1. Data Controller & Contact Information

For the purposes of applicable data protection laws, the Data Controller responsible for your information is:

2. Information We Collect and Process

We believe in minimal data collection. We only collect the following categories of data:

• Account & Contact Data (Email Address): If you choose to register an account or use our contact support form, we collect your email address and username to verify your identity, process password resets, and communicate with you. For guest logins, a randomized, anonymous UUID tied to your device is generated locally.
• In-Game Save Data: Your game progression, inventory, accomplishments, and character states are stored on our secure cloud database linked to your account or guest ID.
• In-App Purchases (IAP) & Financial Data: All financial transactions (buying crystals, bundles, or memberships) are processed directly and securely by Apple App Store or Google Play Store. We do NOT collect, receive, or store credit card numbers or banking information. We only receive confirmation tokens from store platforms to deliver your purchased digital items.
• Technical & Development Analytics: We collect aggregated, non-personally identifiable diagnostic logs (e.g., app performance metrics, crash logs, device model, operating system version, and general network latency). This data is strictly used for bug fixing and game optimization without building personal behavioral profiles.

3. How We Use Your Information

We process your data based on lawful bases under global regulations (such as performance of a contract and legitimate interest):

• To provide, operate, and sync your game progress across sessions.
• To deliver customer support and respond to support messages sent to our team.
• To verify legitimate purchases made through the official App Stores.
• To diagnose technical bugs, server issues, and optimize game performance.

4. Analytics and User Profiling Policy

We explicitly state that we do not engage in individual user profiling or targeted cross-app tracking. Diagnostic analytics are analyzed solely in aggregate form to evaluate overall game stability (e.g., verifying how many users experience a crash in a specific game scene).

5. Third-Party Services and Data Sharing

We do not sell, rent, trade, or monetize your personal information to third parties. We only share data with essential infrastructure providers strictly necessary to run the game:

• Database & Cloud Hosting Providers: Secure database servers (PostgreSQL / AWS cloud infrastructure) used to store encrypted user accounts and cloud saves.
• Email Transmission Services (SMTP): Automated verification and support dispatch services.
• App Store Platforms: Apple Inc. and Google LLC for facilitating In-App Purchases.

6. International Privacy Rights & Compliance

A. European Union (GDPR) & United Kingdom (UK-GDPR)

Under the General Data Protection Regulation, EU/UK residents have the following rights:

• Right to Access & Portability: Request a copy of your personal data held by us.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your account and associated email.
• Right to Rectification: Request correction of inaccurate personal details.
• Right to Lodge a Complaint: File a concern with a local Data Protection Authority (DPA).

B. California Privacy Rights (CCPA / CPRA & CalOPPA)

Pursuant to the California Consumer Privacy Act and California Privacy Rights Act:

• No Sale of Personal Information: We do NOT "sell" or "share" your personal information as defined by California law.
• Right to Know and Delete: California residents may request disclosure or deletion of collected personal data by contacting us at our email addresses.
• Do Not Track (DNT) Signals: Our systems do not track users across third-party websites; thus, we do not alter behavior based on browser DNT signals.

C. Canadian Privacy Rights (PIPEDA)

In accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we ensure that personal information (your email) is collected with consent, protected by appropriate safeguards, and retained only as long as necessary to fulfill user accounts or support services.

D. Australian Privacy Rights (Privacy Act 1988)

Pursuant to the Australian Privacy Principles (APPs), Australian users have the right to access and correct their personal information or submit privacy complaints directly to us for swift resolution.

7. Children's Privacy (COPPA Compliance)

VanthLore does not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in certain EU jurisdictions). If we learn that we have inadvertently collected personal data from a child without parental consent, we will promptly delete that information from our servers.

8. Data Security and Retention

We implement industry-standard security measures, including SSL/TLS encryption for data transmission and hashed password storage in our databases. Account and verification data are retained as long as your account remains active. You may request account and data deletion at any time by contacting support.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect game updates or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date.

10. Contact Us

If you have any questions, rights enforcement requests, or concerns regarding this Privacy Policy, please reach out to us: