Account

An account is optional. Nothing on this site is behind it. You can sign in with Google, or with an e-mail address and a password you choose here.

00 — Sign in

Sign in, or make an account

Loading…

What is kept, where, and for how long: Site privacy

01 — What it is

What an account is for today

Your account provides a single secure sign-in for Lacunate digital experiences, Galaxy Fusion game progress, and the upcoming digital asset auction system.

What it holds is short: your e-mail address, how you signed in, whether that address has been confirmed, and the dates the account was made and last used. Nothing else about you is stored, and there is no profile to fill in. If you sign in with Google, Google also passes on the name and the profile photo link on your Google account.

Passwords are not something this studio can read. When you type one, it goes from your browser to Firebase Authentication, a Google service, and is kept there in hashed form. That is also why a forgotten password can be reset but never looked up.

Making an account does not ask you to accept anything. An information notice is not a term you agree to; it describes what happens, and it is on the Site privacy page whether you sign in or not.

02 — Galaxy Fusion

The same account as the game

This is not a separate site login. The site and Galaxy Fusion use one sign-in system, so an account made here is also a game account, and the same Google account is the same account in both places.

That matters the first time you open the game with it. Galaxy Fusion writes a player record that anyone can read: with Google sign-in the starting player name is your Google name, shown with your Google photo; with an e-mail account it is the part of your address before the “@”. If you would rather not publish a name derived from your address, sign in to the game once and change the name there.

The game does not check whether an address has been confirmed, so an account made here works in the game straight away.

03 — The two e-mails

Confirming an address, and forgotten passwords

Confirmation. After you make an account with an e-mail address, the page offers to send a link to it. Opening that link proves the address is yours. Nothing here is gated behind it today; it is what makes it possible to give the account back to you later, and what any second factor would be built on.

Reset. If you have forgotten your password, the page sends a link that lets you set a new one. The answer on screen is the same whether or not the address has an account — deliberately, so that this page cannot be used to find out who is registered.

Both messages come from Google’s sign-in service rather than from an address on this domain, because that is the service holding the account. Both are subject to a daily limit that the game shares, which is why the resend button waits a minute between tries.

04 — Deleting

What Delete removes, and what it does not

Delete is on the page, not behind an e-mail request. Deleting is a right rather than a favour, so it should not need asking.

It removes the account itself: the address, the password, the sign-in method and the record that the account exists. After that the address is free again and you can make a new account with it whenever you like.

It does not remove a Galaxy Fusion save. Before deleting, the page checks whether this account has one. If it does, the account is kept and nothing is deleted: the save would stay behind under an account number that no longer has an owner, and you would have no way left to reach it or remove it. Delete the save from inside the game first. If the check cannot be made at all, the page also refuses — an answer it is unsure of is not a reason to do something that cannot be undone.

An account you leave alone is kept until you delete it. Profile and account data are securely retained until you choose to delete your account.

For a copy of what is held, a correction, or deletion when the button will not do it, write to support@lacunate.com.

The whole picture, including what Google receives: Site privacy

05 — Security

Recovery Key, Two-Factor Authentication, and Unique Student Lock

One-Time Identity Lock. To prevent fraudulent student profiles and duplicate claims, every verified university e-mail, e-Government barcode, or ISIC serial is cryptographically locked to a single account. The same academic document cannot verify any other account.

8-Character Master Recovery Key. Upon account creation, the system generates a unique 8-character alphanumeric master recovery key (e.g., LC-8K9P4X2M). This key serves as your sovereign credential to recover account ownership even if password or inbox access is lost.

8 Emergency Backup Codes. A set of 8 single-use emergency backup codes is issued for two-factor authentication (2FA) failover or whenever your primary authentication device is unavailable.

Creation Timestamp & Childhood Security Question. In the event of account recovery, your childhood security answer (neighborhood street name, kindergarten/primary teacher) and exact account creation date are verified. Our studio team provides hands-on assistance via support@lacunate.com to restore verified access safely.

Loading...