Last updated: 9 October 2026
orbyon.io is a free browser and mobile multiplayer game. We designed it to collect as little personal data as possible: there are no user accounts, we do not track individual players (the game server only keeps anonymous totals of in-game events, with no identifiers), and our game server does not store your IP address. The main data topic is advertising, which appears only on the ad-supported versions and is described below.
| What | Why | Legal basis | Kept |
|---|---|---|---|
| Game settings on your device | Remember your preferences | Functional (your request) | On your device until you clear it |
| Nickname and session identifier | Run your multiplayer session | Providing the game (Art. 6(1)(b)) | Discarded when you disconnect |
| IP address (not stored by us) | Connect you and prevent abuse | Legitimate interest (Art. 6(1)(f)) | Not retained by us |
| Advertising cookies / IDs (ad versions only) | Show and, with consent, personalize ads | Consent (Art. 6(1)(a)) | Per the ad provider's policy |
| Emails you send us | Reply to you | Legitimate interest (Art. 6(1)(f)) | As long as needed to handle your message |
The data controller for this game is Andrea Mazzariello ("we", "us"). For any privacy question or to exercise your rights, contact us at [email protected].
The game stores a small amount of data in your browser's local storage so it can
remember things between sessions: your preferences (audio volume, mute, and display
options) under the key orbyon.io.settings, the nickname you last played with (typed or generated) and your
planet style, your personal bests (score, and the most kills and longest time
survived in one life, under orbyon.io.best), the planet
skins you have unlocked (orbyon.io.skins), and which in-game tips you
have already been shown (orbyon.io.coach). This information stays on
your device, is not linked to any account, is used only to remember your settings and
progress, and is never sent to us. You can clear it at any time by clearing your
browser or app storage.
Legal basis (GDPR): providing the game you request (Art. 6(1)(b)) and our legitimate interest in keeping the service secure and available (Art. 6(1)(f)).
If you write to us (for example at [email protected] to report a bug, or at [email protected]), we receive your email address, the content of your message and anything you attach. We use them only to read and answer your message and handle what you asked. Emails reach us through Cloudflare Email Routing and are stored in a mailbox hosted by Google (Gmail). We keep them only as long as needed to handle your message and any follow-up, and we never add your address to a mailing list.
Legal basis: our legitimate interest in answering the people who write to us (Art. 6(1)(f) GDPR).
Some versions of the game are ad-supported. When ads are shown, third-party advertising providers may set cookies or use advertising identifiers to deliver ads, cap how often you see them, and — only where you have given consent — personalize them. Which provider applies depends on how you play:
Where advertising is personalized, third-party vendors — including Google — use cookies or device advertising identifiers to serve ads based on your prior visits to this game and to other sites and apps. In the EEA, the UK, and Switzerland a consent banner is presented before any personalized advertising or non-essential cookies, and you can withdraw or change your choice at any time through the "Privacy settings" option provided by the consent tool. On game portals, consent is handled by the portal.
You can opt out of personalized Google advertising at Google Ads Settings, and manage third-party advertising choices at aboutads.info/choices (US) or youronlinechoices.eu (EU). On mobile devices, you can reset or limit your advertising identifier in your device settings. Opting out does not remove ads — it makes them non-personalized.
Legal basis: your consent for personalized advertising and non-essential cookies (Art. 6(1)(a) GDPR); where permitted, non-personalized ads and the limited data needed to serve them and prevent fraud may rely on our legitimate interest (Art. 6(1)(f)).
On our own website, the game itself uses only functional local storage (your settings, described above) — no tracking cookies are set by us. On the ad-supported website, the advertising provider may set cookies subject to your consent. Inside the mobile apps and on game portals, cookies as such are generally not used; advertising there relies on the provider's own mechanisms (advertising identifiers) as described in section 2(d).
Our guide page at orbyon.io/how-to-play sets no cookies, uses no local storage and loads nothing from third parties: its fonts and images are served from our own domain.
When ads are active, a detailed and up-to-date list of the advertising cookies and vendors used, together with their durations, is available through the consent tool.
These providers process data on our behalf or in connection with the game:
| Provider | Purpose | Their privacy policy |
|---|---|---|
| Fly.io | Game server hosting; handles the real-time connection | fly.io |
| Cloudflare | Website hosting and content delivery; forwarding of the emails you send us | cloudflare.com |
| Google (AdSense / AdMob) | Advertising on the website and in the apps | policies.google.com |
| Google (Gmail) | Mailbox where the emails you send us are stored | policies.google.com |
| CrazyGames / Poki | Game portal distribution and portal advertising (if you play there) | crazygames.com · poki.com |
| Apple App Store / Google Play | App distribution (mobile only) | apple.com · google.com |
Some of the providers above are based in the United States. When data is transferred outside the EEA, it is protected by the safeguards those providers put in place, such as the EU Standard Contractual Clauses or an applicable adequacy framework.
Settings remain on your device until you clear them. Our game server keeps no personal data after your session ends. Emails you send us are kept only as long as needed to handle them (section 2(c)). Infrastructure connection logs, where kept by our hosting provider, are short-lived. Advertising data is retained by the advertising providers according to their own policies.
The game is served over encrypted connections (HTTPS/WSS), and we apply reasonable technical measures to protect the limited data we handle. Because we hold no accounts and store no personal data on our server, the surface for a breach involving your personal data is minimal by design.
orbyon.io is a general-audience game and is not directed to children under 13 (or the minimum age for data-processing consent in your country, where higher). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will address it.
Under the GDPR you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, to data portability, and to withdraw consent at any time. Because we do not maintain accounts and store no personal data on our server, most requests concern data held on your device (which you can clear yourself) or data held by the advertising providers (which you can exercise directly with them, or through the consent banner). For anything else, contact [email protected].
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali.
We do not sell your personal information for money. If you play an ad-supported version, the sharing of advertising identifiers or cookie data with advertising partners for personalized advertising may be treated as a "sale" or "sharing" of personal information under some US state laws (such as the California CCPA/CPRA). You can opt out by declining consent in the banner or using the advertising opt-out links in section 2(d), and we will not discriminate against you for exercising your privacy rights. California residents also have rights to know, delete, and correct personal information, which you may exercise via [email protected].
We may update this policy as the game evolves or the law changes. Material changes will be reflected by the "Last updated" date above.
Andrea Mazzariello · privacy requests: [email protected] · anything else: [email protected]
See also our Terms of Service.