Privacy policy

Controller and contact

DESGA, based in Spain, is the controller for data processed directly by Crossing Space. For privacy questions, to exercise your rights or to request deletion, email info@desga.es.

What Crossing Space does not do

There are no player accounts, email addresses or passwords. DESGA does not record your manoeuvres or reconstruct how you play, creates no advertising profiles of its own and does not sell personal data.

Since 20 September 2026 there is a leaderboard with names, and since 29 September 2026 you appear on it by default, under a name the game generates from a closed word list. You can change it, or stop appearing on the leaderboards from Friends: then your records do not leave your device and any already sent are deleted. The name is also stored in your pilot, which is what lets your friends see you and lets people find you (explained under “Friends”). It is the only player-written text in Crossing Space: there are no messages, no chat, no world names and nowhere else to write.

Since 31 August 2026 the game does send the outcome of each run —which exodus or chapter, whether you arrived, lost it or left it, the leg it ended on and how long it took— so we can find the points where players get stuck and fix them. That is the only thing sent from inside a run, and no record of how you play is sent: not your routes, not your controls, not the order or the timing of anything.

Exodus and The Escape can be played offline. Progress, settings and main-mode runs stay on your device except for the online functions expressly described in this policy.

The public website

The website has no accounts, forms, comments, analytics or first-party cookies. Hosting infrastructure may temporarily process essential technical data —such as IP address, browser type and access time— to deliver pages, detect errors and protect the service.

While you only see the trailer poster, the website does not contact YouTube. The video loads from youtube-nocookie.com only after you choose to play it. Email and app-store links also open external services.

The game and our server

Published editions create a random installation identifier —a UUID v7— on the device and may send our own server that identifier, the platform, game version and general device model. Editions with ads also send how many ads have been shown on that installation since counting was enabled: a single total, without which ads, when, or from which advertiser. The server records the first and most recent launch, a launch count and that total.

This data is used for aggregate counts, to learn which versions and device types remain in use, and to resolve technical problems.

When an Exodus or The Escape run ends, the game also sends its outcome: the mode, the exodus or chapter, whether you arrived, lost it or left it, the leg it ended on and how long it lasted. It serves one purpose only: finding the specific points where players get stuck, so they can be rebalanced, and helping you if you write to us about a problem.

We do not send the routes you fly, the controls you press, the order in which you play or the time of day you play, so how and when you play cannot be reconstructed. This data never comes back to your device: your save lives on your phone, and the server does not modify, restore or synchronise it. Nor is it sold or shared with third parties, and it is not used for advertising or for any purpose other than the two just stated.

This outcome is tied to your anonymous installation identifier, so it is deleted with it when you request deletion by emailing info@desga.es. Separately we keep aggregate counts per exodus and chapter —with no identifier at all— from which nothing about any person can be derived.

The IP address may be processed transiently to communicate with the server, limit abuse and protect the service. It is not used to locate you or build profiles.

The leaderboard (on by default; turned off in Friends)

Appearing on the leaderboard is on by default since 29 September 2026. It is turned off in Friends, under “Appear on leaderboards”; while it is off, nothing described in this section is sent.

With the option on, finishing an exodus or a chapter sends your time, which one it is, the platform, the game version and your name. The name starts out generated by the game from a closed word list and you can change it; it always ends in four characters that cannot be changed, derived from your installation identifier, so that two identical names can be told apart. Only your best record for each one is stored, not every run.

Exodus and The Escape have separate leaderboards: the server counts completed exoduses and chapters in each campaign from the arrivals it receives. Ties share a rank and time never breaks them; best times for each exodus or chapter appear on separate boards. General and Friends use the same privacy preferences.

Your name and your record are visible to anyone who looks at the leaderboard from the game. Your account identifier and your installation identifier are never shown.

In the Drift your record is the number of distinct green worlds you landed on, and the game does not send that number: it sends which worlds you landed on —the first time for each—, how long you had been playing and how your water and hull were on arrival, and the server counts the greens. That way a record can be verified instead of taken on trust. That list is not a log of your run: it does not include your route, your controls, or every time you landed on the same world again. The times and resources are private: they are not shown on any board and they never break ties.

Turning the option off makes the game ask the server to delete your records and your name from the leaderboards, and it stops sending them. They are also deleted if you ask us to delete your data. If someone reports an offensive name we may remove it, and that person then appears under a generic name without losing their records.

Friends (receiving requests is on by default; turned off in Friends)

The first time the game starts with a connection it creates your “pilot”: a new identifier with your name next to it, and a credential that is stored only on your device. It is created for everyone who plays online, even if they never open the friends screen, because it is what lets other people find you and send you a friend request, lets a Drift record be verified and lets your friends see you. It is not an account: there is no email and no password. Without a connection it is not created, the game tries again the next time it starts, and the exodus plays the same.

