OH MY GALAXY!

Privacy Notice
Version 2

March 2026

About This Notice

We are nDreams Limited, a company incorporated and registered in England and Wales (registration number 04362105) with our registered address at Spectrum Point, 279 Farnborough Road, Farnborough, Hampshire, United Kingdom, GU14 7LS. We are a video games publisher and part of the Aonic group.

This notice explains how nDreams collects and processes personal data relating to users of OH MY GALAXY! (“the Game”) and any services we provide in connection with the Game (“the Services”). When we decide how and why your personal data is processed, we act as the data controller.

If you have any questions about this notice or your personal data, contact us at data@ndreams.com or support@ndreams.com.

This notice covers only the Game and the Services. Where the Game or the Services link to websites or services not operated by nDreams, please refer to their own privacy notices.

What Data We Collect and Why

The data we collect depends on how you use the Game. We only collect personal data when we have a lawful reason to do so. This section sets out each type of data, its purpose, and the legal basis on which we rely.

Running the Game (Legal basis: contract performance)

The Game processes certain data to support Meta platform features. This data is processed to operate the Game and is not stored by nDreams:

User ID: Your User ID is processed to support Meta platform features, including determining your age group category.

Age Group: Your age group category determines whether you are shown the analytics consent screen. Users on Meta child accounts (under 13) are not shown this screen and cannot opt in.

Analytics (Legal basis: consent)

If you consent, we collect the following data to improve, test and monitor the Game. This data is linked to a randomly generated identifier (GUID) that is created when you first launch the Game and stored on your device. The GUID tags all data transmitted under this consent.

We collect:

the GUID described above;

how you play the Game, including progression, score rank, asteroids used and gameplay events;

how long and when you play (including total playtime and session lengths); and

your IP address, but only to identify the country you are playing from.

Giving and withdrawing consent. Consent is requested when you first start the Game. You can withdraw it at any time by selecting “Decline” on the “Share Analytics” screen in the Game’s settings menu. Withdrawing consent stops future data collection but does not affect data already collected or your ability to play the Game. To request deletion of data collected before withdrawal, contact us at data@ndreams.com.

Users on Meta child accounts (under 13) are automatically opted out of analytics and are not shown the consent screen. If you are under 13 and the consent screen appears, do not select “Accept.” If you are under 13 and believe you have opted in, contact us at data@ndreams.com, and we will remove your data.

Crash Reporting (Legal basis: legitimate interest)

The Game uses Sentry to detect and fix crashes, errors and stability issues. When a crash occurs, a report is automatically sent to us the next time you restart the Game. This report may include:

device information (model, operating system, app version);

the last gameplay stages or screens you visited;

navigation points within the game interface; and

technical crash details, including a call stack showing where the crash occurred.

Crash reports are pseudonymised per installation and use a separate identifier from the analytics GUID described above - they are not linked to your gameplay analytics data. Reports are used only to diagnose and resolve issues and are shared only with Sentry as our data processor. Crash reports are being stored for 90 days. No crash report data is used for analytics, profiling or advertising.

For more information, see Sentry’s privacy FAQ for mobile games: docs.sentry.io/security-legal-pii/security/mobile-privacy

Customer Support (Legal basis: legitimate interest)

When you contact us for support, we collect your name or user ID, email address and any information you provide in your request. We use this data to respond to your query. Incomplete or inaccurate information may limit our ability to help.

Competitions and Promotions (Legal basis: consent)

When we run competitions or promotions in connection with the Game, we may collect social media handles, account names, and any winner’s personal details (such as name, telephone number, email address and residential address) needed to deliver prizes. You can withdraw that consent at any time by contacting us.

How Long Do We Keep Your Data

We keep your data only for as long as it is needed for the purposes described in this notice. When data is no longer needed, we delete it or anonymise it. The following retention periods apply to specific categories of data:

Gameplay analytics — retained for as long as needed to improve and monitor the Game. You can request deletion at any time (see “Deleting Your Data” below).

Crash reports — retained in Sentry for 90 days, after which they are automatically deleted.

