Privacy Policy
Last updated 25 August 2026
This policy explains what Entropic LLC ("Entropic", "we", "us") collects when you use Captain & Company (the "Game"), capnco.gg, docs.capnco.gg, and related services (together, the "Services"), why we collect it, who we share it with, and what you can ask us to do about it.
Entropic LLC
1309 Coffeen Avenue, Ste 1200
Sheridan, WY 82801
support@capnco.gg
Entropic LLC is the controller of the personal data described here. Using the Services is also subject to the Terms of Use.
One thing works differently from everything else in this policy. Data written to a public blockchain cannot be deleted or corrected by us or by anyone. If you link a wallet and mint, that record is permanent and public. See "Blockchain data" before you link one.
What we collect
Account data. An email address, a display name, and a password or a sign in through a third party provider. We support Google, Discord, X, and Epic Games sign in; when you use one, we receive an identifier and basic profile details from that provider, not your password.
Gameplay data. What you do in the Game: matches played, ships, items, inventory, currency balances and the ledger entries behind them, quests, guild membership, ratings, leaderboard standing, and session start and end times. This is the substance of the Game and we cannot run it without this.
Communications. Chat messages, guild and ship names, and other text you enter, along with reports made about them. We keep these for safety, moderation, and support.
Purchase data. What you bought, when, and the amount. Card details are entered with our payment processor and we never receive or store the full number. We hold a transaction reference and the outcome.
Support data. Anything you send us by email, and our replies.
Technical data. IP address, device and browser type, operating system, approximate region derived from IP, crash and error reports, and performance diagnostics. We use these to run the Services, to investigate faults, and to detect cheating and abuse.
Wallet data. If you choose to link a wallet, its public address, and the on chain records connected with it. See "Blockchain data".
Identity verification data. In the limited cases where the law requires it, an identity check is run by a specialist provider. Identity documents are submitted to that provider, not to us; we receive the result and a reference.
We do not knowingly collect precise location, biometrics, or special category data, and we do not ask for them.
Cookies and similar technologies
Our websites use cookies and similar storage for sign in, security, preferences, and measurement. The Game client stores local data on your device so it does not have to download everything on each visit.
We use Google Tag Manager on capnco.gg to manage measurement tags. You can control cookies through your browser settings; blocking some of them will break sign in.
We do not sell your data and we do not run third party advertising networks on the Services.
Why we use it, and our legal bases
Where the UK or EU GDPR applies, our legal bases are:
| What we do | Why | Legal basis |
|---|---|---|
| Create and run your account, deliver the Game | To give you what you asked for | Performance of a contract |
| Save progress, items, and currency | Same | Performance of a contract |
| Take payment, handle refunds | Same | Performance of a contract |
| Detect cheating, fraud, and abuse; keep the Game fair | To protect players and the Game | Legitimate interests |
| Diagnose crashes and improve performance | To keep the Services working | Legitimate interests |
| Moderate chat and respond to reports | To keep players safe | Legitimate interests |
| Send service email, such as receipts and security notices | To operate the account | Performance of a contract |
| Send marketing email | Only if you asked for it | Consent, withdrawable at any time |
| Verify identity where required | To meet a legal obligation | Legal obligation |
| Keep financial and transaction records | To meet a legal obligation | Legal obligation |
Who we share it with
We share personal data only with service providers who need it to run the Services, and only for that purpose. They are:
- Payments. Stripe.
- Hosting and infrastructure. Fly.io, Supabase, Cloudflare, Netlify.
- Multiplayer networking and in game chat. Photon.
- Error monitoring. Sentry.
- Email. Resend for service email, MailerLite for anything you subscribed to.
- Sign in providers. Google, Discord, X, Epic Games, where you use one.
- Identity verification. Sumsub, where a check is required.
- Blockchain and digital asset infrastructure. Enjin, and providers used to read public chain data including Alchemy, Moralis, OpenSea, Reservoir, and Mintify.
- Measurement. Google Tag Manager.
We may also disclose data where the law requires it, to enforce the Terms of Use, to protect the rights or safety of players or the public, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you before your data becomes subject to a different policy.
Some things are public by design: your display name, guild membership, and leaderboard standing are visible to other players. Choose a display name accordingly.
We do not sell personal data, and we do not share it for cross context behavioural advertising.
Blockchain data
This part cannot work like the rest of this policy, and it is worth being plain about why.
Linking a wallet is optional. The Game is fully playable without one. If you do link one, we store the public address against your account, and any minting you do writes a permanent public record to a blockchain.
That record is outside our control. We cannot edit it, delete it, or hide it, and neither can anyone else. Anyone can read it, and a wallet address can sometimes be connected to a real identity through other information. If you later ask us to delete your account, we will delete what we hold, but the on chain record remains.
Do not link a wallet unless you accept that.
Separately, the digital assets from the Game's earlier phase, including the $CNC token and the ship card NFTs, were issued by Guild Ventures I Ltd before Entropic acquired the Game. Entropic did not issue them and does not control them. Where we read public chain data about a wallet you have linked, we are reading a public ledger like anyone else. See the Terms of Use for how responsibility is split.
How long we keep it
- Account and gameplay data. While your account is open, and for a reasonable period after closure so that we can settle disputes, prevent someone evading a ban by re registering, and meet legal obligations.
- Operational logs, such as reward delivery and match encounter records. 90 days, after which they are pruned automatically.
- Financial and transaction records. As long as tax and accounting law requires, typically seven years.
- Support correspondence. While it is useful for support and for as long as a related claim could be brought.
- Chat and moderation records. Long enough to investigate reports and handle repeat behaviour.
- Blockchain records. Permanent, and not ours to delete.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct anything inaccurate;
- delete your data, subject to the limits above;
- object to or restrict certain processing, including processing based on our legitimate interests;
- port data you gave us to another provider;
- withdraw consent at any time, which does not affect processing already carried out;
- not be discriminated against for exercising these rights.
To exercise any of them, write to support@capnco.gg from the email address on your account. We may need to confirm your identity. We answer within the time the applicable law allows, and within 30 days where no other period applies. You may use an authorised agent where the law provides for one.
If you are in the UK or the EU and you think we have handled your data badly, you may complain to your local supervisory authority. We would rather you told us first so we can put it right.
Marketing email always carries an unsubscribe link, and unsubscribing stops it. Service email about your account and purchases is not marketing and cannot be turned off while the account is open.
Children
The Services are not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, write to support@capnco.gg and we will delete the account and the data.
Where you are between 13 and the age of majority in your country, you may use the Services only with the consent of a parent or guardian.
International transfers
We are based in the United States and our service providers operate in the United States and elsewhere. If you use the Services from outside the United States, your data will be transferred to and processed there, under laws that may differ from your own.
Where we transfer personal data out of the UK or the European Economic Area, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK Addendum, in our contracts with providers.
Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. Passwords are stored hashed. We never ask for your wallet private key or seed phrase, and no one from Entropic will ever ask you for one; treat any such request as an attempt to defraud you.
No system is perfectly secure. If a breach affects your personal data and the law requires us to tell you, we will.
Changes to this policy
We may update this policy. When we do, we will change the date at the top and, for material changes, give notice in the Game or by email before they take effect. Please check back from time to time.
Contact
Questions, requests, and complaints:
Entropic LLC
1309 Coffeen Avenue, Ste 1200
Sheridan, WY 82801
support@capnco.gg