Privacy policy

This policy describes how Astera Online handles information when you visit asteraonline.com or play at play.asteraonline.com. Last updated 11 October 2026.

Astera Online is a free-to-play browser game operated at asteraonline.com and play.asteraonline.com. This policy is written for that service.

What we collect

If you play as a guest, we create a guest account and store a session token in your browser so you can keep playing. If you register, we store the email address and password hash you submit, or a Google sign-in identifier if you use Google. Gameplay data (pilots, ships, market, chat, and similar world state) lives on our game servers so the shared universe can run.

If you email [email protected], we use that message to reply. If you write on the forums or Discord, that service’s own terms apply to those messages.

Cookies and similar storage

Necessary. Session and refresh tokens (including localStorage keys used to restore a login) so you can play. These are required for the game. We set them whether or not you accept advertising cookies.

Advertising. The Reddit Ads Pixel records page views and, on the play host, conversion events such as guest start, email register, first undock, and other first-time play actions (warp, mine, mission, market, and similar). We do not send your email address to Reddit. In the EEA, United Kingdom, and Switzerland we load that Pixel only after you choose “Accept advertising.” Elsewhere it loads unless you choose necessary-only. You can change this at any time via Cookies in the footer.

Your choice is stored in a first-party cookie named astera_consent on .asteraonline.com so the marketing site and play.asteraonline.com can share it.

Advertising partners

Reddit processes Pixel events to measure and deliver ads you see on Reddit. See Reddit’s privacy policy for how Reddit uses that information.

Other processors

We use hosting and operations providers to run the servers. Optional error monitoring (Sentry) may receive technical diagnostics when it is configured on a build. Google receives data if you tap Google sign-in. The marketing pages load fonts from Google Fonts.

Why we use this information

To operate the game, keep you signed in, secure accounts, measure whether paid ads lead to play, and diagnose outages. We do not sell your personal information.

How long we keep it

Game accounts and world data remain while the service runs and the account exists. Advertising consent is remembered for up to 400 days, then we ask again. You can change cookie consent earlier from the footer.

Children

The service is not directed at children under 16. Do not create an account if you are under 16.

Your choices

You can play as a guest, register, or delete a session by signing out and clearing site data. You can refuse advertising cookies. You can ask about your account at [email protected] or on the contact page.

International visitors

Servers and partners may process data outside your country, including the United States and the European Union. We infer EEA, UK, or Swiss visitors from browser timezone and language (we do not look up your IP for this). If that guess is wrong, use Cookies in the footer. US state privacy laws that work as opt-out are handled the same way: advertising cookies load until you choose necessary-only.

Changes

We will update this page when the practices described here change. The date at the top is the latest revision.