In some cases, we may need to retain data for longer, where required by law. If we do, we will keep it secure and continue to respect your rights where possible.

Who We Share Your Data With

We share your data only where necessary and only with the following recipients:

Google and Meta - to operate the Game on the Google Play and the Meta Quest platforms and facilitate platform features.

Service providers - including Amazon Web Services (hosting) and Sentry (crash reporting). Our data processing agreements with these providers require them to process your data only on our instructions and to maintain appropriate security measures. They are prohibited from using your data for their own marketing.

Near Light Limited - the developer of the Game, which assists with development, analytics and support. Near Light is an affiliate and is bound by this notice. Personal data of users identified as under 18 is not shared with Near Light for marketing purposes.

Other Aonic group companies - our parent group, where necessary for business operations. Personal data of users identified as under 18 is not shared with group companies for marketing purposes.

Law enforcement and authorities - where required by law, to comply with legal obligations, or to protect the rights and safety of our users.

Corporate transactions - if nDreams undergoes an investment, merger, acquisition or sale of assets, personal data may be shared as part of that process.

nDreams does not sell your personal data to third parties.

International Data Transfers

Some of our service providers are based outside the United Kingdom and the European Economic Area. Where we transfer personal data to a country that does not provide an equivalent level of protection, we put appropriate safeguards in place as required by law. For more details, contact us at data@ndreams.com.

Cookies and Similar Technologies

The Game itself does not use cookies. However, websites operated by nDreams in connection with the Game (such as the page hosting this notice or our support pages) may use essential cookies to keep those websites working properly. These cookies do not track you for advertising purposes. For details about cookies on our websites, visit the relevant cookie notice.

Deleting Your Data

You can request deletion of your data at any time, free of charge, regardless of where you are located. Email us at data@ndreams.com or support@ndreams.com.

We will act on your request within 30 days. In some cases, we may need to retain certain data where required by law (for example, to comply with a legal obligation or to resolve a dispute). If any exception applies, we will explain why.

Your Rights

Depending on where you are located, you may have rights under applicable data protection laws. These include the right to:

access the personal data we hold about you;

correct any inaccurate or incomplete data;

restrict how we process your data;

request a copy of your data in a portable format;

object to our processing of your data; and

withdraw your consent at any time.

To exercise any of these rights, email us using the contact details in the “How to Contact Us” section below. We will respond within 30 days. If we need more time, we will let you know within that period and explain why.

These rights are not absolute - in some circumstances, we may be unable to fulfil a request in full. If that happens, we will explain why.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office. If you are in the EU, you can find your supervisory authority via the European Data Protection Board.

Children Under 13

nDreams does not knowingly collect personal data from or market the Game to children under the age of 13. If a child under 13 accesses the Game through a parent-managed Meta account, the default privacy settings ensure that nDreams does not collect any personal data from that child. Analytics are disabled, and the consent screen is not shown.

If you are a parent or guardian and believe that a child under 13 has provided nDreams with personal data without your consent, please contact us at data@ndreams.com. We will delete the data without delay.

Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The categories of personal information we collect are described in the “What Data We Collect and Why” section above.

We do not sell or share your personal information for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.

Under California law, you have the right to:

request access to the categories and specific pieces of personal information we have collected about you;

request deletion of your personal information;

request correction of inaccurate personal information; and

opt out of the sale or sharing of your personal information (though nDreams does not sell or share personal information).

We will not discriminate against you for exercising any of these rights. To make a request, contact us using the details in the “How to Contact Us” section. We will respond within 45 days, as required by California law.

Changes to This Notice

We may update this notice from time to time - for example, when our services change or when the law requires it. When we do, we will update the date at the top of this notice. For significant changes, we may also notify you directly.

We encourage you to review this notice regularly.

How to Contact Us

If you have any questions about this notice or wish to exercise your rights, contact us at:

data@ndreams.com - for privacy and data rights requests

support@ndreams.com - for player support

When making a data rights request (such as a deletion or access request), please include the nature of your request in the subject line so we can respond promptly.