Legal

Privacy Policy

Last updated: October 3, 2026

This Privacy Policy explains how Cygnus Works ("we", "us") handles information when you use meridianvoid.cygnusworks.com, create an account, or play Meridian Void (together, the "Services").

1. Who we are

Cygnus Works is the controller of personal data processed through the Services. You can reach us at contact@cygnusworks.com or, for privacy requests, the same address.

2. Age requirement

The Services are intended for users who are at least 13 years old. They are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.

3. What we collect

Account data: your email address and a unique account identifier, provided through our authentication provider when you sign up with email or Google. The account is one Cygnus Works account: Meridian Void, Thanatide and every cygnusworks.com site sign in with it, and it is kept by Google Firebase Authentication in our project meridianvoid-cc010. Signing in, creating an account and resetting a password happen at cygnusworks.com/account, whose privacy page describes the session cookie it sets for every cygnusworks.com site. This site keeps its own Firebase session in your browser, signed in from that shared one.
Profile data: your account username, in-game pilot names, and the badges, cosmetics, and achievements on your account.
Gameplay data: standings and statistics shown on leaderboards and public profiles (for example kills, wealth, reputation, and systems discovered).
Linked accounts: if you choose to connect a Discord or Twitch account, we store that service's user ID and username to link it to your account. You can unlink at any time.
Support & feedback: the contents of support tickets and Bug Council reports you submit, so we can respond and act on them.
Purchase data: if you buy something, our payment processor handles your card details (we never see or store them); we keep a record of the transaction, what it was for, and the amount.
Technical data: standard server logs such as IP address, browser type, and timestamps, used for security and to keep the Services running.

We do not sell your personal information, and we do not run third-party advertising trackers on the site.

4. How we use it

To create and operate your account and link it to your in-game pilot.
To display leaderboards, public pilot profiles, and badges.
To provide support and respond to your messages.
To secure the Services, prevent abuse, and meet legal obligations.
To tell you important things about your account or the game.

Our legal bases (where the GDPR applies) are performance of a contract (running your account), legitimate interests (security and improving the Services), consent (where asked), and legal obligation.

5. What is public

Your pilot name, badges, and leaderboard standings are designed to be public on the site and in-game. Your email address is never shown publicly.

6. Service providers

We share data with vendors who process it on our behalf, under contract, only to run the Services:

Google Firebase — account authentication and identity.
DigitalOcean — server hosting for our self-managed PostgreSQL database (accounts, pilots, badges, and standings) and game servers.
Netlify — website and API hosting.
Cloudflare — DNS and content delivery.
Paddle — our payment processor and merchant of record for any purchases; it handles payment details directly.
Discord and Twitch — only if you choose to link one of those accounts, to verify the connection.

These providers may process data in countries other than yours; where required we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

We keep account data for as long as your account exists. When you delete your Meridian Void data from the deletion page here, we promptly remove your website-owned data: your username, badges, cosmetics, alpha access, rename tokens, and any linked Discord or Twitch connections. That deletes only Meridian Void's data. Your sign-in is kept, because it is the shared Cygnus Works account and other games use it. Deleting the whole account is done at cygnusworks.com/account/delete, which deletes each game's data, Meridian Void's included, and then the sign-in itself. We may retain a limited set of records where we have a legal obligation or a legitimate need, such as transaction records for accounting and moderation records for safety and ban evasion. Some data may also persist briefly in backups. Your in-game pilots are governed by the game's own data-retention practices.

8. Your rights

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. You can delete your Meridian Void data at any time from the deletion page, or the whole Cygnus Works account at cygnusworks.com/account/delete, or contact us to exercise other rights. We will not discriminate against you for exercising them. If you are in the EU/UK you may also complain to your local data protection authority.

9. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections and least-privilege database access. No system is perfectly secure, so we cannot guarantee absolute security.

10. Cookies

We use only the cookies and local storage strictly necessary to keep you signed in, including the shared cw_account cookie that cygnusworks.com sets for all of its sites. We do not use advertising or cross-site tracking cookies.

11. Changes

We may update this policy. Material changes will be noted by updating the date above and, where appropriate, by notice in the Services.

12. Contact

Questions or requests: contact@cygnusworks.com.