Space Zodiacs Privacy Policy

Last updated October 26, 2026

1 Who operates the service

Mortex LLC, registered in Florida, operates Space Zodiacs at https://www.spacezodiacs.com. Contact henry.m.martinez93@gmail.com with privacy questions or requests.

This policy covers the browser game, the Space Zodiacs Android app (which shows the same game as the website), and the account, profile, social, support, and guide features described below when they are available. A Japanese version follows the English version; for people who live in Japan, the Japanese version applies, together with the additional information for Japan in section 11. The intended cloud-save release starts fresh accounts and stores the supported gameplay records described below as those features are enabled. It does not mean that every game feature, reward source, or setting is completely saved. Cloud account and gameplay features are available according to what is enabled for the release. Some features may remain unavailable while their release checks are completed. Optional real-money purchases in the Cash Shop are processed by Stripe, as described in section 8.

2 Data kept in your browser

While you play, the game keeps a working copy of your game, your settings, and actions that are waiting to reach the server in your browser's local storage and session storage, and saves your game to your account. Earlier versions of Space Zodiacs ran as a browser-only demo. Records from that demo, which can include a password chosen for it, may remain in a browser until it is cleared; they are separate from your account and are not imported into it as a balance or proof of payment. Do not reuse an email, banking, or other real-account password in that old demo.

Clearing site storage or using a different browser or device can affect progress that has not yet reached your account. Removing browser data does not itself delete your account, records held on a server, or messages you sent to support. Deleting your account (section 9) also removes the copy of its game from the browser you delete it from.

Registration does not require email confirmation, and email ownership is not verified. Your chosen display language (English or Japanese) is saved in the browser and in your account save. On a first visit the game asks our host once for the two-letter country code it derives from your connection, to choose the starting language and the price currency; it does not receive your precise location or address.

For enabled account features, account-scoped tab session storage can hold pending request identifiers and limited command instructions, plus support drafts and pending submission instructions. These records help preserve an unfinished action for recovery. They do not hold account tokens, passwords, wallet snapshots, or combat frames. A pending browser record is not a completed server save; the server must confirm the action.

3 Accounts and eligibility

Registration uses your email address, password, and a display name, or your Google account. If you sign in with Google, Google provides your email address, name, profile picture link, and Google account identifier, and a cookie that lasts 5 minutes keeps the sign-in steps together. After registration and eligibility checks, onboarding asks you to choose a unique public username, which is separate from the display name entered at registration. We process these details, an account identifier, your avatar selection, and records needed to manage the account. In the new account flow, credentials are sent through the Vercel-hosted application API to Supabase for authentication. Supabase Auth holds identity, email, and password-authentication state. An automatic confirmation timestamp is not evidence that someone controls the inbox. We do not use an email address alone to link identities. The backend verifies account identity with Supabase instead of accepting a browser-supplied account identifier as proof. Supabase Postgres stores enabled account and gameplay records. Gameplay records do not contain passwords, bearer tokens, or service credentials. The application does not set an authentication cookie for this account flow; providers may have separate hosting, security, or service technologies.

The account admission process asks for confirmation that you are 18 or older and live in the United States or Japan, and records your country, those confirmations, and the versions of the Terms and privacy notice presented, together with the related agreement. People in Japan enter their birth year and month; we use them only to check that they are 18 or older and keep only the yes-or-no result. The form does not ask for a full date of birth, GPS location, or home address.

We use account information to authenticate you, operate available account features, maintain the applicable records, and manage access and eligibility. Policy history includes the accepted versions, content hashes, and acceptance timestamps. A fresh server account does not copy the demo game state or wallet.

4 Cloud gameplay records

When supported cloud features are enabled, the service can store these account-linked records:

We use this information to provide the supported gameplay, save and restore accepted state, calculate outcomes and rewards, prevent duplicate processing, and investigate errors or misuse. Gameplay records are bound to the verified account; the browser cannot directly write to gameplay tables. Activated backend commands validate ownership and the applicable state revision.

An accepted command has a durable transaction receipt and is followed by a current-state read. A lost reply can be recovered using the same request identifier and intent without granting the action twice. A failed refresh after an accepted action does not mean the accepted change was undone. New actions based on stale state require fresh data and review. There is no implicit merge of two devices or import of local state over cloud records.

Some modes, inventory and reward sources, paid entry, queues, refunds, social features, and settings hydration remain incomplete or require separate activation and verification. Storage tables alone do not establish complete saving. Independent hosted multi-device recovery has not been verified for this release. The cloud-save features described here do not call Stripe or import payment details.

