Privacy Policy

Last updated: 2 August 2026 · Applies to wasteland.se and game.wasteland.se

TL;DR: Aftergrid is free to play and privacy-respecting. We collect only what is needed to run your account and keep the game fair — a username, an email address and a password. We use no advertising trackers, no analytics, and no tracking cookies. Your data is stored on our own server in the EU. You can request a copy or deletion of your data at any time.

1. Data Controller

The controller for the processing of personal data described in this policy is:

Aftergrid
wasteland.se
Email: privacy@wasteland.se
(If you operate this service on behalf of a legal entity, insert the registered company name, registration number and registered address here.)

2. What Data We Collect

When you create an account we collect only the following "account data":

Data	Why we need it	Legal basis (Art. 6 GDPR)
Username (callsign)	To identify you in-game and display your name to other players	Performance of the contract (Art. 6(1)(b))
Email address	To secure your account, allow login recovery, and send essential service messages	Performance of the contract (Art. 6(1)(b))
Password (stored as a one-way bcrypt hash)	To authenticate you. We never store plain-text passwords	Performance of the contract (Art. 6(1)(b))

While playing, we process the game data needed to run the game: your base location on the world map, resources, buildings, troops, research, chat messages, mail and combat results.

3. Third-Party Login (Google, Facebook, Apple)

You may choose to sign in with Google, Facebook or Apple. In that case the chosen provider sends us your email address and a provider-specific identifier. Your login with those providers is handled by their own systems and is subject to their privacy policies, not ours. We store the email address and identifier as your account data as described above.

3a. Bug Reports

The "Report a Bug" form sends your description (and, if you provide it, your in-game callsign) to the game operator's in-game mailbox. Bug reports may contain personal data you choose to include, such as your callsign or technical details. Reports are used solely to fix bugs and improve the game, and are handled under the same rules as your other account data. Please do not include information you are not comfortable sharing.

4. No Tracking, No Advertising

Good news: Aftergrid has no advertising trackers, no analytics scripts, and no third-party advertising. We do not sell your data. We do not build profiles of you for marketing.

We do not use cookies for tracking. To keep you signed in, your browser stores a session token locally on your device (localStorage). This is essential to the service and is never transmitted to third parties by us. Log files contain the IP address and user agent required to operate, secure and rate-limit the service, and are kept only as long as necessary.

5. Purposes of Processing

Operating the game: account creation, authentication, saving progress, chat, trading, PvP and clan features.
Security and abuse prevention: rate limiting, anti-cheat, and enforcement of the Terms of Service.
Legal compliance: responding to lawful requests and maintaining fair play records.

6. Where Your Data Is Stored & Retention

Your data is stored on servers owned and operated by this project (self-hosted Supabase) in a data centre in the European Union. Access is restricted to the operator. Third-party OAuth providers process your data only if and when you choose to log in with them, on their own infrastructure.

We keep your data for as long as your account is active. If you delete your account, your personal data is erased within 30 days. Aggregate, anonymised game statistics (e.g. faction balance) may be retained after deletion.

7. Your Rights (GDPR Articles 15–22)

You have the right to:

Access (Art. 15) — request a copy of your personal data.
Rectification (Art. 16) — correct inaccurate or incomplete data.
Erasure (Art. 17) — request deletion of your data ("right to be forgotten").
Restriction (Art. 18) — restrict how we process your data.
Data portability (Art. 20) — receive your data in a machine-readable format.
Object (Art. 21) — object to processing where we rely on legitimate interest.
Withdraw consent (Art. 7(3)) — at any time, where processing is based on consent.
Complain (Art. 77) — lodge a complaint with your local supervisory authority.

8. Contact & Data Requests

To exercise any of the above rights, or if you have questions about your data, contact us at privacy@wasteland.se. We respond within 30 days. For account deletion in-game, contact us from the email address registered to the account so we can verify ownership.

9. Children

Aftergrid is intended for players aged 16 and over, in line with the GDPR age of consent in the European Economic Area. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, contact privacy@wasteland.se and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered players by in-game mail or email before material changes take effect. The "last updated" date at the top always reflects the current version.

← BACK TO HOME