Freightfall
Privacy Policy
Last updated 6 October 2026
Freightfall is a browser-based multiplayer game operated by OGRE Software AB. Its public information site is freightfall.app, and the playable game is at play.freightfall.app. OGRE Software AB is the data controller for the information described here. This page explains what the game collects, why, and how to get rid of it. It is short because the game collects very little.
What we collect
Google sign-in. When you sign in with Google, Google gives us the basic profile information covered by the standard sign-in scopes: your email address, name, profile picture and Google account ID. We use the account ID to recognise you when you come back, and your email address to reach you about your account if we ever need to. Your name and picture are not shown in the game — every pilot gets a generated callsign such as PILOT-4A9C2 instead. We never see your Google password.
Game data. Everything your account does in the game world: callsign, credit balance, stations, ships, cargo, inventory, position and the timestamps attached to them. This is your save file — the game cannot work without it.
Subscriptions. Stripe collects your billing name, address and payment details when you subscribe to Premium or manage a subscription. We store your account's Stripe customer, Checkout and subscription identifiers, payment status, paid service period and retry records to deliver your Starpass, prevent duplicate purchases and handle billing support. Your card details are entered directly with Stripe; they are not stored by Freightfall.
Technical data. Our web and game servers keep ordinary request logs containing your IP address, the time of the request and your browser's user-agent string. We use them to keep the service running and to investigate abuse and attacks. They rotate automatically and are not kept longer than 30 days.
Storage in your browser. The game keeps sign-in and reconnection state, along with a few preferences and progress flags (graphics quality, audio levels, and whether you have seen introductory guidance), in your browser's own storage. Session credentials are sent to Supabase and the Freightfall game server when needed to authenticate or reconnect you. Preferences and progress flags remain on your device until you change or clear them. These are not advertising or tracking cookies, and you can clear them through your browser settings.
If you play as a guest, no account is created. Guest progress lives only in the running game session and is never written to our database.
Friends and communications. Registered pilots have a public friend code and callsign. We store friend requests, accepted friendships, mute preferences and your private-message setting. We store chat text and its sender, recipient (for private messages) and timestamps to deliver messages and let you resume recent conversations. Private read watermarks support unread counts; they are not shared read receipts. Chat text and drafts are held only in memory in your browser, not saved as a permanent browser history.
Guilds. We store guild names, tags, descriptions and emblems, membership and roles, invitations, leadership offers, founding history and action timestamps. Guild messages store their text, sender, guild and expiry. Command retry records store fingerprints and outcomes without copying message text, so actions can be recovered without applying them twice.
What we don't do
No advertising. No analytics, tracking pixels or third-party trackers of any kind. No profiling and no automated decisions about you. We do not sell, rent or trade your data, and we never will.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only to sign you in and run your account.
Who else sees it
- Supabase — handles authentication and stores account and game data.
- OVH — hosts the website and game server, and therefore processes connection traffic including your IP address.
- Stripe — processes Premium payments, billing and subscription management. See Stripe's privacy policy for its processing, including fraud prevention and legal obligations.
These providers process information to deliver their services under their applicable contracts. Other players see the game information you share with them: your public pilot identity, public chat, and private messages when they are a participant. Registered players can see guild profiles and rosters, including callsigns, roles and join dates. Guild affiliation appears on disclosed ships and stations; it reveals no private location. Guild conversation history is available only to current members, including unexpired messages sent before they joined. Accepted friends can see whether you are online, subject to mute preferences; this does not share your private location. Your mute list and private-message read watermarks are not shared. We otherwise disclose data only as needed to provide the service or when legally required.
Security
Traffic between your browser and our servers is encrypted with TLS (HTTPS and WSS). Account and game data are protected by authenticated server access and database permissions. Private messages are available only to their participants through the game server, and guild chat only to current members. Public chat is intended for other players. These controls do not make chat end-to-end encrypted.
Keeping and deleting your data
We keep your account data for as long as your account exists. Email contact@ogre.se to have it deleted and we will erase your profile, stations, ships, cargo and associated social data along with your sign-in record within 30 days.
Billing records support the subscription while it exists. Account erasure requires us to resolve active subscriptions and uncertain payments first. Financial records may be retained where accounting, tax or other legal obligations require it; Stripe's own retention obligations also apply.
Global chat expires from game history after 24 hours. Private messages expire after 30 days, including unread messages. Each message keeps its original expiry even when a conversation continues. Pending friend requests expire after 14 days. Automatic cleanup removes expired messages; expired text is excluded from history even if cleanup is delayed. Social retry records contain no message text and expire after 31 days. Friendships and mute preferences remain until changed or the account is deleted. Database backups may retain earlier copies until their separate retention window ends; deletion from game history is not instantaneous erasure from every backup.
Guild message bodies expire from history after 30 days and are removed by automatic cleanup; a delayed cleanup does not extend their visibility. Guild and founding records and command retry records have no automatic message-expiry deadline and can remain after disbanding. An explicit progression reset clears guild data, including these records.
Account deletion removes your guild membership and your own command retry records and removes direct account links from founder, founding history and guild-message records. The community can continue with leadership transferred when needed. Unexpired guild messages can remain until their original expiry, shown as “Former pilot” with a pseudonymous code.
You can also revoke Freightfall's access from your Google Account's security settings at any time. That stops future sign-ins but does not by itself delete what we have already stored, so email us as well if you want it gone.
Legal bases and international processing
We process account and game data because it is necessary to provide the game and your saved operation and any Premium subscription you request. We process security and request logs for our legitimate interests in operating a reliable service and preventing abuse. We process deletion and legal requests when needed to comply with applicable law.
Supabase, Stripe and their subprocessors may process account or billing data outside your country. Where the GDPR or UK GDPR applies to an international transfer, we rely on the safeguards made available by those providers, including standard contractual clauses where applicable.
Your rights
You can ask for access to or a copy of the data we hold about you, ask us to correct or delete it, and, where applicable, ask us to restrict processing, object to processing, or provide portable data — email contact@ogre.se. If you are in the EEA or the UK, the GDPR or UK GDPR provides these rights. You may also complain to your national data protection authority.
Children
Freightfall is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.
Changes
If the game starts collecting something new, we will update this page and change the date at the top. We will announce significant changes in-game before they take effect.