Privacy policy — Warweaver Studios

The short version

This website uses no advertising, tracking or social media cookies, and no third-party analytics.
Our browser playtests and our Android game Wyrd Unbound send us gameplay, performance and error data to help us improve them and design better games. It is linked to a random ID, not to your name or email, and we do not store your IP address with it. It goes only to our own server, never to another company.
In the EU, EEA, UK and Switzerland this is off unless you allow it. Elsewhere it is on unless you opt out. Either way, one click under Privacy choices on our website, or in Wyrd Unbound's Pause menu, changes it.
Game saves stay on your device, in your browser or in the app. We never receive them.
If you email us or use our contact form, we use your message to reply.
We do not sell your data, show ads, or share it with anyone except the services that host our site and email.
You can change your choice at any time with Privacy choices at the bottom of every page, and you can ask us to see or delete your data at games@warweaverstudios.com.

Who we are

Warweaver Studios is a three-person independent game studio based in Tokyo, Japan. We are responsible for the personal data described here (the "controller" under the GDPR, and the personal information handling business operator under Japan's Act on the Protection of Personal Information, APPI).

Operator: Warweaver Studios, Tokyo, Japan
Address and representative: our business address and, where applicable, the name of our representative are available on request from the address below.
Contact for anything in this policy: games@warweaverstudios.com

This policy covers warweaverstudios.com, the game prototypes we host at play.warweaverstudios.com, and Wyrd Unbound, our game for Android distributed through Google Play. AskJev and the warweaver.io SDK site have their own notices.

What we collect, and why

When you visit this website

Our server briefly processes technical information that every browser sends, such as your IP address, browser type, the page requested and the time. We use it only to deliver the pages and to protect the site against abuse.

Legal basis (GDPR): our legitimate interest in running a secure website (Article 6(1)(f)).
Kept for: up to 14 days in server logs, then deleted.

The website itself sets only one cookie: the one that remembers your privacy choice. See Storage on your device.

When you contact us

If you write to games@warweaverstudios.com or use the contact form, for playtest feedback, press, partnerships or anything else, we receive your email address, your name if you include it, the topic you choose, and whatever you write.

The contact form delivers your message to that inbox as an email, and sends you a confirmation with a copy of what you wrote (at most one a day to the same address). Our server passes it on without keeping a copy, and does not log your IP address with it. To limit abuse, it keeps a scrambled (keyed hash) form of your IP address in memory for up to an hour, never on disk.

Why: to read and answer your message, and to act on feedback about our games.
Legal basis (GDPR): our legitimate interest in answering the people who contact us, or steps you ask us to take before an agreement (Article 6(1)(f) and (b)).
Kept for: up to 2 years after our last exchange, unless we need it longer for an ongoing agreement.

Please do not send us sensitive personal information. If you mention your playtest ID in an email, we can link that email to your playtest data. We do this only to answer your request, for example to delete your data.

When you play a prototype

Our games save your progress in your browser's storage so you can continue later. We never receive your saves. Clearing your browser's site data deletes them. Wyrd Unbound saves your progress and settings in the app's private storage on your phone; uninstalling the app deletes them.

This storage is strictly necessary for the game you asked to play, so it does not need your consent.

Playtest analytics

Our prototypes are unfinished. With Playtest analytics, the game sends us data about how it played and ran, so we can fix problems and improve the design.

In the EU, EEA, UK and Switzerland: off unless you allow it.
Everywhere else: on by default. You can opt out at any time, and nothing is sent after you do.
If your browser sends a Global Privacy Control signal, analytics stays off wherever you are.

We work out which applies from your device's time zone setting. We do not look up your location. If the time zone is unknown, analytics stays off until you allow it. Wyrd Unbound also uses your phone's region setting, and treats any time zone from UTC−1 to UTC+3 as Europe whatever that setting says.

In Wyrd Unbound, where analytics is off unless you allow it, the game asks with a small question in town after your first venture, on at most three launches, and never interrupts play to do so. Not answering counts as no. Everywhere else it is on from the start. In both cases, Share gameplay data in the Pause menu turns it on or off at any time.

Games that send playtest analytics: Project Patagonia, Project Resistance and Wyrd Unbound (Android). We will update this list before any other game does.