5 Public profiles and community guides

When public profiles are enabled, the public view contains only your username and avatar identifier and kind. Avatar selection requires the corresponding canonical ownership record. Registration display name, email, authentication identifiers, wallet, monster roster, full game state, and support records are excluded from that public view. Avoid choosing a username that reveals private information.

If the guide feature is enabled and you submit a guide, we process its contents, private account binding, drafts, review status, revisions, and receipts to review and manage it. Public author labels in the prepared feature are generic; private owner-role membership is separate. Drafts and pending submissions are private to the submitting account and authorized owner review. Only an approved guide version becomes public. Editing a guide sends the changes for another approval; the approved version may remain public while the revised submission is reviewed.

Chat messages written in English or Japanese can be translated into the reader's language. Where the reader's browser has a built-in translator, the translation happens on their device. Otherwise the reader's browser sends the message text, without your username or account details, to the free MyMemory translation service (Translated srl, Italy), and keeps the translation on that device. For accounts of people who live in Japan, chat is not available.

When the social features are enabled, other players can see your username; your player card, which shows your level, Ladder stage, hero and species counts, Arena rank, Dungeon progress, a few showcased heroes and your Arena team; when you were last active; messages you post in world chat or guild chat; your Weekly Titan and Dungeon boss results; and the guild you belong to. Friends and guild members can see more of these details than other players. A friend can borrow a hero from your player card for a fight or spar against your Arena team, and you can see when they do. We use this information to run friends, mail, chat, guilds, rankings, and high scores.

You can report a chat message or a player, and block a player, from world chat, guild chat, and player profiles. A report records who made it, the reported player, the reason, any note you add, and, for a message, a copy of that message. Mortex LLC reviews reports and may hide messages and limit or suspend a player's chat or account under the Terms. A message that three different players report is hidden for everyone until it is reviewed. Reports are kept for up to one year. Your list of blocked players is kept until you unblock them or delete your account. We do not tell a player that you blocked them, although they may notice that a friendship ended.

Public content can be viewed or copied by other people. A removal request cannot guarantee that copies made outside the service will disappear.

6 Support information

If you submit a support ticket, we process the subject or title, message or body, category, priority, account binding, request receipt, and timestamps. Free text can contain personal information that you choose to provide. Tickets and pending submissions are intended for the submitting account and authorized owner support, not public profiles or other players. A ticket does not automatically send an email notification.

If you email our contact address, we receive your email address, message, and any attachments through Gmail. Mortex LLC's owner reviews those emails. There is no automated inbox review or promised response timer. We use support information to investigate issues, respond, and keep track of the request. Please send only what is needed. Do not send passwords, authentication codes, full card numbers, identity documents, or unrelated sensitive information through a normal ticket or email.

7 Hosting logs and measurement

Vercel hosts the browser application. Serving a page involves processing connection and request information, such as an IP address, browser information, and requested page. Source rate limits for cloud commands use a trusted platform client address and Supabase-authenticated account identity. Database buckets retain hashed subject keys, the bucket start, and a count rather than a raw IP-address field in gameplay records. These hashes are not a promise of anonymity. Integrity records include request digests, source versions, timestamps, and outcomes. The new gameplay modules do not intentionally log passwords, bearer tokens, support bodies, or whole save payloads. Vercel, Supabase, Auth, and other providers may retain separate operational or security logs; exact fields, retention, locations, and operator access have not been confirmed.

The application initializes Vercel Web Analytics and Speed Insights at startup and supplies the current screen pathname. It does not wait for a separate application-level analytics-consent choice, provide a switch that turns these integrations off, or filter those paths before passing them to these integrations. No site-specific sampling override is configured.

The Vercel measurements have no custom analytics events or dedicated account, email, or user-ID fields. A pathname can nevertheless contain an identifier. These facts do not mean the measurements or the whole service are anonymous.

Space Zodiacs also keeps its own play statistics to understand how the game is played and to improve it, including its balance, its screens and its Cash Shop. While you use the website or the Android app, the game sends them to our own servers (hosted by Vercel and stored in Supabase, section 8). They cover: the screens you open and how long they stay open; the buttons, tabs and links you press, named by the control and never by anything you type; your game progress, such as battles, summons, quests, levels, Star Levels and Overworld areas; changes in your in-game currencies and items; Cash Shop and manga store visits, the offers you tap, checkout starts and completed purchases, with the product, price and order identifier; and errors the game runs into. For each visit they also include the device type (phone, tablet or computer), screen size, language, game version, whether you play on the website or in the Android app, the country code derived from your connection, and how you arrived. "How you arrived" means the advertising tags in the link you followed, whether it carried an advertising network's click identifier (not the identifier itself), and the name of the referring website. Once you sign in, these statistics are linked to your account, including what you did earlier in that visit. They do not include your email address, password, username, chat or support messages, or payment card details. We do not sell them or share them with advertisers or other players. They are kept for up to 400 days, then deleted. You can turn them off for a device in Settings with the Share play statistics switch.

