Privacy Policy
1. Who we are
OUTPOST: Last Defense ("the game") is published by Rayspring Tech ("we", "us"). Contact: support@rayspringtech.com.
2. Data stored only on your device
Your progress (levels completed and stars), settings (volume, brightness, control layout, language) and the nickname and colour you pick for local co-op are saved on your device only. We never receive them unless you use cloud save (section 3). Uninstalling the game removes them.
3. Data we process when you use online features
These features are optional. You can play without them. When you use them, our account server stores:
- Player ID: a random ID we generate (not your platform ID). Why: to identify your account. Kept until you delete the account.
- Sign-in identifier: if you sign in with Google Play Games, Apple Game Center or Sign in with Apple, the identifier that platform gives our game for you. We do not receive or store your email, real name, photo, or the platform's access tokens. Why: to recognise you next time. Kept until you delete or unlink.
- Guest secret: if you play as a guest, a random secret stored on your device; we keep only a one-way hash of it. Guest accounts that are not used for 90 days are deleted automatically.
- Nickname (3 to 16 characters, with a 4-digit number added for display, such as Ray#4821) and friend code (8 random characters). Why: so friends can find you and see who they are playing with. Kept until deletion.
- Friends, friend requests and blocks: the player IDs involved and timestamps. Pending requests expire after 30 days.
- Room invitations: sender, receiver, room code. Deleted after 10 minutes.
- Online status: your last-active time, shown only to your friends as online or offline. It is overwritten, not logged as history.
- Cloud save: your game progress (up to 64 KB). Why: so you can move to a new phone. Kept until deletion.
- Match history: for each of your last 100 online matches, the time, mode, level, result, kills and duration. Older entries are deleted.
- Session tokens: we keep only a one-way hash. A token stops working after 30 days without use, or when you sign out.
- Sign in with Apple only: if you use it, we store an encrypted Apple token so that we can revoke your Apple authorisation when you delete your account.
4. Internet rooms and server logs
When you create or join an internet room, a relay server passes game traffic between players. It necessarily sees your IP address and nickname while you are connected, but does not store them. To limit abuse, the servers count requests per IP address in memory only; those counters are forgotten within minutes and are never written to disk. Our servers log only aggregate counts and error codes (no IP addresses, nicknames, tokens or request contents), kept for 14 days.
5. What we do not collect
Email address, phone number, real name, date of birth, location, contacts, advertising ID, device ID, or microphone and camera data. We use no advertising and no third-party analytics or crash-reporting SDKs. The game does not track you across other apps or websites.
6. Purchases
Paid content is bought through Google Play or the Apple App Store. They process your payment; we never receive your card or billing details. Your purchases belong to your store account, not to your game account, and use the store's restore function.
7. Sharing
We do not sell or rent your data and do not share it for advertising. The only parties involved are: Google or Apple, when you choose to sign in with them; and the cloud provider whose servers we rent to run the game services, which processes data on our behalf. Our servers may be located outside your country. We may disclose data if the law requires it.
8. How long we keep data and how to delete it
We keep account data until you delete your account, apart from the shorter periods stated above. You can delete your account inside the game at any time, and all of its server data is permanently deleted immediately. You can also request deletion on the web: see Delete account. Copies in backups disappear as backups rotate, within 30 days.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, CCPA/CPRA or similar laws) you may have the right to access, correct, delete or export your data and to object to processing. You can change your nickname in the game and delete your account at any time. For anything else, email us at support@rayspringtech.com. We do not discriminate against anyone for using these rights.
10. Children
The game is not directed at children under 13, and we do not knowingly collect data from them. It is not part of any Kids or Families programme. If you believe a child has created an account, contact us and we will delete it.
11. Security
Connections to our account service use HTTPS. We store tokens and guest secrets only as hashes. No system is perfectly secure, but we collect the minimum so that there is little to lose.
12. This website
This website sets no cookies and uses no analytics. Our web host keeps standard server access logs (such as IP address and requested page) for security and operation.
13. Changes
If we change this policy we will update the date above, and for significant changes also tell you in the game or on this page before they take effect.
14. Contact
Last updated: 2026-11-12