When analytics is on, a game may send:

Your device and browser: operating system, browser and its version, preferred languages and time zone, screen and window size, pixel density and orientation, graphics card model, number of processor cores, approximate device memory, connection type and approximate speed, whether touch is available, and which website linked to the game (the site name only).
Your phone (Wyrd Unbound): phone model, Android version, language and region setting, time zone offset, graphics chip, screen size and density, number of processor cores and approximate memory.
Performance: frame rate, slow frames, loading time and download size, memory use, and similar measurements, about every 5 seconds (every 30 seconds in Wyrd Unbound).
Errors: error messages and technical traces when something goes wrong in the game.
Gameplay: how each run or match went, such as the party or heroes, cards and choices, each fight and card played, buildings, rewards and progress between runs, time spent in each area, and your character's position in the game world.
Ventures and progress (Wyrd Unbound): each venture and how it ended, levels, items found and crafted, weapon and upgrade choices, bosses, quests, travel and deaths, and a detailed combat record of each venture (damage, enemies, abilities and timings).
Interface: which buttons and menus you use in the game, where on the screen you pressed, and when you pause, switch tabs or leave (in Wyrd Unbound, when the app goes to the background or closes).
Match replays (Project Resistance): a compressed recording of your commands in each match, so we can replay it exactly to find bugs.
Identifiers: a random playtest ID stored in your browser or in the app, a random ID for each play session, and the game version.

We do not collect your name, email address, account details, advertising ID, precise location, contacts or anything you type outside the game. Your IP address is necessary to deliver the data and is used in memory for a moment to prevent abuse, but it is not stored.

Why: to find bugs and crashes, to see how the game performs on different devices, to understand how players experience the design so we can improve it, and to build statistical and machine-learning models of how our games are played. Those models are used only inside our studio, to design better games.
Legal basis (GDPR, for people in the EU, EEA and UK): your consent (Article 6(1)(a)). Reading and storing information on your device for this purpose also requires your consent under EU and UK privacy rules for electronic communications.
In Japan: this data is not linked to anyone we can identify (personally referable information under APPI). It stays with us and is never provided to a third party. You can opt out at any time.
Kept for: detailed records up to 12 months, then deleted or reduced to statistics that cannot identify anyone.
If you say no or opt out: nothing changes in the game. You can play every prototype without analytics.

We do not use this data to make decisions about you, to build advertising profiles or to target you. There is no automated decision-making with legal or similarly significant effects.

Storage on your device

These are all the cookies and similar storage our website and games use.

ww_consent cookie (necessary). Remembers your privacy choice on warweaverstudios.com and play.warweaverstudios.com. It is kept for 12 months, then we ask again. In the EU, EEA, UK and Switzerland, a refusal is kept for 6 months.
Game saves (necessary). Stored in your browser's IndexedDB storage by each game on play.warweaverstudios.com. Kept until you delete them or clear your browser's site data.
Motion setting (necessary). Remembers whether you turned site animations on or off, in session storage. Deleted when you close the tab.
Game files (necessary). Your browser may keep the downloaded game files in its normal cache so the next visit loads faster.
Playtest ID (only while analytics is on). A random ID stored by the game in your browser, or in Wyrd Unbound's app storage. Deleted as soon as you turn analytics off.
Wyrd Unbound app storage (necessary). Your saves, settings and privacy choice, in the app's private storage on your phone. Deleted when you uninstall the app.
Unsent analytics (Wyrd Unbound, only while analytics is on). If you play offline, the app keeps up to 2 MB of analytics it could not send yet and sends it later. Deleted when you turn analytics off.

We do not use advertising, social media or third-party analytics cookies, or advertising or third-party analytics code in our games. If that ever changes, we will ask you first.

We do not sell or rent personal data, and we do not share it for advertising. We use a small number of service providers who process data only on our instructions:

Hosting: Hetzner Online GmbH (Germany), which runs the server for our website, games and playtest analytics. The server is in Finland.
Email: Google (Google Workspace), which hosts our games@warweaverstudios.com inbox.

