Privacy policy

Controller and contact

DESGA, based in Spain, is the controller for data processed directly by Crossing Space. For privacy questions, to exercise your rights or to request deletion, email info@desga.es.

What Crossing Space does not do

There are no player accounts, email addresses or passwords. DESGA does not record your manoeuvres or reconstruct how you play, creates no advertising profiles of its own and does not sell personal data.

Since 20 September 2026 you can choose to appear on a leaderboard under a name. It is off by default: until you turn it on in Settings, neither that name nor your records leave your device. It is the only player-written text in Crossing Space: there are no messages, no chat, no world names and nowhere else to write.

Since 31 August 2026 the game does send the outcome of each run —which crossing, whether you arrived, lost it or left it, the leg it ended on and how long it took— so we can find the points where players get stuck and fix them. That is the only thing sent from inside a run, and no record of how you play is sent: not your routes, not your controls, not the order or the timing of anything.

The exodus can be played offline. Progress, settings and main-mode runs stay on your device except for the online functions expressly described in this policy.

The public website

The website has no accounts, forms, comments, analytics or first-party cookies. Hosting infrastructure may temporarily process essential technical data —such as IP address, browser type and access time— to deliver pages, detect errors and protect the service.

While you only see the trailer poster, the website does not contact YouTube. Once a video exists, it will load from youtube-nocookie.com only after you choose to play it. Email and app-store links also open external services.

The game and our server

Published editions create a random installation identifier —a UUID v7— on the device and may send our own server that identifier, the platform, game version and general device model. The server records the first and most recent launch and a launch count.

This data is used for aggregate counts, to learn which versions and device types remain in use, and to resolve technical problems.

When a run ends, the game also sends its outcome: the crossing, whether you arrived, lost it or left it, the leg it ended on and how long it lasted. It serves one purpose only: finding the specific points where players get stuck, so they can be rebalanced, and helping you if you write to us about a problem.

We do not send the routes you fly, the controls you press, the order in which you play or the time of day you play, so how and when you play cannot be reconstructed. This data never comes back to your device: your save lives on your phone, and the server does not modify, restore or synchronise it. Nor is it sold or shared with third parties, and it is not used for advertising or for any purpose other than the two just stated.

This outcome is tied to your anonymous installation identifier, so it is deleted with it: it disappears 90 days after your last activity, or sooner if you request deletion. Separately we keep aggregate per-crossing counts —with no identifier at all— from which nothing about any person can be derived.

The IP address may be processed transiently to communicate with the server, limit abuse and protect the service. It is not used to locate you or build profiles.

The leaderboard (optional, off by default)

You can turn on appearing on the leaderboard in Settings. While it is off —as it ships— nothing described in this section is sent.

If you turn it on, finishing a crossing sends your time, which crossing it belongs to, the platform, the game version and the name you pick. The name starts out generated by the game from a closed word list and you can change it; it always ends in four characters that cannot be changed, derived from your installation identifier, so that two identical names can be told apart. Only your best record per crossing is stored, not every run.

Your name and your record are visible to anyone who looks at the leaderboard from the game. Your account identifier and your installation identifier are never shown.

Turning the option off makes the game ask the server to delete your records and your name, and it stops sending them. They are also deleted, like everything else, 90 days after your last activity. If someone reports an offensive name we may remove it, and that person then appears under a generic name without losing their records.

Challenges

When you finish a crossing you can create a challenge and share its link with whoever you like. It only happens if you press it: nothing is automatic.

The link contains a code and, when opened, shows which crossing it is, the time you set and the name you appear under —the one you chose, or a generic one if you have not chosen any—. Whoever has the link sees that; they do not need to own the game.

When someone answers your challenge we store their time and the fact that those two runs crossed, so we can show you both the result and, later, so that those of you who have challenged each other can compare. No message is stored: a challenge is a time, not a text, and there is nowhere in the game to write anything to anyone.

You only become known to whoever opens your link or whose link you open. There is no player search, your contacts are never uploaded and nobody can find you by your name.

Challenges are deleted after 90 days, like everything else.

