Privacy Policy

GALATRIX LLC (“Galatrix”, “we”, “our”, or “us”) operates galatrix.com, the Galatrix editor at editor.galatrix.com, and the Galatrix game platform (together, the “Services”).

This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have.

1. Information we collect

Information you give us

Account information — your email address, a username and display name, and either a password (which we store only in hashed form) or an identifier from a third-party sign-in provider
Profile information — anything you choose to add, such as a bio, avatar configuration or profile image
Content you create — worlds, maps, scripts, models, textures, audio, thumbnails, titles and descriptions you upload, save or publish
Communications — messages you send to us for support, through a contact form, or through in-platform features such as chat, direct messages and reports

Information we collect automatically

Usage and device data — IP address, browser and device type, operating system, the pages and features you use, timestamps and referring URLs
Technical and session data — connection and session information needed to run multiplayer, along with error, crash and performance diagnostics
Cookies and local storage — used to keep you signed in, remember preferences, and store editor state. If you use the editor without an account, project data may be stored locally in your browser rather than on our servers

Information from third parties

If you sign in with a provider such as Google, that provider shares a limited set of profile information with us — typically your name, email address and profile picture — according to your settings with them. We do not receive your password.

2. How we use your information

We use the information we collect to:

Create and administer your account, and authenticate you
Operate and maintain the Services, including saving your work and running multiplayer sessions
Deliver features you ask for, such as publishing, leaderboards, social features and purchases
Moderate content, investigate reports, and enforce our Terms of Use
Detect, prevent and address fraud, abuse, cheating and security incidents
Respond to your enquiries and provide support
Analyse usage and trends so we can improve the Services
Send you service messages about changes, security or your account
Comply with our legal obligations

3. Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases: performance of a contract (to provide the Services you have signed up for); legitimate interests (to secure, improve and promote the Services, and to prevent abuse); consent (where we ask for it, such as for certain cookies or marketing); and compliance with a legal obligation.

Where we rely on consent, you can withdraw it at any time.

We do not sell, rent or trade your personal information.

We share information only in these circumstances:

With service providers who help us run the Services — for example hosting and content delivery, database and authentication, storage, and error monitoring. Providers we currently rely on include Cloudflare and Supabase. They may process your data only on our instructions and for the purposes we set
With other users, where you choose to make information public. Your display name, profile, and any content you publish is visible to others by design. Messages you send to other users are visible to them
For legal reasons — where we are required to by law, or where we reasonably believe disclosure is necessary to protect our rights, the safety of users, or the integrity of the Services
In connection with a business transfer, such as a merger, acquisition or sale of assets, in which case we will take reasonable steps to ensure your information remains protected

5. International transfers

We and our service providers may process and store information in countries other than the one you live in, including the United States. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.

6. Data retention

We keep personal information for as long as your account is active, and afterwards only for as long as we need it to provide the Services, resolve disputes, enforce our agreements, or meet legal obligations. Backups are retained for a limited period on a rolling basis before being overwritten.

Content you have published and that other users have copied — including standalone builds distributed outside the Services — may persist beyond deletion of your account, because it is no longer under our control.

7. Data security

We take reasonable administrative, technical and organisational measures to protect your information, including encryption in transit, hashed passwords, and access controls on our systems.

However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

8. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you
Correct information that is inaccurate or incomplete
Delete your personal information, including your account
Export a copy of your information in a portable format
Object to or restrict certain processing
Withdraw consent where we rely on it
Complain to your local data protection authority

To exercise any of these, contact us at support@galatrix.com. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law.

You may also choose not to provide certain information, though this may limit your ability to use parts of the Services.

9. Children’s privacy

The Services are not directed at children under 13, and you must be at least 13 years old to create an account. We ask you to confirm your age at sign-up and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13, we will delete that information and close the account promptly.

If you are a parent or guardian

If you believe a child under 13 has provided us with personal information, please contact us at support@galatrix.com and we will act on it.

Where a child aged 13 or over holds an account, you may also contact us to:

Review the personal information we hold about them
Ask us to correct or delete it
Ask us to stop any further collection or use of it
Close the account

We may ask for information to verify your relationship to the child before we act.

Some countries set the age of consent for online services higher than 13 — up to 16. Where a higher age applies to a user, we rely on the consent of a parent or guardian where the law requires it. A parent or guardian can withdraw that consent at any time by contacting us.

How we treat minors’ data

We do not use personal information from users we know to be minors to build advertising profiles or for behavioural advertising, and we do not sell it.

10. Cookies and similar technologies

We use cookies, local storage and similar technologies to:

Keep you signed in and maintain your session
Remember your preferences and editor settings
Understand how the Services are used, so we can improve them

Most browsers let you refuse or delete cookies through their settings. Blocking cookies that are strictly necessary will prevent parts of the Services — including signing in — from working.

11. Third-party links

The Services may contain links to third-party websites and services. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any site you visit.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Where changes are material, we will make reasonable efforts to notify you.

13. Contact us

If you have any questions about this Privacy Policy, or want to exercise any of your rights, please contact us at support@galatrix.com.