Legal
Privacy Policy
This policy explains what personal data Quantum Gaming Studio ("we", "us") collects through massivefrontier.com, why, and what you can do about it. We collect as little as we can.
Who we are
Quantum Gaming Studio develops Massive Frontier and runs this website. You can reach us through our contact form.
What we collect
- Your account (Sign in with Steam): when you sign in, Steam confirms your identity on its own website and tells us your public SteamID, profile name, avatar and profile link. We store those, plus when you joined and last signed in. We never see your Steam password or email address, and we never get access to your Steam inventory, friends or payment details.
- Playtest applications (optional): your preferred faction, experience level, weekly play time, region and any note you add, plus your application status and, if you're invited, your playtest key. We use them only to select and invite playtest waves.
- Contact form: your name, email address, topic, subject and message. We use them only to read and answer your message.
- Newsletter: your email address and the date you signed up and confirmed. We only email you after you confirm through the link we send (double opt-in).
- Abuse protection: for form submissions we store a one-way cryptographic hash of your IP address, never the address itself, to stop spam and abuse.
- Server logs: like every website, our web server briefly records technical request data (IP address, browser type, page requested, time) to keep the site secure and working. Logs are deleted automatically after 14 days.
We do not use advertising, analytics or tracking cookies, we do not build profiles, and we never sell or rent your data.
Why we are allowed to (legal bases)
- Your account: providing the service you signed up for (the contract with you).
- Newsletter: your consent, which you can withdraw at any time.
- Contact form: taking the steps you asked for (answering you), and our legitimate interest in running the studio.
- Security logs and spam protection: our legitimate interest in keeping the site safe.
Who else handles your data
We use a small number of service providers who process data only on our instructions:
- DigitalOcean (USA): hosts the website and its database.
- Valve / Steam (USA): provides Sign in with Steam and your public profile name and avatar. Valve's own privacy policy applies to your Steam account.
- Postmark (USA): delivers our emails (form notifications and newsletter confirmations).
- Bunny.net (EU): delivers the website's fonts without tracking.
- YouTube: only if you press play on an embedded video. Until then, no request is made to YouTube; we use its privacy-enhanced mode.
Links to Steam and social networks take you to those services, whose own privacy policies apply. Because our providers are in the USA, your data may be transferred there; we rely on the providers' standard contractual safeguards.
How long we keep it
- Your account: until you delete it. You can do that yourself at any time on your account page.
- Playtest applications: until you withdraw them or delete your account.
- Contact messages: up to 24 months, then deleted.
- Newsletter: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days.
- Server logs: 14 days.
Your rights
You can ask us to access, correct, export or delete your data, or object to how we use it. Signed-in players can download or delete their account data themselves on their account page. Every newsletter email has an unsubscribe link. To make a request, use the contact form; we answer within 30 days. If you are in the EU/UK you may also complain to your local data protection authority; California residents have equivalent rights under the CCPA.
Children
This website is not directed to children under 13 (under 16 in the EU), and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page. Significant changes will be announced on the site.