Your friend link carries your name, for example crossingspace.desga.es/invite/Vela-8057. The game builds it itself and you can pass it to whoever you like; whoever opens it sees only your name, with no identifiers and without needing to own the game. Because your name is public —it is the same one shown on the leaderboard—, anyone who knows it can send you a friend request. If you change your name, your old links stop leading to you.

While “Receive requests” is set to Yes, which is the default, people can also find you by your name in the Friends search. The search needs at least three letters and shows names only: no identifiers, no records, no dates. What someone types into it is not stored. With “Receive requests” set to No, which you change in Friends, you do not appear in the search, your link does not let anyone send you anything, and any pending requests disappear; you can still send requests yourself and your friendships do not change. Your contacts are never uploaded.

A friend request is only who sends it, to whom and when: it carries no text at all. Requests left unanswered expire after 30 days. Declining one sends no notice: after the first and second decline, the request simply disappears from the sender’s sent requests and they can send it again; after the third, that person cannot send you another request for 30 days. For that, the number of times you declined is stored, and that count is deleted once 30 days have passed.

A friendship is created when one of you accepts the other’s request, or when you have both sent one to each other. Opening a link, seeing the preview or finding someone in the search creates nothing. What is stored is that those two people are friends and since when; nothing else.

As friends, you share with each other your names, your best records and the footprints you leave on the green worlds where you land: a small house on each one. With “Appear on leaderboards” on in Friends, landing on a green world records a footprint without time, order or resources, even during an ongoing journey; while it is off, no new footprints are recorded. Records are submitted when the journey ends. Removing the friend stops sharing them immediately. Your current ship position, and the time, order and resources of each footprint are never shown. There are no messages of any kind.

Either of you can delete the friendship, and it disappears for both at once, together with any requests between you. The fact that you were friends is not kept. And if you delete your pilot, your name, your requests and all your friendships go with it.

If you play on a platform that knows who you are —Game Center, Google Play Games or Steam— your pilot is linked to that account so you can recover it on a new device with your friends inside. Without that link, reinstalling the game starts a new pilot.

Turning the leaderboard off does not delete your pilot or your friends, because they are separate things: to stop appearing to them you delete the pilot, and to stop anyone else finding you or sending you requests you set “Receive requests” to No. Both are also deleted if you ask us to delete your data, and if someone reports an offensive name we may remove it without that person losing their records or their friendships.

Reporting, blocking and deleting your data from the game

If you see an offensive name in a leaderboard, in the search, in a request or among your friends, tap it to report it. A report sends our server who is reporting (your pilot), the name as you saw it, who it belongs to and on which screen you saw it, with no text. We review it within 24 hours and, if the name is offensive, we remove it: that person then appears under a generic name. Reports are deleted when they are resolved or when the reporting pilot is deleted.

From the same place you can block someone. We store that your pilot blocks theirs; if you were friends, the friendship is deleted, and from then on they cannot send you requests, cannot find you in the search and their name no longer appears in your leaderboards. You can unblock them in Friends, and the block is deleted with either pilot.

When you choose a name, our server checks that it contains no offensive words. Rejected names are not stored.

In Settings, “Delete my data” deletes in one go, from the game itself, your name, your scores, your Drift runs, your footprints, your pilot with its friends, requests and blocks, the linked platform account and your installation's progress; also the installation itself, unless it holds a purchase: then the installation, its receipt and the platform account are kept, and nothing else, so you don't lose what you paid for. Afterwards the game forgets your name, starts as a new installation and leaves leaderboards and requests switched off. Your progress and settings live on your device and are not touched.

Game Center, Google Play Games and Steam

If you play on a platform that already knows who you are and you are signed in, the game asks it for a proof and sends that to our server, which checks it with Apple, Google or Valve. What we store is the player identifier that platform returns and which installation it belongs to. We do not store your platform name, your picture, your friends list or anything else.

It lets you recover your pilot and friends on another device. To recover ad removal on a new phone, use Restore Purchases, which provides proof from the store; knowing an installation identifier is not enough to claim a purchase. Drift best scores are stored per installation; on Steam, with Steam Cloud turned on, they also travel in the copy that Steam stores (see “Data stored on your device”).

It happens without asking you when your platform has already identified you, which is how all three work. If you are not signed in, if you play on the web or if you are offline, nothing happens and the game works the same.

This identifier is kept for as long as a purchase of yours is associated with it, because deleting it would take away what you paid for. If there is no purchase, it is deleted when you request deletion, like everything else. You can ask us to delete it at info@desga.es.

Data stored on your device

The game stores progress, settings, the anonymous installation identifier and, if you buy ad removal, the proof needed to remember that purchase locally. You can remove local data by uninstalling the game or clearing its data through the operating system; doing so may also remove progress that has not been synchronised.

On Steam, if you have Steam Cloud turned on, Steam keeps a copy of your progress, your achievements and your Drift records and handles it under its own policy. It is stored by Steam and does not pass through our server. Your pilot’s credential and each computer’s settings are not part of it and stay on your device.

Purchases and restoration

When you buy or restore ad removal, the game sends the receipt to our server, which verifies it with Apple or Google. We retain the receipt and its fingerprint, store, product, status, transaction identifiers, price and currency when supplied, purchase date, and the store’s literal response, which may include its storefront region. Apple and Google also notify us directly when a purchase changes, for example after a refund; we then check its status with the store and keep the same data, even if no installation is linked to it.

This information is used only to validate and restore the purchase, detect refunds or fraud and resolve support issues. Stores process the payment under their own policies; DESGA does not receive your card details.

The Steam edition is bought outright in the Steam store, and the game sends us nothing about that purchase. Valve gives us, each day, the total copies sold and refunded and their amounts, by country and currency, with no information about who bought them; we use it only to see the game’s sales.

Advertising and platform services

Mobile editions may include limited Google AdMob ads, at most after an exodus and never during flight. When this feature is present, Google may process technical identifiers, IP address, device information, ad interactions and diagnostic or fraud-prevention data. Where required by law, Google User Messaging Platform displays consent choices; refusing or withdrawing consent does not prevent play.

Since 20 September 2026, the Android edition also uses the device advertising identifier and Google Analytics for Firebase, linked to AdMob. It serves one purpose: making the ads that are shown worth more, which is what keeps the game free. You can limit or reset that identifier in your device settings, and in the European Economic Area, the United Kingdom and Switzerland you can decide in the consent form shown at the start.

DESGA neither receives nor stores that identifier or any advertising profile: Google handles it under its own policy. Our server receives the number of ads shown on each installation to answer support requests and check the game’s limits. It also receives notices without identity containing the UTC impression day, platform, game version and a random UUID independent of the device to prevent duplicates on retry. Only that UUID and aggregate counts by day, platform and version are kept; never a daily history of a person, time of day, game mode, advertiser or specific ad. Delivery may be delayed when offline. We send no events of our own to Analytics — the game does not record what you do inside a run — and we still do not sell or share personal data.

The ad-removal purchase prevents the game from requesting new ads. Game Center, Google Play Games, Steam, the App Store and Google Play are involved only when you use their features or stores, and handle data under their own policies.

• Apple Privacy Policy ↗
• Google Privacy Policy ↗
• Steam Privacy Policy ↗

Retention

Installation data is kept for as long as the installation exists, with no automatic deletion period, so that the evolution of the game can be followed over time and so we can help you if you write to us. You can request its deletion at any time by emailing info@desga.es and we will do it. Receipts and their history are retained for as long as needed to restore purchases, manage refunds, prevent fraud, meet legal obligations and defend possible claims.

Separately from the above, aggregate counts are kept indefinitely —how many people opened the game each day, how many journeys each exodus and chapter had and how they ended, how many ads were shown per day, platform and version, Steam sales per day, country and currency— which carry no identifier and from which nothing about any person can be derived.

Technical website and server logs are retained only for the limited period needed to operate and protect the infrastructure. Data handled by Apple, Google, Steam or the hosting provider follows each provider’s retention terms.

Legal bases

We process data required to validate a purchase and provide requested functions to perform our contract with you. Minimal counts, security, support and fraud prevention rely on our legitimate interests. Advertising and associated storage rely on consent where required by law. Some processing may be necessary to comply with legal obligations.

Your rights and deletion

The quickest way to delete your data is “Delete my data”, in the game's Settings. You can also ask by email.

You may request access, correction, deletion, restriction, portability or objection, and withdraw consent, by emailing info@desga.es. For requests about the game, include the installation identifier when possible so we can locate the correct data. Because there is no account bearing your name or email address, we may be unable to link an installation to you without that identifier.

You may also complain to the Spanish Data Protection Agency or the supervisory authority that applies to you. Some purchase data may be retained where legally required or necessary to respond to a claim.

• Data protection rights at the AEPD ↗

Security and transfers

Communications with our services use encrypted connections, administrative access is restricted and support lookups are logged. External providers may process data outside your country under their own legal safeguards and transfer mechanisms.

Changes to this policy

We will update this page before publishing a version that materially changes the data handled. The date at the top identifies the latest revision.