PRIVACY POLICY

LAST UPDATED: MARCH 2026

1. Who We Are

FatRocket.io ("we", "us", "our") is a free-to-play multiplayer browser game operated by Pavel Pavlov, individual ("the Data Controller"). For questions about this policy or your data, contact us at .

2. What Data We Collect

We collect the minimum data necessary to provide the game:

• Pilot callsign and hull color — chosen by you on the registration screen, stored locally in your browser (localStorage) so you don't have to re-enter them.
• Music preference — your mute/unmute choice, stored in localStorage.
• Connection data — when you play, your browser establishes an encrypted WebSocket connection (WSS/TLS) to our server. We receive your IP address and basic request headers. These are held in server memory only for the duration of your game session and are not persisted to disk or any database.
• Gameplay data — in-game actions (thrust, turn, collisions) are processed in real time and not stored after the session ends.

We do not collect names, email addresses, phone numbers, payment information, or any other personal identifiers beyond what is listed above.

3. We Do Not Use Cookies for Tracking

We use browser localStorage solely to remember your callsign, color, and music preference. We do not use cookies, tracking pixels, analytics services, or advertising networks. No data is shared with third parties.

4. Legal Basis (GDPR, Art. 6)

For users in the European Economic Area (EEA), our legal basis for processing is:

• Legitimate interest (Art. 6(1)(f)) — processing connection data is necessary to provide the multiplayer game service and maintain server security.
• Consent — your callsign and color are voluntarily provided and stored only in your own browser. You can clear them at any time via your browser settings.

5. Data Retention

Connection data (IP address, session info) exists only in server memory during your active game session. Once you disconnect or the session ends, this data is gone. We do not write it to logs or databases. LocalStorage data persists in your browser until you clear it.

6. Your Rights

Depending on your location, you may have the following rights:

• GDPR (EU/EEA) — right of access, rectification, erasure, restriction, portability, and objection. Since we don't store personal data server-side beyond the active session, most of these are satisfied by default. You can clear your localStorage at any time.
• CCPA/CPRA (California) — right to know, delete, and opt out of sale. We do not sell personal information.
• LGPD (Brazil), APPI (Japan), PIPA (South Korea), PIPL (China) — similar access and deletion rights apply. Contact us if you have questions about exercising these rights.

7. Children's Privacy

FatRocket.io is a general-audience game. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). Since we collect no persistent personal data beyond what the player voluntarily types into localStorage, there is minimal risk. If you believe a child has provided data that concerns you, please contact us.

8. Data Security

All game traffic is transmitted over encrypted WebSocket connections (WSS/TLS). We do not store sensitive data on our servers.

9. International Transfers

Our game server may be hosted outside your country of residence. By playing, you acknowledge that transient connection data is processed on the server wherever it is located. Since no personal data is persisted, the practical impact of this transfer is minimal.

10. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top will reflect the most recent revision. Continued use of the game after changes constitutes acceptance.

11. Contact

For any privacy-related questions, data requests, or concerns:
Email: