Privacy Policy
Effective date: October 9, 2026
Studio Genie develops and operates StarFight. This policy explains how StarFight handles information when you use the website at starfight.fun or the Android app (package name: fun.starfight.game).
1. Information processed by the game
- On-device game data. Settings such as language, audio, display preferences, CPU match records, and private-room preview information are stored in browser or Android WebView storage on your device.
- Private duel data. To create or join a friend room, the service uses a randomly generated room credential and room code. Gameplay inputs, synchronization state, authoritative match state, and results are sent to the StarFight service over HTTPS/WSS. The service stores credential hashes, room membership, and room state for the private duel service.
- Leaderboard data. If you use rankings, the service creates an anonymous profile identifier and stores its credential hash, your chosen display name, country code supplied by the hosting edge where available, RP and match statistics, and ranking match data. Display name, country code, and ranking/statistics may be visible on the public leaderboard.
- Cookies. Rankings use a random, HttpOnly, Secure, SameSite=Lax session cookie (up to one year) to recognize an anonymous ranking profile. The server stores a hash of the credential rather than the raw credential.
- Network and security data. The service receives ordinary network request information. It does not store full IP addresses in the game database. Short-lived salted, time-bucketed IP hashes are used for request-rate limiting, and an edge-provided country code may be stored for ranking display.
2. Advertising, age range and consent
The Android app asks you to choose a broad age range before game-service or advertising requests. You may skip this choice and still play CPU matches. The choice is stored on your device for protection, not used as a game profile or sent by StarFight to its game server. For children and users who skip, the Android app does not open friend rooms or create public ranking profiles while their privacy and moderation safeguards are being reviewed. Users under 18 and those who skip are not offered rewarded ads. CPU replay remains available without an ad.
StarFight Android 1.0.4 (versionCode 11) enables an optional rewarded-ad replay after a CPU match for adults who select the 18+ age range. Ads appear only if an eligible user chooses to watch one; the game remains playable without ads. The app uses Google Mobile Ads and Google User Messaging Platform (UMP). Before an eligible user's ad request, it refreshes consent information, displays a consent form where required, and offers Google's ad privacy options when required. This Android release includes the Android Advertising ID (AD_ID) permission. Google's SDK disclosures describe possible processing of IP address, ad interactions, diagnostics, advertising ID, App Set ID, and other device identifiers for advertising, analytics, and fraud prevention. The absence of an ad request for other age ranges does not by itself prove that an installed SDK transmits no data.
3. Why we process information
We use this information to operate the game, remember local preferences, provide private duels and rankings, prevent abuse, show optional rewarded ads, meet legal obligations, and maintain service security.
4. Sharing and third parties
StarFight communicates with https://starfight.fun and wss://starfight.fun for game services. Optional Android rewarded ads use Google Mobile Ads and Google consent services. Sharing an invite uses the Android share sheet only when you choose to share; StarFight does not automatically contact people in your address book.
5. Data we do not request
StarFight has no login system and does not request permissions for precise location, contacts, camera, microphone, photos, or device storage. The game does not call a dedicated hardware-profiling API or collect a stable hardware identifier through its own code.
6. Retention and deletion
Private-duel rooms are configured to expire after 30 minutes of inactivity and are purged during later room creation. Local data can be removed by clearing browser/app data or uninstalling the app. The retention period for long-term ranking records and the hosting provider’s log-retention period have not been independently confirmed; no retention period is asserted here.
To delete your anonymous ranking profile, follow the StarFight data deletion instructions. A deletion-only verification code generated from your authenticated ranking profile securely links your request to that profile. You may redeem it yourself or email it to kangpangkim@gmail.com.
7. Security and changes
Network game requests use HTTPS/WSS. No method can guarantee absolute security. We may update this policy when StarFight’s data practices change; the effective date above will be updated with the policy.