Skip to content
Massive Frontier

Legal

Privacy Policy

Last updated 2026-09-19

This policy explains what personal data Quantum Gaming Studio ("we", "us") collects through massivefrontier.com, why, and what you can do about it. We collect as little as we can.

Who we are

Quantum Gaming Studio develops Massive Frontier and runs this website. You can reach us through our contact form.

What we collect

  • Your account (Sign in with Steam): when you sign in, Steam confirms your identity on its own website and tells us your public SteamID, profile name, avatar and profile link. We store those, plus when you joined and last signed in. We never see your Steam password or email address, and we never get access to your Steam inventory, friends or payment details.
  • Playtest applications (optional): your preferred faction, experience level, weekly play time, region and any note you add, plus your application status and, if you're invited, your playtest key. We use them only to select and invite playtest waves.
  • Linked Discord account (optional): if you link Discord, Discord tells us your Discord user ID and username (the “identify” permission) and lets us add you to our own Discord server (the “join servers for you” permission, which we use once, for our server only). We never receive your email, your list of servers, your friends or your messages. We store your Discord ID and username with the date you linked, and use them only to add you to our server and give you roles there, such as Pre-Alpha Tester when you're invited to a playtest. We discard Discord's access token straight after adding you. You can unlink at any time, and leave the server whenever you like.
  • Discord playtest sign-ups: if you sign up with the form in our Discord server, we keep your Discord user ID, username and answers, and whether you're in the server, to decide who joins each playtest and to send your key by Discord message. They're deleted on request.
  • Contact form: your name, email address, topic, subject and message, and any reply we send you. We use them only to read and answer your message.
  • Poll votes: if you vote in a website poll, we store which answer you chose, so that each player votes once and can change their mind. Published results are totals only; we never show who voted for what.
  • Test reports: if you're a tester and report on a task in a test round, we store what you chose (worked, broken or couldn't do it), how serious you said it was, your notes, the build you tested and any screenshot you attach, against your account. We use them only to find and fix problems in the game. Please don't put anything private in a note or a screenshot: they're read by the development team, and a screenshot shows whatever was on your screen.
  • Bug reports: what you file in the bug tracker — the description, how serious you said it was, the build, and any screenshot — is stored against your account and is shown to other testers on that issue, under your display name, along with anything you post in its conversation. Reports that arrive automatically from the game (a crash, or the in-game report key) carry the technical context needed to fix the problem: the error and callstack, the build, your graphics hardware, where you were in the game, and the tail of the game's log file. Please keep anything private out of a note or a screenshot.
  • Moderation: if we suspend an account for breaking our rules, we record when and why. The suspension also applies on our forums and, if you linked Discord, in our Discord server.
  • Newsletter: your email address and the date you signed up and confirmed. We only email you after you confirm through the link we send (double opt-in).
  • Abuse protection: for form submissions we store a one-way cryptographic hash of your IP address, never the address itself, to stop spam and abuse.
  • Server logs: like every website, our web server briefly records technical request data (IP address, browser type, page requested, time) to keep the site secure and working. Logs are deleted automatically after 14 days.

We do not use advertising, analytics or tracking cookies, we do not build profiles, and we never sell or rent your data.

Why we are allowed to (legal bases)

  • Your account: providing the service you signed up for (the contract with you).
  • Newsletter: your consent, which you can withdraw at any time.
  • Contact form: taking the steps you asked for (answering you), and our legitimate interest in running the studio.
  • Security logs, spam protection and moderation: our legitimate interest in keeping the site and community safe.
  • Playtests: taking the steps you asked for when you applied.

Who else handles your data

We use a small number of service providers who process data only on our instructions:

  • DigitalOcean (USA): hosts the website and its database.
  • Valve / Steam (USA): provides Sign in with Steam and your public profile name and avatar. Valve's own privacy policy applies to your Steam account.
  • Discord (USA): only if you link your Discord account; it confirms your Discord identity, and our community server runs on Discord. Discord's own privacy policy applies to your Discord account.
  • Postmark (USA): delivers our emails (form notifications and newsletter confirmations).
  • Bunny.net (EU): delivers the website's fonts without tracking.
  • YouTube: only if you press play on an embedded video. Until then, no request is made to YouTube; we use its privacy-enhanced mode.

Links to Steam and social networks take you to those services, whose own privacy policies apply. Because our providers are in the USA, your data may be transferred there; we rely on the providers' standard contractual safeguards.

How long we keep it

  • Your account: until you delete it. You can do that yourself at any time on your account page.
  • Playtest applications: until you withdraw them or delete your account.
  • Linked Discord account: until you unlink it or delete your account.
  • Poll votes: until the poll is deleted, or you delete your account.
  • Test reports and their screenshots: until the test round is deleted, or you delete your account.
  • Bug reports: until the issue is deleted, or you delete your account. Deleting your account removes your reports and comments; an issue several people reported stays open, without your name on it.
  • Contact messages and our replies: up to 24 months, then deleted.
  • Newsletter: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days.
  • Server logs: 14 days.

Your rights

You can ask us to access, correct, export or delete your data, or object to how we use it. Signed-in players can download or delete their account data themselves on their account page. Every newsletter email has an unsubscribe link. To make a request, use the contact form; we answer within 30 days. If you are in the EU/UK you may also complain to your local data protection authority; California residents have equivalent rights under the CCPA.

Children

This website is not directed to children under 13 (under 16 in the EU), and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page. Significant changes will be announced on the site.