Legal

Privacy

Last updated 25 October 2026

This page says what this website, spacewars.com, collects about you and what it does with it. It covers the website only. The game itself (on Steam) and your game account are covered by the Steam Subscriber Agreement, Valve's Privacy Policy, and the end user licence agreement shown on the Space Wars store page.

Who runs this site

The website is operated by ToHeroes Game Studios LLC, which is the controller of the data described on this page. For privacy requests, use the contact page and choose the topic "Privacy". We do not publish a postal address.

What we collect

The contact form. If you send us a message we receive the name, email address, topic and message you type. They are emailed to our team and we use them only to answer you. The form is protected by Cloudflare Turnstile, a bot check: your browser sends Cloudflare a token, and our server sends that token and your IP address to Cloudflare to confirm it is valid. The server also uses your IP address to limit how many messages one address can send per hour (the count is kept in memory only and is lost when the service restarts), and the service's log notes the IP address when a message is sent or rejected.

Server logs. Like any web server, ours keeps an access log of each request: the time, the address you asked for, your IP address, your browser's user-agent text and the response. We use it to keep the site running and to deal with abuse.

Things your browser stores for the site. The site sets no cookies of its own. Some pages keep small items in your browser's local storage on your own device, and they are not sent to us: your sound on/off choice, a hint you have already seen on the home page, and your Ship Forge drafts. You can clear all of it in your browser settings.

The game's servers. This website does not contact the game's servers. There is no sign-in and no saving of ships on the public site; Ship Forge works only on your own device.

Visit statistics. We use Cloudflare Web Analytics to see how many people visit the site and which pages they use. Cloudflare adds a small script to our pages that reports each page view to Cloudflare: the page address, the page that linked to it, your browser and device type, your country, and how quickly the page loaded. It sets no cookies and does not use your browser's storage, and we see only totals, not individual visitors.

What we do not do

The website has no advertising and no other analytics or tracking scripts, and it does not sell your data.

Other companies' content on our pages

Loading content from another company's server tells that company your IP address and that you visited the page. These are the ones our pages use today:

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com): the typefaces on every page.
  • YouTube (Google): loads only when you press Watch trailer on the home page, or play the trailer on the Press page or a video in a news post (news videos use YouTube's privacy-enhanced domain). The background video on the home page (muted until you press its sound button) is served from our own media host, media.spacewars.com on Cloudflare, so it does not contact YouTube. YouTube may set its own cookies when its player loads.
  • Steam (Valve): the Steam links take you to Steam. The site itself loads no images or scripts from Steam.
  • Cloudflare: Turnstile on the contact page, Web Analytics on every page (see "Visit statistics" above), and media.spacewars.com (the home page background video). Cloudflare also carries all traffic to the site.

Links to Steam, YouTube, Facebook, X and Steam Community lead to sites with their own policies; we do not control them.

How long we keep things

  • Contact messages: kept for up to 12 months after our last reply, then deleted.
  • Server access logs: kept for up to 30 days, then deleted.
  • Contact service logs: kept for up to 30 days, then deleted.

Your choices and rights

You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it, by writing through the contact page. We will answer within one month.

If you are in the EU, the EEA or the UK. The legal bases for what we do are these:

  • Answering your message: our legitimate interests, or steps you asked us to take.
  • Access logs, abuse limits and Turnstile: our legitimate interests in keeping the site secure and running.
  • Visit statistics: our legitimate interests. The statistics are cookieless and we see totals only.

You may also ask us to restrict how we use your data, or ask for a copy of it. You can complain to your local data protection authority.

If you are in California. We do not sell or share personal information as the CCPA and CPRA define those terms. You will not be treated differently for using your rights.

Where data is handled. Our providers may handle data in the US and elsewhere. They are Cloudflare, Google Fonts, YouTube and our email provider.

Children

The site is not aimed at children under 13 (under 16 in the EU, the EEA and the UK), and we do not knowingly collect their data. If you are a parent and think your child sent us a message, ask us through the contact page and we will delete it.

Changes

If we change what the site does with your data we will update this page and its date.