two months for complex requests (we would let you know).
If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the data protection authority of your country.
8. Your choices in the app
- Ad consent: Google's form appears when required and you can change your choice.
- Tracking on iOS: iPhone Settings → Privacy & Security → Tracking.
- Advertising ID on Android: system settings → Privacy → Ads.
- Diagnostics and analytics: Settings → "Diagnostics and performance".
- Notifications: system settings.
9. Deleting your account
In the app: Settings → Account → Delete account. Deletion is immediate. Deleting your account does not cancel an active subscription: cancel it in Google Play or the App Store. What is deleted, what is kept and how to request it without the app: account deletion policy.
10. Children
Constelia is not directed to children under 13 and we do not knowingly collect their data. In Spain, consent-based processing for children under 14 requires their parents' or guardians' consent. If you believe a child has given us data, contact us and we will delete it.
11. Security
Communications are encrypted (HTTPS). Balances, purchases and perks are written only by the server, and database rules prevent the app from changing them. Data access is limited to each account, and App Check helps block requests that do not come from the genuine app.
12. This website
This website uses no cookies, analytics, forms or third-party resources. Firebase Hosting (Google) processes your IP address and technical request data to serve the pages and protect the service.
13. Changes
If we change this policy we will update the date above and, for significant changes, notify you in the app.