Starbound Game · Playtest privacy

Your account and game data

Updated September 26, 2026. This notice applies to the Starbound Game playtest at game.hibyapp.com and its Windows client.

What the game stores

The server stores your game account identifier, credits, aircraft, equipment, deployments, battle results, recordings, and session-key hashes. The Windows client also keeps a local presentation save of your game state. Invited testers may have a private account configuration containing an access token; keep it private.

Google sign-in

Google sign-in is not enabled yet on this deployment. When enabled, the server will verify a Google identity token and store Google's stable account identifier to recognize returning players. The implementation requests the OpenID sign-in scope, does not use your email address or real name as the game's ownership key, and does not display them to opponents. The game does not receive your Google password or retain Google access or refresh tokens.

Why data is used

Data is used to sign players in, maintain their fleets, run matchmaking and combat, provide recordings, prevent duplicate transactions, and operate the service. Opponents receive game information needed for a match and its recording. Network requests also expose connection information, including an IP address, to hosting infrastructure; the application uses a hash of the address for short-lived sign-in rate limiting.

Hosting and service providers

The game server and database are hosted on Oracle Cloud in the United States. Google handles Google authentication when enabled. Support email uses forwarding configured through Squarespace. Those providers process information under their own policies. This game does not include advertising or analytics trackers on these pages.

Retention and backups

Game progress remains stored between sessions until removed as part of an account request or playtest reset. The server keeps rotating daily database backups (up to seven snapshots). Local copies or operational recovery copies may remain until separately removed. Google game sessions expire after 24 hours; signing out revokes that session. Private test keys have their own expiry.

Questions and deletion requests

Contact starbound@hibyapp.com to request access, correction, or deletion of your game data. Include your game player ID if available; never send a password or access token. Account ownership must be verified before changes are made. You can also remove the game's local saves from your device.