This Privacy Policy explains how Beyond Orbit LLC ("we", "us") collects, uses and shares information when you play Beyond Orbit (the "Game"), use the Windows desktop application, or visit beyondmmo.com (together, the "Service").
1. What we collect
Steam account. You sign in to the Game with your Steam account. Steam tells us your Steam ID and whether Steam has placed a VAC or game ban on the account. We do not receive your Steam password, your email address or your payment details. Your Steam display name is not shown to other players; in the Game, other players see only your character names.
Gameplay data. Characters, levels, inventory, currency balances, missions, friends, guild membership, chat messages, in-game mail, reports you send or receive, and the other actions you take in the Game. We need this to run the Game.
Purchase records. If you buy in-game currency, Steam processes the payment. Steam tells us what was bought, the transaction ID and whether it was later refunded or charged back. We never see your card or bank details.
Device data (desktop application). When you sign in, the desktop application sends a set of hardware identifiers: the Windows MachineGuid, BIOS UUID, motherboard serial, system disk serial, CPU ID and physical MAC addresses, combined into a device fingerprint. This device-identification process collects only those identifiers. It does not inspect your installed software, running processes, personal files or screenshots.
Connection data. Your IP address, and the country, region and network provider we derive from it using a MaxMind GeoLite2 database stored on our own servers. Your IP address is not sent to MaxMind or anyone else for this lookup.
Crash reports. The desktop application automatically sends a report when it encounters an application error, a renderer or graphics-process failure, or a desktop-host crash. A report may contain the time of the fault, an error message and stack trace, the application version, operating system, the application's page address, process-failure information, and recent runtime context such as entity counts and memory usage. If you turn on additional diagnostics in the settings, it may also include a short tail of recent console messages. Error messages, page addresses and console messages can contain account identifiers or other information from your session. Turning off additional diagnostics does not turn off automatic crash reports. If a report cannot be uploaded, the application may save it on your computer and retry at a later launch.
Bug reports and feedback. Anything you send through the in-game bug report or feedback forms, together with your character name and location in the Game.
Website. If you subscribe to our newsletter, your email address and the time you confirmed. If you contact support, what you send us. Our web server also records your IP address, browser user agent and the pages you request.
2. How we use it
- To run the Service: sign you in, keep your characters and items, deliver purchases, carry chat and mail, and answer support requests. Our lawful basis is performance of our contract with you.
- To protect the Service: detect cheating, fraud, real-money trading, harassment and ban evasion. We compare device fingerprints, IP information and Steam ban flags across accounts. A match flags an account for review by a member of our team; we do not automatically ban an account because of a device, network or Steam flag alone. Our lawful basis is our legitimate interest in protecting the Game and its players. We have weighed this against the limited intrusiveness of the data, none of which reveals anything about you outside the Game.
- To keep the Service working: diagnose crashes, bugs and performance problems. Our lawful basis is our legitimate interest in a reliable Service.
- To send the newsletter, only if you subscribed and confirmed. Our lawful basis is your consent, which you can withdraw at any time through the unsubscribe link in every newsletter email.
- To meet legal obligations, such as tax records and lawful requests from authorities.
We do not sell or share your personal information for advertising, show third-party behavioural ads, or profile you for anything unrelated to running the Game.
3. Who we share it with
We use service providers to help run the Service, such as hosting and email. They get only what they need to do that work, and we do not allow them to use your data for their own purposes. Sign-in and purchases go through Steam, which handles your Steam account under the Steam Privacy Policy.
If your guild connects its chat to a Discord server, guild chat messages are relayed to that Discord channel.
Other players see what you choose to show in the Game: your character names, guild, chat messages and mail.
4. Cookies
The website uses a session cookie and a security (CSRF) cookie. Both are strictly necessary. We do not use analytics cookies, advertising cookies or third-party tracking pixels.
5. How long we keep it
| Data | How long |
|---|---|
| Account, characters and gameplay data | While your account exists |
| Chat messages | 90 days (messages attached to an open report are kept until the report is closed) |
| In-game mail | 60 days for letters, 14 days for parcels |
| Login history | 30 days |
| Transaction and suspicious-activity logs | 90 days |
| Item and character-stat history (anti-cheat) | 180 days |
| Device fingerprints and IP records | 24 months after your most recent login, then deleted automatically |
| Routine crash reports | 30 days after receipt |
| Purchase records | Up to 7 years, for tax and accounting |
| Support messages | Up to 3 years |
| Newsletter consent record | While you are subscribed, and 3 years after you unsubscribe |
When a crash report or log is needed for a particular security investigation, dispute or unresolved fault, we may keep the relevant extract for longer. We review retained investigation extracts at least every 90 days and delete or anonymise them when they are no longer needed, unless the law requires us to keep them.
A deleted character's name stays reserved for 45 days before anyone can take it.
6. Your rights
Depending on where you live, you may have the right to:
- get a copy of the personal data we hold about you;
- correct inaccurate data;
- have your account and personal data deleted (we may keep anonymised gameplay records, and records we must keep by law);
- object to or restrict some processing;
- withdraw consent to the newsletter at any time;
- complain to your local data protection authority.
To use any of these rights, email [email protected] from any address and tell us your Steam ID or character name so we can find your account. We will answer within the time the law requires (usually one month). Deleting your Steam account is handled by Valve; deleting your Beyond Orbit data is handled by us.
7. International transfers
Our servers are in the United States. If you use the Service from another country, your data is transferred to the United States. Where the law requires it, we rely on Standard Contractual Clauses or an equivalent safeguard.
8. Children
The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 is playing, contact us and we will delete the account.
9. Changes
We will post changes on this page and, for material changes, tell players in the Game before the change takes effect.
10. Contact
Beyond Orbit LLC Email: [email protected]
11. Attributions
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.