Game Center, Google Play Games and Steam

If you play on a platform that already knows who you are and you are signed in, the game asks it for a proof and sends that to our server, which checks it with Apple, Google or Valve. What we store is the player identifier that platform returns and which installation it belongs to. We do not store your platform name, your picture, your friends list or anything else.

It serves two concrete purposes. The first is that what you paid for follows you: if you bought the ad removal and change phones, you just play, with no need to remember to restore the purchase. The second is that your records stay yours on a new device, if you turned the leaderboard on.

It happens without asking you when your platform has already identified you, which is how all three work. If you are not signed in, if you play on the web or if you are offline, nothing happens and the game works the same.

This identifier is kept for as long as a purchase of yours is associated with it, because deleting it would take away what you paid for. If there is no purchase, it is deleted 90 days after your last activity, like everything else. You can ask us to delete it at info@desga.es.

Data stored on your device

The game stores progress, settings, the anonymous installation identifier and, if you buy ad removal, the proof needed to remember that purchase locally. You can remove local data by uninstalling the game or clearing its data through the operating system; doing so may also remove progress that has not been synchronised.

Purchases and restoration

When you buy or restore ad removal, the game sends the receipt to our server, which verifies it with Apple or Google. We retain the receipt and its fingerprint, store, product, status, transaction identifiers, price and currency when supplied, purchase date, and the store’s literal response, which may include its storefront region.

This information is used only to validate and restore the purchase, detect refunds or fraud and resolve support issues. Stores process the payment under their own policies; DESGA does not receive your card details.

Advertising and platform services

Mobile editions may include limited Google AdMob ads, at most after an exodus and never during flight. When this feature is present, Google may process technical identifiers, IP address, device information, ad interactions and diagnostic or fraud-prevention data. Where required by law, Google User Messaging Platform displays consent choices; refusing or withdrawing consent does not prevent play.

Since 20 September 2026, the Android edition also uses the device advertising identifier and Google Analytics for Firebase, linked to AdMob. It serves one purpose: making the ads that are shown worth more, which is what keeps the game free. You can limit or reset that identifier in your device settings, and in the European Economic Area, the United Kingdom and Switzerland you can decide in the consent form shown at the start.

DESGA neither receives nor stores that identifier or any advertising profile: Google handles it under its own policy. We send no events of our own to Analytics — the game does not record what you do inside a run — and we still do not sell or share personal data.

The ad-removal purchase prevents the game from requesting new ads. Game Center, Google Play Games, Steam, the App Store and Google Play are involved only when you use their features or stores, and handle data under their own policies.

• Apple Privacy Policy ↗
• Google Privacy Policy ↗
• Steam Privacy Policy ↗

Retention

The intended retention period for installation data is 90 days without activity. While automatic deletion is being activated, it remains on the server until you request its deletion by emailing info@desga.es. Receipts and their history are retained for as long as needed to restore purchases, manage refunds, prevent fraud, meet legal obligations and defend possible claims.

Technical website and server logs are retained only for the limited period needed to operate and protect the infrastructure. Data handled by Apple, Google, Steam or the hosting provider follows each provider’s retention terms.

Legal bases

We process data required to validate a purchase and provide requested functions to perform our contract with you. Minimal counts, security, support and fraud prevention rely on our legitimate interests. Advertising and associated storage rely on consent where required by law. Some processing may be necessary to comply with legal obligations.

Your rights and deletion

You may request access, correction, deletion, restriction, portability or objection, and withdraw consent, by emailing info@desga.es. For requests about the game, include the installation identifier when possible so we can locate the correct data. Because there is no account bearing your name or email address, we may be unable to link an installation to you without that identifier.

You may also complain to the Spanish Data Protection Agency or the supervisory authority that applies to you. Some purchase data may be retained where legally required or necessary to respond to a claim.

• Data protection rights at the AEPD ↗

Security and transfers

Communications with our services use encrypted connections, administrative access is restricted and support lookups are logged. External providers may process data outside your country under their own legal safeguards and transfer mechanisms.

Changes to this policy

We will update this page before publishing a version that materially changes the data handled. The date at the top identifies the latest revision.