Exil Island browser alpha — Privacy notice
Prepared 9 October 2026
Updated 17 October 2026
Privacy in brief
FDST PROD SRL, Romania, operates this browser alpha. Contact us privately at fdstprod@gmail.com about your data. Guest play needs no email or password, but player IDs link your account, display name and saves. Sign-in, game connections and saved account data are needed for online play. Chat, reports and gameplay analytics are optional.
Gameplay analytics is currently enabled by default after guest sign-in unless this browser has a saved off choice. You can turn it off in Settings > Analytics privacy without blocking play. Analytics links play information to your player ID; it is not anonymous statistics. Our GA user/event retention control is 14 months, with activity reset off. Seven-day gameplay resets do not erase all account or provider data. The full notice below explains providers, retention and your rights.
Who this notice covers
The controller is FDST PROD SRL, registered in Romania. This notice covers the Exil Island browser alpha and our handling of its player data.
This alpha is for players aged 16 or older. By playing, you confirm that you are 16 or older. Playing or reading this notice is not consent to analytics or every use of your data.
What we use and why
We receive data through guest sign-in, gameplay, your chosen communications and the services supporting the game. In-game position and health values are game data, not your physical location or medical information.
| Purpose | Data involved | GDPR lawful basis |
|---|---|---|
| Run returning-guest multiplayer and protect its security and reliability | Guest/player IDs and account mappings, display name, game saves including inventory, progress, in-game position, teams and buildings; necessary connection information, IP-related, device and error metadata | Legitimate interests, Article 6(1)(f), in providing functioning multiplayer, returning guest access and necessary service security and reliability |
| Deliver chat you choose to send | Player ID, display name, message and channel/team routing | Legitimate interests, Article 6(1)(f), in delivering the communication you request |
| Respond to voluntary bug reports and ordinary support | Submitted text, player ID, platform, game version, request reference and submission time; contact details and issue information you supply by email | Legitimate interests, Article 6(1)(f), in responding to issues and fixing faults |
| Understand play and compare improvements across updates | Player-linked platform/version, sessions and play time, tutorial progress and selected milestones, with basic browser/device information and cookies or similar identifiers | — |
| Document analytics choices and handle privacy requests | Consent receipts contain exactly player ID, choice, notice version and server receipt time; requests contain necessary correspondence and verification/handling information | Legal obligations, Article 6(1)(c), limited to demonstrating consent and responding to applicable rights |
| Limit submission abuse | Account-linked analytics-consent counters and report cooldown records | Legitimate interests, Article 6(1)(f), in necessary service security and abuse prevention |
Chat, reports and analytics are optional. Public chat reaches its public audience; team chat is intended for your team. Neither is a confidential support channel or an end-to-end encrypted service. Avoid putting sensitive information or other people's personal details into chat or reports. Reports retain the identifiers described above; text is not automatically scrubbed of personal details.
Browser storage remembers guest sign-in, preferences, local progress information and your analytics choice where storage is available. Clearing it, using private browsing or changing browser/profile can lose guest access and preferences; recovery is not guaranteed. Local preferences remain until you clear them. Authentication and provider records have separate lifetimes.
Your analytics choice
Gameplay analytics is enabled by default after guest sign-in unless this browser has a saved off choice. You can turn analytics off or change your choice in Settings > Analytics privacy. Your choice is remembered in that browser where storage is available. Turning analytics off does not prevent required sign-in, connections or gameplay.
Analytics helps us compare returning players, tutorial/progression outcomes and milestones across updates to understand which changes improve the game. Turning analytics off stops future optional collection. It does not automatically erase earlier provider data. Where you have given consent, you can withdraw it in Settings > Analytics privacy; withdrawal does not undo processing that was lawful before withdrawal. Contact us for erasure or other applicable rights concerning earlier data.
Providers and locations
Google Firebase Authentication, Firestore and Functions support guest identity and backend records; Google Analytics provides optional measurement. Our backend database and Functions are in the United States, and Firebase Authentication runs from US data centres. Google also processes data through global infrastructure. See Firebase's privacy information.