On www.spacezodiacs.com the application also loads the Meta Pixel, a measurement tool provided by Meta Platforms, Inc., so that we can measure and improve our advertising on Meta's services. The application sends it page views; account sign-ups, with an internal account identifier so that a sign-up is not counted twice; game progress events, such as summons, battle and stage clears, Dungeon, tower, trial and Arena wins, and level increases; Cash Shop checkout starts and completed purchases, with the product, its price, and an order identifier; and manga reading progress, collection-offer views and choices, checkout starts, and verified purchases. Manga reading measurements include the book and page reached and the number of distinct pages read. These events do not include your email address, password, username, or support messages. Meta also receives information from your browser when the Meta Pixel loads or sends an event, such as your IP address, browser and device information, the page address, and identifiers in Meta cookies, and Meta may combine it with other information it holds, including from your use of Meta's services, under Meta's own terms and privacy policy (https://www.facebook.com/privacy/policy). Using the Meta Pixel can be a "sale" or "sharing" of personal information, or "targeted advertising," under some U.S. state privacy laws.

On www.spacezodiacs.com the page also loads the TikTok Pixel, a measurement tool provided by TikTok, so that we can measure and improve our advertising on TikTok. It receives page views; account sign-ups, with an internal identifier so that a sign-up is not counted twice; Cash Shop checkout starts, with the product; and completed Cash Shop purchases, with the product, its price and currency, and an order identifier. These events do not include your email address, password, username, or support messages. TikTok also receives information from your browser when the pixel loads or sends an event, such as your IP address, browser and device information, the page address, and identifiers in TikTok cookies, under TikTok's own terms and privacy policy (https://www.tiktok.com/legal/privacy-policy). Using the TikTok Pixel can be a "sale" or "sharing" of personal information, or "targeted advertising," under some U.S. state privacy laws. The Android app shows the website, so the measurement tools in this section also run in the app.

For verified real-money Cash Shop and manga purchases, our server also sends a Purchase event to Meta through the Conversions API after payment and delivery are confirmed. This helps measure purchases when the browser does not return from checkout. The event includes the order identifier, product, paid amount and currency, payment time, and the IP address, browser information and existing Meta cookie identifiers captured when checkout began. It does not include your email, username, password, payment-card details or support messages. Browser and server purchase events use the same order-based event identifier to help Meta avoid counting them twice. The private delivery journal keeps matching information while attempting delivery, removes it after Meta accepts the event, and schedules daily removal of remaining matching information more than seven days old. Operational interruptions may delay scheduled cleanup. Payment records and a delivery record without these matching fields remain for payment integrity and troubleshooting.

If your browser sends a Global Privacy Control signal when checkout begins, we do not capture matching information or send that checkout's server purchase event. The application also does not load the Meta Pixel when the signal is enabled. The TikTok Pixel is not loaded either. Space Zodiacs has no separate application-level handling for a browser's Do Not Track signal. This does not describe a service provider's own response. You can also contact our privacy email to opt out of the sale or sharing of your personal information, or about other rights that apply to you.

Vercel describes its default Web Analytics as cookie-free aggregate measurement and Speed Insights as performance measurement. Exact provider-side collection, cookies, retention, and responses to privacy signals for this deployment have not been confirmed. Provider information is available at https://vercel.com/docs/analytics/privacy-policy and https://vercel.com/docs/speed-insights/privacy-policy. The application statements above are not promises about all provider practices.

8 Who can receive information

Information is handled by Mortex LLC, authorized server or dashboard operators, and the providers needed for the enabled services: Vercel for hosting and measurement, dedicated Space Zodiacs Supabase Auth/Postgres for accounts, gameplay storage and play statistics, Stripe for real-money purchases, Meta Platforms and TikTok for advertising measurement as described in section 7, and Gmail for messages sent to our contact address. Privileged operators can access private records. Support and guide-review access requires separate role provisioning; the existence of those features does not mean a staffed support team has been established. Public profile and approved-guide information is visible as described above.

Stripe processes optional real-money purchases on its own checkout page. Card and billing details are entered with Stripe and are not received by Space Zodiacs. We receive and keep order records, such as the account, the product, its price and currency, Stripe checkout and payment identifiers, the payment status, any refund or dispute, and the receipt for the items delivered to your game. Stripe's privacy policy is available at https://stripe.com/privacy.

