Stratum

Privacy Policy

Last updated: November 6, 2026

1. Who We Are and What This Policy Covers

Stratum Protocol LLC ("we", "us" or "our") operates Stratum Protocol, an online multiplayer business-simulation game, at sgame.to, the private worlds hosted at private.sgame.to, and the Stratum Protocol apps for iOS and Android, which display the same game (together, the "Service"). This Privacy Policy explains what personal information we collect when you use the Service, how we use and share it, how long we keep it, and the choices and rights you have. Stratum Protocol LLC is the controller of that information.

The companies, people, markets and events inside the game are fictional. This policy is about you, the real person who plays.

This Privacy Policy is written in English. Translations are provided for convenience only; if they differ, the English version prevails.

2. Information We Collect

We collect the following information.

  • Account information: your username, email address and password (stored only as a one-way hash), your language, and your time zone if you choose to share it. If you set up a passkey, we store its public key and the name you give it; the private key stays on your device.
  • Game activity: the corporations, businesses, parties, trades and other actions you take in the game, when you were last active, the days on which you played, your answers to in-game surveys, and which version of a feature you were shown when we test changes.
  • Content you write: the names you give corporations, brands and parties, descriptions, comments, posts and listings, feedback you send us, and reports or appeals you submit.
  • Purchases: if you buy Stratum Pro or a private world, the plan, price, currency and payment status, your Stripe customer reference and, if you provide them, your billing name, address and phone number. You enter card details directly with our payment processor, Stripe; they never reach our servers.
  • How you found us: when you sign up, the campaign or referring website that brought you (if any), the first page you visited, your screen width, and the invitation code you used, if any. If you arrived through an invitation link, we record that visit, including your browser's user agent and the referring website, and link the new account to the player who invited you.
  • Technical information: your IP address and the pages you request, which appear in our server logs, your browser's user agent, and the cookies and similar storage described in section 7.

To create an account you must give us a username, an email address and a password; without them we cannot provide the Service. Everything else is optional or is generated as you play.

3. How We Use Information

We use personal information to:

  • create and secure your account, sign you in and run the game;
  • process payments, manage subscriptions and keep billing and tax records;
  • send you the emails the Service requires (such as password resets, receipts and invitations) and, unless you turn them off, game notifications and digests;
  • show your username, your corporations and your other in-game activity to other players as described in section 5;
  • moderate content, enforce our Terms and Conditions, and prevent fraud, cheating and abuse, including by limiting how often requests can be made;
  • answer your feedback and support requests; authorized staff may access an account when this is needed to provide support, investigate a problem or enforce the Terms;
  • understand how the Service is used and improve it, including through usage analytics (Google Analytics only with your consent) and by testing different versions of a feature;
  • measure, only with your consent, which of our ads on Google lead people to sign up or make a purchase, as described in sections 6 and 7; and
  • comply with legal obligations and protect our rights.

We do not sell your personal information, we do not show third-party advertising, we do not use your information to personalize ads or for remarketing, and we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

We use an AI service to write some in-game text, such as grant descriptions, from game data like resource names. We do not send it your personal information or anything you write.

4. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, Switzerland or Brazil, we rely on the following legal bases:

  • Contract: to provide your account, the game, purchases and the emails the Service requires.
  • Legitimate interests: to keep the Service secure, prevent fraud and abuse, moderate content, measure how the game is played from our own records, improve the game, and keep records that help resolve disputes. We weigh these interests against your rights.
  • Consent: to use Google Analytics cookies and measure which of our ads lead to sign-ups and purchases, to keep a record of how you found us in your browser, and to name you in public stories about your achievements. You can withdraw your consent at any time; this does not affect processing that took place before you withdrew it.
  • Legal obligation: to keep payment and tax records and to respond to lawful requests.

5. What Other Players and the Public Can See

Stratum Protocol is a shared world, so some information is visible to others:

  • Anyone, including people who are not signed in, can see your public player profile: your username, when you joined, a general streak level, how many corporations and parties you have founded, and your badges. If you turn on your achievement showcase, it also shows your achievement score and up to six achievements you choose. The names of corporations, brands and parties are public too.
  • Signed-in players can also see who runs a corporation or founded a party, rankings that include founders' usernames, and the comments, posts and listings you publish.
  • We name you in public stories, such as on the home page or in the weekly world report, only if you have opted in, and you can withdraw at any time.
  • If you invite someone, they can see your username.

Your email address, billing details and payment information are never shown to other players.

Please do not put personal information in usernames, names or other content you publish in the game.

6. Service Providers and Disclosure

We share personal information only as needed to run the Service:

  • Stripe processes payments and receives your email address, your username, your billing details if you provide them, and the details of your purchases.
  • Resend delivers our emails and receives your email address and the content of each email.
  • Google, if you accept analytics cookies, receives information about your visits through Google Analytics, as described in section 7, to measure how the Service is used. When you then sign up or pay for a purchase, Google also receives that event with its amount, its currency and the products bought, but never your name, username or email address, so that Google Ads can tell us which of our ads led to it.
  • OVHcloud hosts our servers and database in the United States.

