Abitrium Privacy Policy

01 Age Requirement

Abitrium and the Services are intended only for persons who are at least 18 years old.

The Services do not currently request or store your date of birth and do not use age-estimation technology.

If we learn that a person under 18 has provided personal information through the Services in violation of our age requirements, we may restrict or terminate the account and take appropriate steps regarding the information.

02 Our Privacy Approach

Digital Octopus Group follows a data-minimization approach.

We collect information that is reasonably useful for purposes such as:

• creating and securing player accounts;
• authenticating players;
• operating multiplayer and online functionality;
• saving game state and progression;
• operating Abitrium’s virtual economy;
• administering testing programs;
• diagnosing technical problems;
• measuring game and system performance;
• balancing and improving gameplay;
• preventing cheating, abuse, and security threats;
• providing support;
• complying with legal obligations; and
• protecting Company systems, players, and intellectual property.

We do not collect personal information merely because it is technically possible to do so.

03 Information We Collect

A. Account and Authentication Information

Abitrium uses an internal account system operated by Digital Octopus Group.

When an account is created, we collect or generate information including:

• a username;
• a password;
• an internal player identifier;
• an internal user identifier; and
• an email address, if you choose to provide one.

Your email address is currently optional. We may use it for account identification, account recovery, and related account or support purposes.

We do not currently use player email addresses for newsletters or promotional marketing.

Passwords are transmitted to our servers using encrypted connections. We do not store your raw password in our server database. Passwords are processed using salted cryptographic hashing before the resulting password hash is stored.

On supported Apple devices, account credentials and authentication tokens may also be stored locally using the iOS Keychain.

Abitrium does not currently use Sign in with Apple, Game Center authentication, Google authentication, Facebook authentication, or another third-party identity provider.

B. Player Names and Game Profile Information

We collect information that you create or select as part of your Abitrium profile and game state.

This may include your username, ship names, crew names, crew callsigns, selected avatars, player level, experience points, fleet information, and other game-profile information.

Your username may be visible to other players, including on leaderboards and during multiplayer gameplay. Ship names and certain other gameplay information may also be visible to matched opponents.

Abitrium does not currently allow players to upload custom profile photos or images.

C. Gameplay and Game-State Information

We collect and maintain information necessary to operate, synchronize, save, and improve Abitrium.

This may include information about fleets and ships, ship configurations, equipped modules and components, ship health and durability, power routing and gameplay settings, crew rosters and attributes, inventory, progression, experience points, virtual currency balances, virtual-item transactions, crate and reward information, battle participation, tactical commands, movement and positioning, weapon activity, damage dealt or received, battle outcomes, matchmaking, leaderboard activity, test-campaign participation, and other information generated through gameplay.

We use this information to operate the game, maintain player progression, provide multiplayer functionality, balance gameplay, administer the virtual economy, investigate problems, and improve Abitrium.

D. Multiplayer Information

Abitrium uses server-mediated multiplayer services.

When you participate in multiplayer gameplay, certain information may be provided to the client of a matched opponent as necessary to operate the match. This may include your username, an internal player identifier, ship name, ship appearance or avatar, applicable combat or equipment information, in-game actions, movement, weapon activity, damage information, and match results.

Abitrium does not use peer-to-peer networking for its current multiplayer implementation, and your IP address is not intentionally disclosed to matched opponents.

E. Session and Usage Information

We collect operational information about game sessions and use of the Services, including session start and end times, playtime, heartbeat events, session status, session identifiers, game activity events, battle history, feature and gameplay activity, test-campaign progress, and virtual-economy activity.

We use this information for maintaining session state, operating player rewards, understanding game operation, troubleshooting, balancing gameplay, maintaining match history, testing, and improving Abitrium.

This is internal operational analytics. Abitrium does not currently use a third-party analytics SDK.

F. Device and Technical Information

The Services collect limited technical information about the device and software used to access Abitrium.

This may include platform, device family (such as iPhone or iPad), hardware model, operating-system version, Abitrium app version, Abitrium build number, and a client session identifier generated for the application session.

We use this information for compatibility, troubleshooting, performance analysis, session management, and game operation.

We do not currently collect the Apple advertising identifier (IDFA) or Apple Identifier for Vendor (IDFV) for Abitrium. We do not perform device fingerprinting.

G. Network and Server Information

When you connect to our Services, ordinary network information is necessarily processed.

Our Nginx web infrastructure records standard request information that may include IP address, timestamp, HTTP method, requested path, response status, and User-Agent information.

Raw IP addresses recorded in these web-server logs are currently retained for approximately 7 days through automated log rotation.

