Who runs Vectorwake
This notice covers vectorwake.net, play.vectorwake.net, the browser game, the public pilot directory, and the game servers.
Use the support page for privacy questions or requests.
What the game keeps
Account information
The server assigns an internal account number and a generated call sign. It records when the account was created and last used, whether it is banned, and its current ratings and career totals. If you claim a pilot, the server stores a password hash. It never stores the password itself.
Each signed-in device receives a random device secret. The server stores only its hash. The browser stores the secret and account number on that device so you do not have to sign in every time.
Gameplay information
The fleet records joins, refusals, rooms, ship and team changes, kills, deaths, assists, session length, and the reason a session ended. Rated match records include the internal account numbers involved, rating changes, zone, server instance, and match tick.
Connection and security information
The account service uses an IP address temporarily to limit account creation, login guesses, searches, renames, and client error reports. These counters stop affecting requests after at most one hour. Dormant entries are pruned during later traffic or when the process restarts, and they are not written to the game database. Hosting providers still receive ordinary network information needed to deliver the site and game.
Client error reports
When the browser game encounters an error, it may send the error type, message, stack trace, client build, page path, browser user agent, and the internal account number known to the client. Startup errors may arrive before an account number is available. The reporter does not read or attach the device secret, password, controls, chat, or gameplay state. Long hexadecimal strings are removed before storage to avoid keeping a credential that appears in an error by mistake.
Website storage
The public site stores GitHub star and Discord member counts in browser storage for six hours. Vectorwake does not set advertising or analytics cookies.
Vectorwake does not ask for an email address, phone number, payment information, real name, location, or social account. Players cannot submit a custom call sign or chat message.
What is public
Claimed human accounts appear in the public pilot directory. Guest pilots and registered bots can have public career profiles but do not appear in that list. A profile can show the generated call sign, whether the pilot is human or AI, rank, tier, ratings, kills, deaths, assists, and rated event count.
Public pages may be copied or cached by browsers, search engines, and other people. Deleting an account removes the live profile, but Vectorwake cannot erase copies held outside its systems.
Why the information is used
- To create accounts, sign devices in, and admit pilots to games.
- To calculate ratings, rankings, and career totals.
- To operate the public pilot directory.
- To investigate connection failures, disputed results, cheating, and abuse.
- To keep the service secure and understand whether it is working.
Where data protection law asks for a legal basis, Vectorwake processes account and gameplay information to provide the service you request and for the legitimate interests described above. It relies on consent where the law requires it.
Who receives information
Vultr hosts the website, game servers, and PostgreSQL database in the United States. Its systems process the network and account information needed to provide that infrastructure.
The landing page asks GitHub and Discord for public repository and community counts. Those services receive the connection information that normally accompanies a web request. Vectorwake does not attach an account number, call sign, or gameplay history to those requests. Following a GitHub or Discord link puts you under that service's privacy policy and terms.
Vectorwake may disclose information when required by law, to protect the service or another person, or during a transfer of the project. It does not sell personal information, share it for behavioral advertising, or use it for targeted advertising.
Retention and deletion
Different records have different lifetimes. Human activity logs last 90 days. Client error groups last 30 days after their latest occurrence. Rated matches involving a human currently have no scheduled expiry because they support the rating record. The full schedule is on the retention page.
You may ask for a copy, correction, or deletion of information connected to your account. The deletion page explains the process and what remains after deletion. Vectorwake will not treat you differently for making a privacy request.
Children
Vectorwake is a general-audience game for people age 13 or older. Do not use the game if you are under 13. Some countries set a higher minimum age for online services, and that higher age applies.
If you are a parent or guardian and believe a child under 13 has used Vectorwake, contact an admin through the support page. The account and identifiable activity will be investigated and removed according to the deletion process.
Security and international use
Connections use encryption in transit. Passwords use Argon2id hashes, device secrets are random and stored as hashes, and the managed database encrypts data at rest. No security measure can make an online service risk-free.
Vectorwake is operated and hosted in the United States. If you use it elsewhere, your information is transferred to and processed in the United States.
Changes to this notice
The effective date at the top changes when this notice changes. Material changes will also be announced through the project site or Discord before they take effect when practical.