We may also disclose information when required by law or when legally permitted and reasonably necessary to investigate misuse, respond to a legal claim, or protect people and the service. We do not authorize publication of a private support ticket merely because you submitted it.

9 Storage, account deletion, and privacy requests

Browser data and server records have different lifetimes. Browser data can remain until it is cleared, overwritten, or removed by the application or browser. While an account exists, its account, gameplay, guide, support, and security records are kept for their operating purpose, request handling, security, and applicable legal obligations. Play statistics are kept for up to 400 days, then deleted.

You can delete your account at any time: sign in, open Settings, choose Delete account, and type DELETE to confirm. You can also email henry.m.martinez93@gmail.com from the email address on your account to ask us to delete it; we may ask for reasonable information to confirm the request first. Deletion takes effect at once and cannot be undone. It deletes your sign-in (email address, password, and any Google sign-in link), your profile, username, and player card, your saved game and its daily copies, your heroes, items, balances, and progress, your friends, blocks, and guild membership, your chat messages and mail, your support tickets, the reports you made, your play statistics, and your sign-up record. Unused paid items are lost and are not refunded, except where the law requires.

After deletion we keep only: payment and order records (the product, price, currency, Stripe payment identifiers, payment status, any refund or dispute, and the receipt for items delivered), linked to an account number and not to your email address, for as long as tax and accounting law requires, generally up to seven years; reports other players made about the account, for up to one year; and copies in our database backups, which are removed automatically as the backups expire, within 30 days. Hosting and security logs are kept by our providers for their own limited periods. Stripe keeps its own payment records under its privacy policy. Step-by-step instructions are at https://www.spacezodiacs.com/delete-account.

You can also email us from the email address on your account to request access, correction, or information about other rights that apply where you live. We may need reasonable information to verify a request and protect other people's data. We will explain any applicable reason a request cannot be fulfilled as asked.

10 Children and updates

Space Zodiacs is intended for adults 18 and older who live in the United States or Japan. People under 18 are not permitted to use the service. If you believe someone under 18 has provided information contrary to these rules, contact our privacy email so we can investigate. The eligibility rule is not a claim that the service never receives information from an underage person.

We will update this policy when our practices change and provide any additional notice or choices required by law. The update date appears above. Materially different data uses require an updated notice before they are introduced.

11 Additional information for people in Japan

Mortex LLC (representative: Michael Martinez) handles personal information of people in Japan under the Act on the Protection of Personal Information. Our address is provided without delay on request to the contact email. Information is stored and processed mainly in the United States, through the providers named in sections 7 and 8; agreeing to this policy at signup is consent to that transfer. The United States has no single federal privacy law equivalent to Japan's; privacy is protected by sector-specific federal laws, Federal Trade Commission consumer protection, and state laws. Our providers apply access controls and encryption under their own policies and contracts. We limit who can access personal data, use encrypted connections and an authentication service that does not store plain-text passwords, and prevent browsers from writing gameplay records directly. You can delete your account in Settings at any time (section 9). You can ask us, free of charge, to tell you how your data is used, to disclose it (including electronically) or our records of providing it to others, to correct, add to or delete it, or to stop using or sharing it. The Japanese version of this policy lists the information sent from your browser to outside companies, as Japan's Telecommunications Business Act requires.

Space Zodiacs プライバシーポリシー（日本語版）

最終更新日：2026年10月26日

1 事業者

Space Zodiacs（https://www.spacezodiacs.com ）と Space Zodiacs の Android アプリは、次の事業者が運営しています。

当社は、日本の個人情報の保護に関する法律（以下「個人情報保護法」といいます）その他の関係法令を守り、このプライバシーポリシーに従ってお客様の個人情報を取り扱います。このポリシーは、ブラウザゲーム、Android アプリ（ウェブサイトと同じゲームを表示します）、アカウント、プロフィール、ソーシャル、サポート、ガイドの各機能のうち提供中のものに適用されます。

2 取得する情報

当社は、次の情報を取得します。

3 利用目的

取得した情報は、次の目的に利用します。

4 業務の委託と第三者への提供

当社は、本サービスの運営に必要な範囲で、次の事業者に個人情報の取扱いを委託します。

当社は、次の場合を除き、お客様の同意なく個人データを第三者に提供しません。

公開プロフィールやソーシャル機能の情報は、第2条のとおり他のプレイヤーに表示されます。公開した内容は他の人が見たり複製したりできるため、削除をご依頼いただいても、本サービスの外で作られた複製が消えることはお約束できません。