Our application-level logs may include an internal player identifier, route information, response information, timestamps, and a masked IP address. Raw IP addresses are not stored in our player database.

We do not currently use IP addresses to determine your geographic location, and we do not use an IP-based geolocation provider.

H. Crash and Diagnostic Information

Abitrium does not currently use a third-party crash-reporting or performance-monitoring SDK.

Apple may provide crash and diagnostic information through TestFlight, App Store Connect, or related Apple diagnostic services when a user has enabled applicable diagnostic sharing with Apple.

Information made available through Apple may include crash stack traces, operating-system version, hardware model, crash timestamp, and technical crash-state information.

Abitrium also uses Apple’s local unified logging system for diagnostic purposes. Those local logs are not automatically transmitted to Digital Octopus Group by the Abitrium app.

Our server infrastructure maintains operational logs for troubleshooting and security. Server application logs are currently retained for approximately 7 days.

I. Support and Correspondence

If you contact Digital Octopus Group for support, legal matters, privacy requests, bug reports, or other inquiries, we may collect the information you voluntarily provide.

This may include your email address, your name (if provided), your username or player identifier, message contents, bug descriptions, screenshots or attachments, and other information you choose to provide.

Please do not send highly sensitive personal information unless it is reasonably necessary for the issue you are contacting us about.

04 Information We Do Not Currently Collect

Abitrium does not currently intentionally collect through the game application:

• precise GPS location
• approximate device location
• contacts or address-book information
• camera information
• photographs or photo-library content
• microphone recordings
• voice communications
• health or fitness information
• biometric information
• government identification numbers
• bank-account information
• payment-card numbers
• Apple Pay credentials
• advertising identifiers
• cross-app browsing information
• player-to-player private messages

Abitrium also does not currently provide player-to-player text chat, voice chat, direct messaging, social-media friend importing, or custom image uploads.

05 Information Stored on Your Device

Abitrium stores certain information locally on your Apple device.

The iOS Keychain may contain your Abitrium account password and your authentication token.

Other local application storage may contain information such as your user identifier, your username, locally configured player-profile slots, audio settings, application-environment settings, and temporary game caches.

These local records are used to operate the app and maintain your settings.

Abitrium does not currently synchronize these records through iCloud or CloudKit.

06 Virtual Currency and Game Economy

Abitrium currently uses virtual in-game currencies, including credits and store credits.

We may maintain information about virtual-currency balances, virtual-currency awards, virtual purchases and sales, inventory, marketplace transactions, crate rewards, reward history, and related economy activity.

These records are associated with your player account and are used to operate the game economy, maintain balances and inventory, provide rewards, investigate errors or abuse, and preserve transaction integrity.

If real-money purchases or subscriptions are added in the future, this Privacy Policy will be updated as appropriate before or when those practices begin.

07 Randomized Gameplay Rewards

Abitrium includes gameplay systems that may provide randomized virtual rewards, including battle-related crates or loot.

We may record information about a reward event, including the applicable player, battle or activity associated with the reward, reward time, virtual items awarded, applicable reward template, and related game information.

These rewards currently use gameplay activity or virtual in-game currency rather than real-money purchases.

08 How We Use Personal Information

We may use personal information to:

• create, authenticate, secure, and manage player accounts;
• operate Abitrium;
• save game state and progression;
• provide multiplayer and matchmaking functionality;
• administer fleets, crews, inventory, and virtual currency;
• provide and calculate rewards;
• maintain battle and gameplay history;
• administer pre-alpha, alpha, beta, and other testing programs;
• communicate with users;
• provide technical and customer support;
• investigate bug reports;
• diagnose crashes and technical problems;
• monitor performance and compatibility;
• understand use of game systems;
• balance and improve gameplay;
• detect cheating, abuse, fraud, security threats, and violations of our Terms;
• protect Company systems, users, and intellectual property;
• maintain appropriate business and security records;
• comply with applicable law and lawful legal process;
• establish, exercise, or defend legal claims; and
• carry out other purposes disclosed when information is collected.

We aim to use information only for purposes reasonably related to why it was collected.

09 Analytics, Advertising, and Tracking

Abitrium does not currently use third-party analytics SDKs.

We maintain our own operational session and gameplay information as described in this Privacy Policy.

Abitrium does not currently display third-party advertising, use advertising networks, use IDFA, perform cross-app or cross-website tracking, use retargeting pixels, use marketing-tracking SDKs, or use personal information for targeted or behavioral advertising.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising.

If these practices change in the future, we will update this Privacy Policy and implement applicable privacy or platform controls before or when required.

