Privacy notice.

Your email address, and a password stored only as a hash — we cannot read it, and neither can anyone who takes a copy of the database.

Your agency: its name, avatar, badge colour and the town headquarters stands in.

Your progress: coins, parts, gems, vehicles, buildings, production and the operations you have run.

Community reports you send: what the problem is, where you put the pin, your note and the photo you chose.

That is the whole list. There is no address book, no microphone and no contact upload, and the app sees only the one photo you pick for a report — never the rest of your library.

Earth Commanders asks for your location once, on the screen where you create your agency, so headquarters can start in your own town.

The coordinates are turned into a town name on your device. We store the name, never a coordinate, and never a history of where you have been.

Saying no is a normal answer: headquarters starts in Rotterdam and nothing else changes. The app never asks for background location.

Real hazards come from public feeds. We show what kind of event it is, roughly where, and when it was reported.

We never show casualty figures, victim names or photographs of people, and no feed we use carries them into the game.

Every event on the map is labelled real or simulation. That label is part of the game, not a setting.

The photo you attach is seen by our review team and nobody else — not other players, and not in the app. Before it is stored, the location your phone wrote into it and every other piece of hidden data is removed.

Your pin is rounded to about 100 metres before it is stored, so a report can never point at a front door.

Once a report is approved, other players see what the problem is, roughly where, and your note. They never see who reported it.

Photos are deleted 30 days after a report is closed, turned down or expires. Deleting your agency deletes your reports.

Pushes are off until you allow them, and each kind has its own switch in Settings.

We only send what those switches name: a finished operation, a finished build, a daily reward, a major real event. No marketing pushes.

We do not sell or rent your data, and we do not share it with data brokers.

There are no advertising SDKs, no advertising identifiers and no cross-app tracking.

We do not build a profile of you for anyone else, in the game or outside it.

Other players see your agency name, avatar, badge colour, level and the totals on your profile. They never see your email address, and never which community reports are yours.

Our hosting provider stores the database on our behalf and may not use it for anything else.

Amazon Web Services, in the EU (Frankfurt), delivers the emails we send you — reset codes and address confirmations — and may not use your address for anything else.

We hand data to an authority only when the law actually requires it, and only what it requires.

While your agency exists. Delete it and the account, the identity and the progress go with it.

Backups roll over within 30 days, which is the outside limit on how long a deleted account can still exist anywhere.

Settings → Support → Download my data sends you a copy of everything we hold, to the address you give. Delete my agency, in the same place, removes all of it.

You can also ask us to correct something, object to what we do with it, or restrict it.

In the EU and the UK you also have the right to port your data and to complain to your data protection authority.

Write to [email protected] from the address on the account and we answer within 30 days.

An account needs an email address. If you are under the age where you can agree to this on your own where you live, ask a parent or guardian to set the account up with you.

We do not knowingly keep an account we are told belongs to a younger child — tell us and we delete it.

This website has no player accounts, no forms for visitors, no cookies for visitors, no analytics and no advertising.

The one exception is the staff sign-in under /admin, used only by the people who run the game. It sets a single cookie that keeps a member of staff signed in, on those pages only, and removes it when they sign out.

Its fonts, pictures and 3D code all come from this site itself, so opening a page asks nothing of any other service.