Privacy

Last updated: 9 October 2026. This explains what Astonia 4 stores about you during the alpha, why, and what you can ask.

Who is responsible

Tom Coninx (private individual), Belgium. Contact: info@playastonia4.com.

What we store

• Alpha requests: your email address, name or nickname, Discord name (optional), country, whether and where you played Astonia before, and your graphics card. Only staff see these, to choose testers.
• Your account: email address, your role, when you joined, and the invite code you used.
• Your password: only as a salted Argon2id hash in the game server. We never see or store it in plain text.
• Two-factor authentication (if you turn it on): an encrypted secret and hashed recovery codes.
• Your characters: names, progress, items and everything else the game needs to work.
• Launcher sign-ins: the name of the computer you signed in on and when it was last used, so you can sign it out.
• Security logs: IP addresses with sign-in and account events, to stop abuse and attacks.
• Game logs: logins (with a shortened IP address), game events such as item transfers, and chat and private messages (tells). We use these to handle reports of abuse, cheating and bugs.

Why

To choose alpha testers when you ask for access (your consent, which you can withdraw at any time), to run your account and the game (our agreement with you), and to keep the game and accounts secure and fair (our legitimate interest). We do not use your data for advertising, we do not track you across other sites and we never sell your data.

Who else processes it

• OVH: the game and account server (Warsaw, Poland).
• Brevo: sends the account emails (request, invite, activation and reset codes).
• Cloudflare: domain name service, game downloads and forwarding of email to info@playastonia4.com.

How long

• Your account and characters: until you ask us to delete them.
• Registrations that were never activated: at most 30 days.
• Alpha requests: unconfirmed 7 days, declined 90 days, an invite that was never used 90 days after it expired. Once you have an account, your answers stay with it (to plan tests across countries and PCs) until you ask us to delete it.
• Security and game logs: 400 days.
• Backups: 14 days on the server, and encrypted at home for up to 400 days.

Cookies

This account site only uses cookies that are needed for it to work: your sign-in session, protection against forged forms and a cookie that protects your account from lock-outs by others. No analytics or advertising cookies.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Email info@playastonia4.com from the address of your account; we answer within 30 days. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).