10 How We Disclose Information

Service Providers

We use service providers to operate Abitrium.

DigitalOcean provides cloud infrastructure used to host Abitrium’s backend services, databases, networking infrastructure, and server logs.

Information hosted through this infrastructure may include account information, gameplay information, game saves, session records, virtual-economy records, and related operational data.

Apple

Apple provides platform and distribution services including the App Store and TestFlight.

Apple may independently process information associated with app distribution, TestFlight participation, app installation, crash reporting, diagnostic sharing, and Apple platform operation.

During testing, Apple may make tester information and user-submitted TestFlight feedback available to Digital Octopus Group through App Store Connect.

Apple’s independent processing is governed by Apple’s own privacy practices.

Other Players

Limited profile and gameplay information may be disclosed to matched opponents as described in Section 3(D) where necessary to provide multiplayer functionality.

Legal, Security, and Business Purposes

We may disclose information where reasonably necessary to comply with applicable law, respond to lawful legal process, protect the rights, property, systems, or safety of Digital Octopus Group, our users, or others, investigate fraud, cheating, abuse, security incidents, or Terms violations, establish, exercise, or defend legal rights, or protect Company intellectual property.

If Digital Octopus Group becomes involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, relevant information may be disclosed to appropriate participants in the transaction subject to appropriate safeguards.

RazzleBot Game Studios is not a separate recipient of personal information because it is a studio and brand of Digital Octopus Group, LLC rather than a separate legal entity.

11 Artificial Intelligence Services

Digital Octopus Group currently uses Google’s Gemini API for certain backend game-development and operational purposes, including NPC-related analysis, game simulation, and generation of certain game dialogue materials.

The current implementation is designed to send simulation statistics, gameplay-system information, prompts, and similar non-player-specific material rather than player account information, credentials, or other player personal information.

If we later use an artificial-intelligence provider to process player personal information, we will update our disclosures as appropriate.

12 Data Retention

We retain information for periods appropriate to the reason it is maintained.

Account and Game-State Information

Player account records, game saves, fleets, crews, progression, inventory, virtual-currency information, and similar persistent gameplay information are generally retained while the account remains active or maintained in our systems.

Gameplay and Operational Records

Play-session records, activity events, economy records, battle history, and certain testing records are currently stored in our operational databases and may be retained for extended periods for game operation, player rewards, match history, economy integrity, testing, balancing, and analysis.

Battle Lobbies and Temporary Battle State

Temporary matchmaking and lobby information is generally removed through automated cleanup after it is no longer needed. Current battle-lobby cleanup generally occurs within approximately one hour.

Server Logs

Nginx access logs and server application logs are generally retained for approximately 7 days.

Support Correspondence

Support, privacy, legal, and other email correspondence may be retained as reasonably necessary to respond to the communication, maintain appropriate business records, resolve disputes, protect legal rights, or comply with applicable obligations. Support correspondence is not currently subject to an automatic deletion schedule.

Backups

Our databases may be included in operational backups or infrastructure snapshots.

Deletion from active systems may therefore not immediately remove information from existing backups. Information contained in backups may remain until the relevant backup or snapshot is overwritten, expires, or is otherwise removed through the ordinary backup-rotation process.

13 Account Deactivation and Deletion

Abitrium provides an in-app option currently labeled Delete Profile or Delete Player.

Under the current implementation, using that option removes locally stored Abitrium profile information and credentials from the device and disables the corresponding server-side player account.

To request complete deletion of your server-side Abitrium account and associated personal information, contact: legal@digitaloctopusgroup.com

We may take reasonable steps to verify that you are authorized to request deletion of the account.

When complete account deletion is processed, our systems are capable of deleting most account-linked information, including account records, authentication records, game saves, fleets, ships, modules, crews, inventory, virtual-economy records, session information, activity records, progression records, and testing records.

Account deletion is permanent and may result in loss of game progression, virtual currency, virtual items, fleet and crew information, settings, testing progress, and other account-associated data.

Certain information may remain after account deletion, such as raw web-server logs (not indexed by player identifier, expiring after ~7 days), existing backups, certain historical multiplayer battle records, and information retained for security, fraud prevention, legal compliance, dispute resolution, or enforcement of our agreements.

Where appropriate, we may delete, de-identify, or otherwise limit the use of retained information when it is no longer reasonably necessary.

14 Your Privacy Rights and Choices

Depending on where you live and which privacy laws apply to Digital Octopus Group and the particular processing activity, you may have rights concerning your personal information.

