Your wallet information.

Account information

We use your email address to send a sign-in code and connect you to your wallet. The wallet stores an account identifier, Credit balance, purchase and reward history, and the paid items attached to your account. Account profiles also store a generated public name, requested username and review status. Custom names stay private until approved.

Payments

Stripe handles payment details. The wallet stores order references, pack amounts, payment status, policy acceptance and Credit adjustments so purchases, refunds and support enquiries can be checked. Card details are not stored by the Cosmic Credits wallet.

Sign-in and security

A secure sign-in cookie keeps you logged in for up to seven days, with a 24-hour inactivity limit. Signing out everywhere revokes all current account sessions. Sign-in codes expire after ten minutes and can be used once. Cloudflare Turnstile and limits on sign-in requests help prevent abuse. Security checks may process your IP address; internal rate limits use a hashed identifier.

Service providers

Cloudflare hosts the website and wallet database and provides Turnstile checks. Resend delivers sign-in emails. Stripe processes payments and receipts. These providers process information needed for those services and may operate in other countries.

What games receive

A supported game can request the Credit balance, its available paid items and the items you own for that game through the console. Games do not receive your email sign-in code, sign-in cookie or payment card details through this integration.

Game reward records

Connected reward services use a short-lived ticket to attach a verified game reward to your signed-in wallet. The ticket contains no email address or account identifier for the game to read. Private reward records link the game, build, reward rule and event to the wallet entry, so repeated requests cannot award the same event twice and reward limits can be checked. Games do not receive a secret that lets them choose or issue Credits. Editable saves and browser activity reports do not prove a reward was earned.

Inventory, saves and gifts

Participating games can keep purchased item ownership, consumable usage and account cloud saves on the server so they can be used on another device. These features require each game to be connected. Cloud-save records include the game, slot, format version, revision and progress payload. Gift records identify the purchaser, item and recipient or single-use redemption code. Ordinary free play does not require an account; guest saves stay on the device.

Optional game activity

When you are signed in and a game is connected, it can send its game and build identifier, session signals, estimated active time, progress percentage and registered milestones. The server uses its own timing and merges overlapping sessions across devices. These browser reports may be incomplete and do not prove who authorised a payment. They support account history and purchase enquiries; they do not automatically remove your consumer rights. Guest play does not create an account playtime record. We do not collect raw keystrokes or screenshots through this service.

Detailed activity intervals are removed on the next game sync after 48 hours; expired session metadata is cleaned on the next account session start. Compact account/game totals, progress and milestone records remain for history and support. There is no scheduled deletion sweep in this version. Spending settings, changes to those settings and purchase-help requests are also recorded privately. Financial and support records have separate retention requirements.

Public names

Future public leaderboards will use a generated or approved player name, with a separate account identifier. Your email and pending name requests are private. Real Google sign-in is not connected in this version; a Google name or photo will not automatically become a public profile.

Records and contact

Order and wallet records are retained to run purchases, respond to support requests and maintain financial records. This sign-in does not subscribe you to marketing emails. Contact us through wallet help about account access, corrections or removal requests. Some transaction records may need to be retained after an account closes.

Privacy information version: 2026-10-15. A demonstration wallet contains sample data and does not create a real account.