Photon, operated by Exit Games, supports multiplayer connections and public chat through global infrastructure. See Photon's data-protection information.
Hostinator, operated by ALLKEY ASSISTANCE SRL and using Hetzner infrastructure, hosts our current game servers in Germany. The Exil Island developer and Alex, Hostinator's owner, can access/download game saves through Hostinator. This does not describe every provider's authorised personnel.
These providers process data to deliver hosting, identity, backend or networking services for us. They may also process data for their own service or platform purposes described in their policies.
itch.io hosts the page/browser game and handles its own platform activity under itch.io's privacy policy. Discord feedback and itch comments are visible to their chosen audiences and subject to those services' policies. Following a Steam link is separate Steam service activity.
For transfers outside the EEA, Google describes the EU–US Data Privacy Framework for covered US transfers and Standard Contractual Clauses where applicable. Photon states that it uses Standard Contractual Clauses for non-EU transfers. Contact us for information or copies of applicable transfer safeguards. These provider statements do not mean all processing takes place in the EU.
Our retention policy
Cleanup we control is handled manually; provider services have their own deletion cycles. The following periods are our policy, rather than a promise that a gameplay reset deletes every physical copy.
| Data | Retention policy |
|---|---|
| Gameplay cycle | Seven days, with no progression carryover after reset. A gameplay reset does not establish erasure of all physical data |
| Game-server instance files: saves, recovery backup copies and logs | Maximum 21 days, removed through manual instance deletion. Copying or restoring data into a new instance does not restart its original retention deadline |
| Itch-only guest identities and account mappings | While the alpha runs, then deletion within 30 days of closure; shared or other-platform records are handled separately |
| Google Analytics user/event data | 14-month retention control, reset on new user activity off. Google deletes expired data monthly; standard aggregated reports are outside this control |
| Submitted bug reports | 90 days from submission. Personal data must be removed from general bug notes kept longer |
| Ordinary support correspondence | 90 days after resolution |
| Operational logs outside game-server instances | 30 days for logs we control, including ordinary Google Cloud operational logs. Google Cloud mandatory audit logs have a separate 400-day period; other provider logs can differ |
| Submission-abuse records | Manual cleanup target: analytics-consent counters become eligible 24 hours after their current one-hour window starts, checked daily; report cooldowns target 24 hours after the last newly accepted report |
| Minimal consent receipts | While associated analytics data is retained or relied on, then removal unless a specific legal obligation justifies longer retention |
| Privacy-request records | Unnecessary attachments removed after resolution; only a minimal handling record kept for 12 months after closure |
| Local preferences | Until you clear them |
| Chat and provider connection/security data | Used for communication/session delivery and service/security purposes, with provider retention described in the linked policies; no universal session-end deletion period is promised |
Deleting a game-server instance does not promise erasure of provider-held snapshots, backups or logs; those have separate provider deletion cycles.
Firebase states that Authentication IP logs are kept for a few weeks. Other Authentication data remains until the customer requests deletion, followed by removal from live and backup systems within 180 days. See the Firebase privacy information linked above.
Routine periods allow earlier erasure where applicable. Any longer retention for a specific legal obligation or legal claim must be limited to what is necessary. Ending alpha access, removing the build or resetting gameplay does not itself delete identities, analytics, reports, logs or backups.
Your rights and contacting us
Where applicable, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent where we rely on it.
Email fdstprod@gmail.com privately. An optional player ID can help locate records, but is not ownership proof by itself. We may request proportionate verification before disclosing or changing data. Do not send passwords, sign-in tokens or other secrets, or post personal details in public comments or chat.
We respond without undue delay, normally within one calendar month. Where the law permits an extension because of complexity or request volume, we will explain it within that month. You may complain to Romania's ANSPDCP or your local EEA data-protection authority.
We will inform you before material new purposes or consent changes. This notice does not authorise every future use of your data.