01Data controller
The controller of your personal data is Andrzej Andelbrat, trading as AllesKlar Service, Lönsweg 30, 21680 Stade, Germany.
For any matter concerning your data, write to allesklarservice.de@gmail.com. We also answer data deletion requests from this address.
We process data in accordance with the General Data Protection Regulation (GDPR). This policy applies to the game Star Manor, available in the browser at starmanor.live.
02A stronghold without an e-mail address
To play, you only need to enter a ruler name — a pseudonym that need not have anything to do with your real name. The game has no passwords and no login: your browser receives a random account key and keeps it in its storage. On the server we store only a cryptographic hash of that key — the key itself cannot be read back from it.
The server holds the state of your stronghold: buildings, resources, troops, battle reports, tribe membership and ranking results. This is game data tied to a pseudonym; without an e-mail address we do not know who you are.
03E-mail address (optional)
You can add an e-mail address in the game, under Shop → Account. It is used for three things:
- recovering your stronghold on a new device or after clearing your browser — we send a single-use link valid for 30 minutes;
- buying diamonds — purchases are possible only with a confirmed address, so that purchased diamonds are not lost together with your browser data; we send the purchase confirmation to this address;
- raid alerts — an e-mail when someone marches on your stronghold or a horde is approaching while you are away from the game. You can turn them off in the game or with one click on the link in every such e-mail.
The address becomes active only after you click the confirmation link (valid for 24 hours). Together with the address we store: whether it has been confirmed, whether you want alerts, the language you play in (so that e-mails arrive in that language), the times of the most recent e-mails sent (to enforce limits), and cryptographic hashes of single-use links.
We never show your e-mail address to other players.
04What other players see
On the map and in the ranking other players see your ruler name, the location and power of your stronghold, your glory, titles, the Towers of Glory you hold and the tribe you belong to. In battle reports they see the opponent's name.
Tribe chat. A message you send in the tribe chat is visible to all members of that tribe and to the administrator — together with your ruler name and the time it was sent. Writing is voluntary: the whole game works without sending a single message. We store the content on the server so that the chat works and so that we can handle reports; we do not use it for anything else. The chat automatically rejects web addresses, e-mail addresses and phone numbers. Please do not write anything there that should stay private.
Reports. When a tribe member reports a message, we record in the administrator's log: who reported it, whose message it was, its content and the time. This is used solely for moderation.
05Data on your device
In the browser's storage (localStorage) the game keeps:
- the account key — so that you can enter your stronghold without logging in;
- the chosen language and the sound setting;
- the number of the last tribe chat message you read — to show the new-message marker.
We do not use cookies, advertising, analytics tools or profiling. The game and this page contain no third-party scripts, fonts or other resources — everything loads from the game server. The only exception is the Stripe payment page, which you reach only after clicking a purchase button.
06Payments
The game is free and has no advertising. The optional purchase of diamonds is handled by Stripe Payments Europe Ltd. You enter your card details or other payment method on Stripe's page — we do not see or store them.
When a payment is started we pass to Stripe: your e-mail address (so that you do not have to type it again and so that the payment receipt reaches that address), the name and price of the pack, the language, and the internal identifier of the stronghold. From Stripe we receive confirmation of the payment and the payment session identifier. Stripe processes your data as a separate controller, under its own privacy policy available at stripe.com.
What we record about a purchase: which pack, when, for which stronghold, the amount, the currency, and the moment the consent to immediate delivery of the diamonds was ticked. No card details and no address. We need this for tax accounting and for handling complaints — for example if the diamonds do not appear in the stronghold.
07E-mail
The game server sends e-mails in only four situations: address confirmation, the stronghold recovery link, purchase confirmation and — unless you turn them off — raid alerts (at most one every three hours and four a day). We use our own mail server for this — your address is not passed to external mailing services. We do not send newsletters or offers.
To send an alert only when it is needed, the server remembers the time of your last activity in the game. This information exists only in the server's working memory and is not saved.
08Server logs
Like every web server, ours records basic information about requests: IP address, time, request path and errors. The IP address is also used — only in the server's working memory — to limit the number of requests and e-mails sent. We use this data solely for security: to detect abuse and diagnose failures. We do not link it to a player's stronghold for other purposes.
