Privacy
UniverseLab stores account credentials, game progress, transactions, donation intents, rate-limit events and admin logs needed to operate the game securely. Passwords are stored using password_hash.
Payment providers should send final payment state through server-side webhooks. Do not store secret keys in public files.