Privacy Policy

Version 1.0, 15 August 2026.

This is an English translation provided for convenience. The service is operated from the Russian Federation and the data processing described here is governed by Russian law. In case of any discrepancy, the Russian version prevails.

1. Who processes your data

The data controller is Evgeny Dmitrievich Mateshev, self-employed (professional income tax payer), TIN [УКАЖИТЕ ИНН], owner of isolated-islands.mateshev.space (the "Site").

Contact for any data-related question: support@mateshev.space.

This Policy is published as required by article 18.1(2) of Russian Federal Law No. 152-FZ "On Personal Data" and describes how data of users of the Site and of the game Isolated Islands (the "Game") is handled.

2. What we collect

At registration — what you enter yourself:

Automatically while you use the Site and the Game:

While playing — game data linked to your account: progress, the state of your constellation, messages you send to in-game chats, and the time of your last activity.

When paying for a subscription — details of the payment itself: date, amount, status, transaction identifier and the name of the subscription purchased, plus the data needed to issue a receipt (as required by Russian Federal Law No. 422-FZ of 27 November 2018).

Your card details are never passed to us and never stored by us: you enter them on the payment provider's side, and that provider is a separate controller in respect of those details. We only receive the payment result.

We do not collect or ask for: passport data, home address, phone number, card number, or biometrics. Special categories of personal data (health, beliefs, ethnicity and the like) are not processed.

3. Why we do it

Data Purpose
Email, nickname, password hash creating and signing in to your account, password recovery, essential service notices
IP, User-Agent, request time protection against password guessing, automated sign-ups and abuse; investigating security incidents
Cookies and local storage keeping your session so you don't sign in again on every page
Game data and chat messages running the Game itself and handling reports of rule violations
Payment details providing the paid subscription, issuing receipts, tax reporting (422-FZ), handling disputes and refunds
Consent record proving the lawfulness of processing (art. 9(1) of 152-FZ)

We do not use your data for advertising, do not build marketing profiles from it, and do not make automated decisions producing legal effects for you.

4. Legal basis

Processing is based on your consent, given by a deliberate action — ticking the consent box at registration (art. 9 of 152-FZ) — and, to the extent necessary, on performance of the agreement between you and the controller (art. 6(1)(5) of 152-FZ).

Payment details are additionally processed to comply with obligations imposed on the controller by law (art. 6(1)(2) of 152-FZ): issuing receipts and tax accounting. Consent to that processing cannot be withdrawn — such records are kept for the statutory period regardless of what happens to your account.

5. Who receives the data

Data is never sold and never passed to third parties for their own purposes. Only the controller has access to it. Technically, data is processed:

Data may be disclosed to state authorities only on the grounds and in the manner established by law.

6. Where data is stored

Databases containing personal data of citizens of the Russian Federation are physically located on servers in the Russian Federation, as required by article 18(5) of 152-FZ. No cross-border data transfer takes place.

Data of users from other countries is stored in the same place, in Russia: the Site has no storage outside the Russian Federation.

7. Cookies

The Site uses only technically necessary cookies and browser local storage: they keep you signed in and remember that you dismissed the cookie notice. There are no advertising or third-party analytics cookies on the Site.

You can disable cookies in your browser, but signing in will then stop working — there would be nowhere to keep the session.

One exception is Cloudflare Turnstile, which protects the registration form from automated requests. It may set its own technical cookies; registration is not possible without that check.

8. How long data is kept

Account data is kept for as long as the account exists and is deleted within 30 days after the account is removed. Service logs containing IP addresses are kept for no longer than 12 months. Consent remains valid until withdrawn.

Payment records are kept for at least five years — tax and accounting rules require it, and they are not subject to deletion on request even after the account is removed.

9. Your rights

You have the right to:

To do so, write to support@mateshev.space from the address used at registration. We answer within 30 days, and within 10 working days for a request about the fact of processing itself.

Withdrawing consent means the account is deleted: the Game cannot work without processing your email and nickname. Messages you sent to shared chats are anonymised rather than deleted — they are part of other players' conversations.

10. How we protect data

Passwords are stored as bcrypt hashes. The connection to the Site is protected by TLS (HTTPS). Database access is restricted to the internal network and is not exposed to the internet. The registration form is protected against automated requests.

11. Children

The Game is not intended for anyone under 12. If you are under 14, register only with the consent of a parent or other legal guardian; that consent is given by them (art. 9(1) of 152-FZ).

12. Changes to this Policy

The current version is always available at /en/privacy.html. We will announce material changes on the Site. The version date is shown at the top of this document.