Wyrd Unbound is distributed through Google Play. Google does not receive the game's analytics; it goes only to our server. Google's own handling of app installs, ratings and crash reports through Google Play is covered by Google's privacy policy.

We may also disclose information if Japanese or other applicable law requires it, or to protect our rights, our players or the public.

Where your data is processed

We are based in Japan. Our server is in Finland, in the European Union, and our email is provided by Google, a company based in the United States.

Japan has an adequacy decision from the European Commission, which recognises its data protection as essentially equivalent to the GDPR. Personal data from the EU is handled under the Supplementary Rules that come with that decision.
For Google, transfers are covered by Google's data processing terms, including the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
For people in Japan: we take the steps APPI requires when a foreign service provider stores data for us, including understanding the data protection systems of the countries involved (Finland and the European Union, the United States and Japan).

How long we keep it

Server logs: up to 14 days.
Emails: up to 2 years after our last exchange.
Detailed playtest analytics: up to 12 months, then deleted or turned into statistics that cannot identify anyone.
Your privacy choice: 12 months (6 months for a refusal in the EU, EEA, UK and Switzerland), in your browser only.
Game saves: in your browser or the app, until you delete them or uninstall.
Playtest ID: in your browser or the app while analytics is on. It is deleted when you turn analytics off, when you clear your browser's site data, or when you uninstall the app.

Your rights

Depending on where you live, you can ask us to:

tell you what data we have about you and give you a copy;
correct it;
delete it;
stop or restrict using it, or object to how we use it;
give it to you in a portable format;
stop using it for playtest analytics. Withdrawing consent or opting out does not affect what we did before, but we will delete the data linked to your playtest ID if you ask.

In Japan, you can request disclosure, correction, addition or deletion, suspension of use, and records of third-party provision of your retained personal data, as APPI provides.

To make a request, email games@warweaverstudios.com. Because playtest data is linked only to a random ID, we can find it only if you tell us that ID. Each game shows your playtest ID, with a Copy button, while analytics is on: in Project Patagonia under Privacy and playtest ID on the title screen or pause menu, in Project Resistance in the menu's Privacy section, and in Wyrd Unbound under Copy ID in the Pause menu. We may ask for information to confirm a request is yours. We answer within one month and do not charge a fee.

You can also complain to a data protection authority, for example the authority in the EU country where you live, the Information Commissioner's Office in the UK, or the Personal Information Protection Commission in Japan. We would appreciate the chance to fix a problem first.

Open Privacy choices at the bottom of any page on warweaverstudios.com or play.warweaverstudios.com and turn off Playtest analytics. The game stops sending data straight away, even in the middle of a session, and deletes its playtest ID from your browser. If you also want the data we already received deleted, copy your playtest ID first (see Your rights), then email it to us. Once the ID is gone from your browser, we have no way to find your data.

In Wyrd Unbound, turn off Share gameplay data in the Pause menu. The game stops sending straight away, discards anything it had not sent, deletes its playtest ID and asks our server to delete the data linked to that ID. If you are offline at that moment, copy your ID first and email it to us so we can delete the data.

Children

Our games are not directed at children under 13. If you are under 16, please ask a parent or guardian before turning on Playtest analytics, or opt out if it is on by default where you live. In the EU, EEA, UK and Switzerland, allowing analytics confirms you are 16 or older, or that a parent or guardian agrees.

If you believe a child has sent us personal data without that permission, contact us and we will delete it.

How we protect data

We keep what we collect to a minimum and limit who can see it.

Organisation: one team member is responsible for privacy and for handling requests and incidents. Everyone who can access the data must keep it confidential.
Access: only our team can reach the analytics data, through key-based access to our server.
Technical: data is encrypted in transit (HTTPS). The analytics service stores no IP addresses, checks every submission, limits how often data can be sent, and keeps its database on our server only.
Devices: team computers must use disk encryption, screen locks and up-to-date software.
Foreign providers: we check the data protection systems of the countries where our service providers store data.

If a data breach puts you at risk, we will tell you and the relevant authorities as the law requires.

Changes to this policy

We will update this page when our games or services change, and show the new date at the top. If a change affects what you allowed or opted out of, we will ask for your choice again.

Questions about this policy: games@warweaverstudios.com.