Privacy Policy

Last Updated: March 13, 2026

Note: This Privacy Policy was updated to include information about our account deletion feature, which allows users to delete their accounts directly from their profile settings.

Introduction

Welcome to Hanafuda Legends. We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Information We Collect

Personal Information

When you create an account or sign in, we collect:

• Email address (required for account creation)
• Username (required for account creation)
• Profile picture (if provided via Google Sign-In)
• Google ID (if you sign in with Google)
• Password (hashed and encrypted, stored securely)

Game Data and Statistics

We collect and store:

• Game statistics (wins, losses, points, win rate, rank)
• Yaku collection data
• Personal milestones and achievements
• Game history and activity timestamps
• Last played and last login information

Technical Information

We automatically collect:

• IP address
• Browser type and version
• Device information
• Usage patterns and interactions with our website
• Cookies and similar tracking technologies (see Cookie Policy)

How We Use Your Information

We use the collected information for:

1. Account Management: Creating and managing your user account
2. Game Services: Providing game functionality, tracking statistics, and saving progress
3. Authentication: Verifying your identity and maintaining secure sessions
4. Communication: Sending important updates about your account or our services
5. Improvement: Analyzing usage patterns to improve our website and services, including feedback from account deletions
6. Legal Compliance: Complying with legal obligations and protecting our rights

Google Sign-In

When you choose to sign in with Google:

• We receive your email address, name, and profile picture from Google
• We use Google's OAuth service to authenticate you
• Your Google account information is subject to Google's Privacy Policy
• We do not have access to your Google password
• You can revoke our access through your Google Account settings

Data Storage and Security

• Your data is stored in secure databases with encryption
• Passwords are hashed using industry-standard bcrypt encryption
• We use JWT tokens for secure authentication
• We implement reasonable security measures to protect your information
• However, no method of transmission over the Internet is 100% secure

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

1. Service Providers: With third-party service providers who assist in operating our website (e.g., hosting, database management)
2. Legal Requirements: When required by law, court order, or government regulation
3. Protection of Rights: To protect our rights, property, or safety, or that of our users
4. Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

Your Rights and Choices

Depending on your location, you may have the following rights:

Access and Portability

• Request access to your personal data
• Request a copy of your data in a portable format

Correction and Deletion

• Request correction of inaccurate data
• Request deletion of your account and associated data
• Delete Your Account: You can delete your account directly from your profile settings. When deleting your account, you may be asked to provide optional feedback about why you're leaving, which helps us improve our service. This feedback will be sent to us via email.
• What Gets Deleted: When you delete your account, we permanently remove:
  • Your profile and account information (email, username, profile picture)
  • All game statistics and achievements
  • Your ranking and progress
  • All saved game data and preferences
• Account Deletion Process: Account deletion is immediate and permanent. Once deleted, your account cannot be recovered. You will be automatically signed out after deletion.
• Alternative Method: If you prefer, you can also request account deletion by contacting us at zendeckinteractive@gmail.com

Opt-Out

• Opt out of certain data collection practices
• Disable cookies through your browser settings
• Revoke Google OAuth access through your Google Account

Data Retention

• We retain your data for as long as your account is active
• When you delete your account, all your personal data is permanently removed from our active databases
• We may retain certain data for legal or legitimate business purposes (e.g., transaction records required by law)
• Deleted data may remain in backups for a limited time (typically up to 30 days) before being permanently purged
• Account deletion feedback (if provided) may be retained separately for service improvement purposes, but will not be linked to your deleted account

Children's Privacy

Our services are not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to such transfers.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Cookies and Tracking Technologies

We use cookies and similar technologies. See our Cookie Policy for detailed information.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Consent

By using our website and services, you consent to this Privacy Policy and agree to its terms.