[HRST-LEGAL // PERSONNEL DATA HANDLING]

PRIVACY POLICY

What information Citizen Synx collects, why we collect it, and how it is stored, shared, and protected.

▸ Section 1 — What We Collect

When you create an account and use the platform, we collect:

Account data: username, email, hashed password, optional display name, optional RSI handle.
Profile data: avatar, bio, timezone, availability, skills and other fields you choose to fill in.
Activity data: organisations joined, ships flown in tracked sessions, contracts created, messages posted within the platform.
Combat telemetry (optional): if you enable live tracking, kill / death events parsed from your local Star Citizen Game.log. Parsing happens on your device; only summary events are uploaded.
Technical data: minimal request logs (IP address, user agent, timestamps) for security and debugging.

▸ Section 2 — Why We Collect It

To operate the platform: authenticate you, sync your profile across devices, and deliver the features you use.
To enable multi-player features: org membership, fleet coordination, matchmaking, contracts.
To keep the platform secure: detect abuse, investigate reported incidents, prevent unauthorised access.
To improve the platform: aggregate, anonymous metrics on which features get used.

▸ Section 3 — Where Your Data Lives

Account credentials and profile data are stored on infrastructure operated by Firebase (Google Cloud) and Railway (Postgres). Both providers operate under their own privacy and security commitments. We do not sell your data, and we do not share it with third parties for advertising purposes.

▸ Section 4 — What You Can Control

Edit or remove most profile fields at any time from the profile editor.
Set your profile to hidden so other personnel cannot see your handle, ratings, or history.
Disable live combat tracking — telemetry uploads stop immediately and historical events can be deleted.
Request full account deletion by contacting us through the project's contact channel. We will remove your account and associated personal data within a reasonable period, except for limited records we are required to retain for security or legal reasons.

▸ Section 5 — Third-Party Services

Some platform features connect to external services on your behalf — for example, Discord linking, optional ARIA agent calls to language model providers, or live commodity pricing from community APIs. Data sent to these services is limited to what the feature needs and is governed by the provider's own privacy policy.

▸ Section 6 — Children

Citizen Synx is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided personal data to the platform, please contact us so we can remove it.

▸ Section 7 — Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the platform or via email when appropriate. The current version is always available at this URL.

◄ Return to Console