5 外国にある第三者への提供

当社は米国の事業者で、お客様の情報は、第4条の委託先と第6条の事業者を通じて、主に米国で保存・処理されます。アカウントの作成時にこのプライバシーポリシーに同意いただくことで、お客様は、これらの外国の事業者へ個人データを提供することに同意したことになります。

6 外部送信（Cookie等）について

本サービスのページを表示すると、次の情報がお客様の端末から外部の事業者に送信されます（電気通信事業法にもとづく公表事項です）。

ブラウザが Global Privacy Control（GPC）の信号を送っている場合、本サービスは Meta Pixel と TikTok Pixel を読み込みません。これらによる送信の停止を希望される場合は、当社までご連絡ください。Android アプリはウェブサイトを表示するため、これらの送信は Android アプリでも行われます。チャットの自動翻訳は、チャット画面の「翻訳」の切り替えで止めることができます。Vercel の解析と性能の測定については、本サービス側で停止する設定はありません。本サービス独自のプレイの統計（第2条）は当社のサーバーに送信するもので、外部の事業者への送信ではありません。

7 安全管理措置

当社は、個人データの漏えいなどを防ぐため、次の措置を講じています。

8 保存期間とアカウントの削除

ブラウザ内のデータは、お客様が消去するか、本サービスやブラウザが削除するまで残ります。アカウントがある間、アカウント、ゲーム、ガイド、サポート、セキュリティの記録は、それぞれの目的、お問い合わせへの対応、セキュリティ、法令上の義務のために必要な期間保存します。通報の記録は最長1年間保存します。プレイの統計は最長400日間保存し、その後削除します。

お客様は、いつでもアカウントを削除できます。ログインして設定を開き「アカウントを削除」を選び、確認のため DELETE と入力してください。アカウントのメールアドレスから henry.m.martinez93@gmail.com にメールで削除をご請求いただくこともできます（ご本人の確認のため、必要な情報をお願いする場合があります）。削除はただちに行われ、元に戻すことはできません。ログイン情報（メールアドレス、パスワード、Google アカウントとの連携）、プロフィール、ユーザー名、プレイヤーカード、セーブデータとその日ごとの写し、ヒーロー、アイテム、残高、進行状況、フレンド、ブロックの一覧、ギルドの所属、チャットのメッセージ、メール、サポートチケット、お客様が行った通報、プレイの統計、利用資格の記録が削除されます。未使用の有料アイテムは失われ、法令で必要な場合を除き、返金はいたしません。

削除の後も、次のものだけを保存します。決済と注文の記録（商品、価格と通貨、Stripe の決済の識別子、決済の状況、返金や異議申立ての有無、付与したアイテムの記録）は、メールアドレスではなくアカウント番号とだけ結び付けて、税務・会計の法令で必要な期間（通常は最長7年間）保存します。他のプレイヤーからの通報の記録は最長1年間保存します。データベースのバックアップに残る写しは、バックアップの期限が切れると自動的に消去されます（30日以内）。ホスティングやセキュリティの記録は、各委託先がそれぞれの限られた期間保存します。Stripe は、自社の決済記録を Stripe のプライバシーポリシーに従って保存します。詳しい手順は https://www.spacezodiacs.com/delete-account をご覧ください。

9 開示等のご請求

お客様は、当社が保有するお客様の個人データについて、利用目的の通知、開示（電子的な方法による開示を含みます）、第三者提供の記録の開示、訂正・追加・削除、利用の停止・消去、第三者への提供の停止を請求できます。アカウントは設定からいつでも削除できます（第8条）。そのほかのご請求は、アカウントに登録されたメールアドレスから henry.m.martinez93@gmail.com までご連絡ください。ご本人であることを確認するため、必要な情報のご提供をお願いする場合があります。代理人による請求の場合は、代理権を確認できる書類をお願いします。手数料はいただきません。ご請求に応じられない場合は、その理由をご説明します。ご請求を受け付けたことは、書き出しや削除が完了したことを意味しません。

個人情報の取扱いに関する苦情やご相談も、同じ連絡先で受け付けます。

10 年齢について

本サービスは、18歳以上の方を対象としています。18歳未満の方はご利用いただけません。18歳未満の方の情報が提供されたと思われる場合は、当社までご連絡ください。

11 このポリシーの変更

当社は、取扱いの内容が変わるときや法令の改正があったときに、このポリシーを変更します。変更するときは、本サービス上でお知らせし、法令で必要な場合はあらためて同意をお願いします。改定日はこのポリシーの冒頭に記載します。このポリシーには英語版と日本語版があり、日本国内にお住まいのお客様には日本語版が適用されます。