These providers process information on our behalf or under their own terms and privacy policies. We may also disclose information when the law requires it, to protect the rights, property or safety of our players, the public or ourselves, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to the information transferred.

7. Cookies and Similar Technologies

We use a small number of cookies and similar browser storage:

  • Essential: a session cookie that keeps you signed in until you close your browser, a cookie that remembers your private world, a cookie that remembers your language for one year, and a cookie that remembers your cookie choice for six months.
  • Invitations: when you open an invitation link, a cookie holds a random reference for up to 30 days so the invitation can be credited when you sign up; it is removed when you create your account.
  • Analytics and ad measurement: only if you accept analytics cookies in our cookie banner, we load Google Analytics, which sets its own cookies to tell visits apart and, if you came to us through one of our Google ads, to link a later sign-up or purchase to that ad. Google may collect information about your online activity over time and across different websites. We do not use these cookies for remarketing or to personalize ads. If you accepted before November 6, 2026, when the banner did not yet mention ads, we ask you again. You can change or withdraw your choice at any time with "Cookie settings" at the bottom of every page; withdrawing stops Google Analytics and deletes its cookies. You can also block these cookies in your browser or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
  • Payments: on the checkout and subscription pages, Stripe sets cookies to process payments and prevent fraud.
  • Browser storage: the app keeps some preferences in your browser, such as your language, your active corporation, pinned notifications and unsaved drafts, and, only if you accept analytics cookies, how you found us before you signed up.

The Service does not respond to browser "Do Not Track" signals, because there is no common standard for them. We do not sell personal information. Some US state laws may treat measuring our ads with Google as "sharing" personal information for cross-context behavioral advertising. This only happens if you accept analytics cookies, and we treat a Global Privacy Control signal as an opt-out: with it, we tell Google not to use your visits for advertising, even if you accept. Our iOS and Android apps do not measure ads.

8. How Long We Keep Information

We keep personal information only for as long as we need it:

  • Account information for as long as your account exists. We also keep a history of changes to account records, such as a previous email address, for security and to resolve disputes, until you delete your account.
  • Game data until the world it belongs to is reset; a world reset erases gameplay data but keeps accounts, purchases, moderation records and consents.
  • Records of in-game actions for 90 days, and the browser and referring-website details of invitation visits for 90 days.
  • Payment and billing records for as long as tax and accounting law requires.
  • Moderation reports, actions and appeals for as long as they are needed to enforce the Terms and handle appeals.
  • Server logs are rotated automatically and kept only for a limited time. Database backups are replaced on a rolling basis and kept for about five days.
  • A suspended private world is deleted after 90 days, and an unpaid private-world order after 24 hours.

When you delete your account (section 11), we delete or anonymize your personal information straight away: your email address, password, passkeys, saved payment details, notifications, activity history and the history of changes to your account are deleted, and your username is replaced with an anonymous name; copies of your old username may remain in in-game messages other players received before the deletion. Corporations that only you own are liquidated. What you did in the shared game world, such as posts, votes and trades, stays in the game under that anonymous name. We keep purchase and moderation records only as long as we need them to comply with the law, resolve disputes or enforce our agreements. Deleted information leaves our rolling backups within about five days.

9. Security

We protect personal information with measures that include encrypted connections (HTTPS), one-way hashing of passwords, passkeys whose private key is never shared with us, card payments handled entirely by Stripe, and access to production systems limited to authorized staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

10. International Transfers

The Service is hosted in the United States. If you use it from another country, including from the European Economic Area, the United Kingdom, Brazil or Russia, your information is transferred to and processed in the United States, where data-protection laws may differ from those of your country. Our service providers may also process information in other countries. Wherever your information is processed, we protect it as described in this policy.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy in a portable format;
  • correct inaccurate information;
  • delete your information;
  • object to or restrict certain processing, including processing based on our legitimate interests;
  • withdraw any consent you have given; and
  • not be discriminated against for exercising these rights.

You can change your email address, language, time zone and email preferences in your account settings, and our notification emails include a link to unsubscribe. You can delete your account yourself at any time in your account settings: after you confirm with your password or a passkey, we cancel any Stratum Pro subscription, sign you out on every device and delete or anonymize your personal information as described in section 8. To exercise any other right, or if you can no longer sign in, email us from the address registered to your account as described in section 14. We may need to verify your identity before acting on a request, and we will respond within the time the law requires.

If you are in the European Economic Area, the United Kingdom or Switzerland, you may also lodge a complaint with your local data-protection authority. If you are in Brazil, you may also contact the Autoridade Nacional de Proteção de Dados (ANPD). California residents may exercise these rights through an authorized agent; we do not sell or share personal information as those terms are defined under California law.

12. Minimum Age

Stratum Protocol is intended for adults. You must be at least 18 years old to create an account, and you confirm this when you sign up. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete its personal information. If you believe a minor has given us personal information, contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and if the changes are significant we will tell you in advance, for example by email or with a notice in the game. If you continue to use the Service after an update, the updated policy applies to you.

14. Contact

Stratum Protocol LLC is responsible for your personal information. For questions about this policy, or to exercise your rights, email business@sgame.to with the subject "Privacy". Please send requests about your account from the email address registered to it.

← Back to Home