We keep logs for a short time — up to 30 days — after which they are deleted.
09Where the data is kept
The game server and the mail server are located in Poland, in a data centre of cyber_Folks S.A. of Poznań. Stronghold data, e-mail addresses, the chat and logs do not leave the European Economic Area.
The only exception is payment processing by Stripe, described in section 06 — that provider operates under its own rules and is itself responsible for any transfer of data outside the EEA.
10Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running the stronghold and taking part in the game world, including the tribe chat | ruler name, hash of the account key, stronghold state, chat messages | Art. 6(1)(b) — performance of a contract (providing the game service) |
| Stronghold recovery and raid alerts (features the player turns on and can turn off) | e-mail address, language, alert setting, hashes of single-use links | Art. 6(1)(b) — performance of a contract |
| Carrying out purchases and adding diamonds to the stronghold | e-mail address, pack, amount, date, payment confirmation, moment of consent | Art. 6(1)(b) — performance of a contract |
| Chat moderation, security, preventing multi-accounting and abuse | message reports, IP address, server logs | Art. 6(1)(f) — legitimate interest of the controller |
| Tax and accounting records of purchases | purchase data: what, when, for which stronghold, amount | Art. 6(1)(c) — legal obligation |
We do not make automated decisions about you that produce legal effects, and we do not profile players. The chat filter works automatically, but it only rejects or hides individual messages.
11How long we keep data
- The stronghold (ruler name, key hash, game state) — for as long as the game world exists or until the stronghold is deleted at your request. During the test phase the world may be reset; all strongholds then disappear.
- The e-mail address and its settings — until you remove the address in the game or ask for your data to be deleted. We delete them at once.
- Hashes of single-use links — until the link is used or expires (30 minutes, 24 hours, and 30 days for the alert unsubscribe link).
- Tribe chat messages — the last 100 messages of a tribe. Older ones are deleted automatically as new ones arrive, and all of them disappear when the tribe ceases to exist.
- Message reports — until they have been handled, and no longer than 12 months.
- Purchase records — to the extent required by tax law, for up to 10 years, also after the stronghold is deleted.
- Server logs — up to 30 days.
- Data on your device (localStorage) — until you clear it yourself.
12Deleting your data
E-mail address — in the game, at once
Open the Shop tab and, in the Account card, choose "Remove address". The address, the alert settings and all links already sent cease to exist immediately. You can also turn off raid alerts without removing the address — with the switch in the same card or the link in the e-mail.
The stronghold and remaining data — by e-mail, within 14 days
Write to allesklarservice.de@gmail.com from the address confirmed in the game (this is how we check that it is you). If you have not added an e-mail address, include your ruler name and the account code copied from the game. We will delete the stronghold within 14 days and reply once it is done.
Battle reports held by other players and entries in the season chronicle keep your ruler name — a pseudonym that we no longer link to any other data. Tribe chat messages disappear at the latest when newer ones push them out. Purchase records remain only to the extent required by tax law.
Data on your device
You can delete the account key and settings by clearing the site data for starmanor.live in your browser. Note: without a confirmed e-mail address and without a saved account code you will then no longer be able to enter your stronghold.
13Your rights
Under the GDPR you have the right to:
- access your data and obtain a copy of it;
- rectification of inaccurate data;
- erasure of data (the "right to be forgotten");
- restriction of processing;
- portability of the data you have given us, in a readable format;
- object to processing based on our legitimate interest.
To exercise these rights, write to allesklarservice.de@gmail.com from the address confirmed in the game. We reply within one month at the latest.
You also have the right to lodge a complaint with a supervisory authority. In Germany, where the controller is established, this is the competent state data protection commissioner — for Lower Saxony: Die Landesbeauftragte für den Datenschutz Niedersachsen, Hanover. You may also contact the supervisory authority of the country where you live.
14Players' age
The game is not directed at children under 13 and we do not knowingly collect their data. If we learn that a stronghold is run by a person under that age, we will delete it. Purchases by minors require the consent of a parent or guardian. Parents and guardians can raise concerns at the contact address above.
15Changes to this policy
When something changes — for example a new feature is added or the test phase ends — we will publish a new version of this policy at the same address, with a new date at the top of the page. We will announce larger changes in the game.
This version applies from 2 October 2026.