Privacy

Astrototo is a browser game. This describes everything it stores about you and why. It is short because the game collects very little.

Playing without an account

The first time you open the game your browser generates a random identifier — a UUID — and keeps it in localStorage. It is exchanged for a session token so your voyage can be saved on our server. No name, no email, nothing about your device.

We deliberately do not use device fingerprinting. It is a covert identifier, and it collides often enough to occasionally show one person another person’s save. The trade is that clearing your browser data starts a fresh run, and we would rather that than track you.

If you sign in

Signing in is optional and only required to buy something. We use Google, and receive your email address, your name and Google’s account identifier. We store those and nothing else — we never receive your password.

What we store about your play

Which episodes you have cleared, where you are on the voyage, your hull, your salvage total, which ships you own, and a summary of each run. That is what makes the game resume where you left it.

Payments

Payments are handled by Cashfree. Card and UPI details go to them and never reach us or our servers. We store the order, what it contained, and whether it succeeded.

Analytics

We use Mixpanel to see how the game is actually used. It receives which pages you open, whether you press Play, whether you sign in and from where, and for each episode you start: which episode it was, how it ended, how long it took, and what your hull and salvage were at the end. If you sign in, it also receives what Google tells us — your email address, your name, your profile picture and your locale.

It does not receive anything you type, anything about your payments, or the contents of your device. It identifies you by the same random identifier described above, or by your account once you sign in. Signing out unlinks it.

Advertising

The game does not currently show ads. We intend to add them, and when we do this page will say what they collect before they run. Ad providers typically set their own cookies and identifiers.

What we do not do

No advertising trackers, no device fingerprinting, no session recording, and no selling or sharing of your data. Analytics is the one third party that sees how you play, and the section above says exactly what it gets. The game has no chat and no way for players to contact each other, so there is nothing you write that another person can see.

Your data

Email hello@astrototo.space to ask for a copy of what we hold about you, or to have it deleted. Deleting removes your account, your voyage and your purchase history, and cannot be undone.

Last updated 1 August 2026.