These may include rights to know whether we process personal information about you, request access to certain information, obtain a copy of certain information, request correction of inaccurate information, request deletion of certain information, object to or restrict certain processing, opt out of certain sales, sharing, targeted advertising, or profiling where applicable, withdraw consent where processing is based on consent, or appeal certain decisions regarding privacy requests where applicable.

We may need to verify your identity or authority before fulfilling certain requests. Information collected for verification will be used for that purpose.

Applicable privacy rights may be subject to legal exceptions. We will not unlawfully discriminate against you for exercising an applicable privacy right.

15 Texas Privacy Rights

Digital Octopus Group, LLC is organized in Texas.

Where the Texas Data Privacy and Security Act or another applicable Texas privacy law applies to a particular processing activity, Texas residents may have rights concerning access, correction, deletion, portability, and certain opt-outs.

A request may be submitted to: legal@digitaloctopusgroup.com

If applicable law gives you a right to appeal our decision concerning a privacy request, you may use the same email address and state that you are submitting a privacy appeal.

Digital Octopus Group may also respond to reasonable privacy requests voluntarily where practicable even when a particular statutory requirement does not apply.

16 California Privacy Rights

If the California Consumer Privacy Act, as amended (“CCPA”), applies to Digital Octopus Group and the relevant processing activity, California residents may have additional privacy rights.

Depending on applicability, these may include rights to know the categories or specific pieces of personal information collected, know the sources and purposes associated with that information, know categories of recipients, request deletion, request correction, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and receive non-discriminatory treatment for exercising applicable rights.

Digital Octopus Group does not currently sell personal information or share personal information for cross-context behavioral advertising.

California privacy requests may be submitted to: legal@digitaloctopusgroup.com

17 Testing Programs and TestFlight

Abitrium may be distributed through closed pre-alpha, alpha, beta, TestFlight, or other testing programs.

Testing may involve collection of tester identifiers, account information, gameplay activity, campaign participation, battle counts, device and software information, crash and diagnostic information, build information, and feedback.

Apple may provide Digital Octopus Group with TestFlight information through App Store Connect, including tester information, build information, crash reports, screenshots, and feedback that a tester chooses to submit through Apple’s tools.

Abitrium may also display a link to an external survey after certain testing milestones.

The Abitrium app does not itself collect or store answers submitted through an external survey. If you choose to follow an external survey link, the survey provider may process information according to the notices and privacy practices applicable to that survey.

Testing programs may also be governed by separate tester terms or additional privacy notices. Those documents should be read together with this Privacy Policy.

18 Security

We use administrative, technical, and organizational safeguards that we consider commercially reasonable and appropriate for the nature of the Services and the information we process.

Current safeguards include measures such as:

• encrypted HTTPS/TLS communications;
• cryptographic password hashing;
• iOS Keychain storage for local credentials;
• filtering of sensitive values from application logs;
• masking IP addresses in application-level logs;
• restricted infrastructure access; and
• access controls for internal administrative tools.

No internet service, application, network, or storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and should notify us if you believe your account or information has been compromised.

19 International Processing

Digital Octopus Group, LLC is based in Texas, United States.

Abitrium’s primary backend and database infrastructure is currently hosted in the United States through DigitalOcean.

Apple operates global infrastructure in connection with the App Store, TestFlight, distribution, and diagnostic services. Information processed independently by Apple may therefore be handled in locations outside the United States.

If you access the Services from another country, your information may be transferred to and processed in the United States or other locations used by applicable service providers.

Where applicable law requires additional safeguards for international processing or transfers, we will implement appropriate measures as required.

20 Third-Party Links and Services

The Services may contain links to websites, surveys, or services operated by third parties.

When you choose to leave Abitrium and interact directly with a third-party service, that third party may collect information under its own privacy policy and terms.

Digital Octopus Group is not responsible for a third party’s independent privacy practices merely because the Services provide a link to that third party.

21 Changes to This Privacy Policy

We may update this Privacy Policy as Abitrium develops, features change, service providers change, our information practices evolve, or legal and platform requirements change.

When we update the Privacy Policy, we will revise the Last Updated date above.

If a change materially affects how we collect, use, or disclose personal information, we will provide additional notice where required by applicable law.

Where applicable law requires consent to a new processing activity, we will request that consent as required.

22 Relationship to the Terms of Service

This Privacy Policy should be read together with the Abitrium Terms of Service and End User License Agreement.

This Privacy Policy describes how Digital Octopus Group handles personal information. The Terms of Service govern your use of Abitrium and the Services.

Separate testing terms or privacy disclosures may also apply to a particular testing program.

23 Contact Us

For privacy questions, requests, or concerns, contact: