Privacy policy — Warweaver Studios

The short version

This website uses no advertising, tracking or social media cookies, and no third-party analytics.
Our browser playtests send us gameplay, performance and error data to help us improve them. It is linked to a random ID, not to your name or email, and we do not store your IP address with it.
In the EU, EEA, UK and Switzerland this is off unless you allow it. Elsewhere it is on unless you opt out. Either way, one click under Privacy choices changes it.
Game saves stay in your browser. We never receive them.
If you email us, we use your message to reply.
We do not sell your data, show ads, or share it with anyone except the services that host our site and email.
You can change your choice at any time with Privacy choices at the bottom of every page, and you can ask us to see or delete your data at games@warweaver.io.

Who we are

Warweaver Studios is a three-person independent game studio based in Tokyo, Japan. We are responsible for the personal data described here (the "controller" under the GDPR, and the personal information handling business operator under Japan's Act on the Protection of Personal Information, APPI).

Operator: [LEGAL NAME OF OPERATOR — to be confirmed]
Address: [BUSINESS ADDRESS IN JAPAN — to be confirmed]
Representative: [NAME OF REPRESENTATIVE — to be confirmed]
Contact for anything in this policy: games@warweaver.io
Representative in the EU / UK: [to be confirmed — see note for counsel]

This policy covers warweaverstudios.com and the game prototypes we host at play.warweaverstudios.com. AskJev and the warweaver.io SDK site have their own notices.

What we collect, and why

When you visit this website

Our server briefly processes technical information that every browser sends, such as your IP address, browser type, the page requested and the time. We use it only to deliver the pages and to protect the site against abuse.

Legal basis (GDPR): our legitimate interest in running a secure website (Article 6(1)(f)).
Kept for: up to 14 days in server logs, then deleted. [Confirm once hosting is set up.]

The website itself sets only one cookie: the one that remembers your privacy choice. See Storage on your device.

When you email us

If you write to games@warweaver.io, for playtest feedback, press, partnerships or anything else, we receive your email address, your name if you include it, and whatever you choose to write.

Why: to read and answer your message, and to act on feedback about our games.
Legal basis (GDPR): our legitimate interest in answering the people who contact us, or steps you ask us to take before an agreement (Article 6(1)(f) and (b)).
Kept for: up to 2 years after our last exchange, unless we need it longer for an ongoing agreement.

Please do not send us sensitive personal information. If you mention your playtest ID in an email, we can link that email to your playtest data. We do this only to answer your request, for example to delete your data.

When you play a prototype

Our games save your progress in your browser's storage so you can continue later. We never receive your saves. Clearing your browser's site data deletes them.

This storage is strictly necessary for the game you asked to play, so it does not need your consent.

Playtest analytics

Our prototypes are unfinished. With Playtest analytics, the game sends us data about how it played and ran, so we can fix problems and improve the design.

In the EU, EEA, UK and Switzerland: off unless you allow it.
Everywhere else: on by default. You can opt out at any time, and nothing is sent after you do.
If your browser sends a Global Privacy Control signal, analytics stays off wherever you are.

We work out which applies from your device's time zone setting. We do not look up your location. If the time zone is unknown, analytics stays off until you allow it.

Games that send playtest analytics: Project Patagonia and Project Resistance. We will update this list before any other game does.

When analytics is on, a game may send:

Your device and browser: operating system, browser and its version, preferred languages and time zone, screen and window size, pixel density and orientation, graphics card model, number of processor cores, approximate device memory, connection type and approximate speed, whether touch is available, and which website linked to the game (the site name only).
Performance: frame rate, slow frames, loading time and download size, memory use, and similar measurements, about every 5 seconds.
Errors: error messages and technical traces when something goes wrong in the game.
Gameplay: how each run or match went, such as the party or heroes, cards and choices, each fight and card played, buildings, rewards and progress between runs, time spent in each area, and your character's position in the game world.
Interface: which buttons and menus you use in the game, where on the screen you pressed, and when you pause, switch tabs or leave.
Match replays (Project Resistance): a compressed recording of your commands in each match, so we can replay it exactly to find bugs.
Identifiers: a random playtest ID stored in your browser, a random ID for each play session, and the game version.

We do not collect your name, email address, account details, precise location, contacts or anything you type outside the game. Your IP address is necessary to deliver the data and is used in memory for a moment to prevent abuse, but it is not stored.

Why: to find bugs and crashes, to see how the game performs on different devices, and to understand how players experience the design so we can improve it.
Legal basis (GDPR, for people in the EU, EEA and UK): your consent (Article 6(1)(a)). Reading and storing information on your device for this purpose also requires your consent under EU and UK privacy rules for electronic communications.
In Japan: this data is not linked to anyone we can identify (personally referable information under APPI). It stays with us and is never provided to a third party. You can opt out at any time.
Kept for: detailed records up to 12 months, then deleted or reduced to statistics that cannot identify anyone.
If you say no or opt out: nothing changes in the game. You can play every prototype without analytics.

We do not use this data to make decisions about you, to build advertising profiles or to target you. There is no automated decision-making with legal or similarly significant effects.

Storage on your device

These are all the cookies and similar storage our website and games use.

ww_consent cookie (necessary). Remembers your privacy choice on warweaverstudios.com and play.warweaverstudios.com. It is kept for 12 months, then we ask again. In the EU, EEA, UK and Switzerland, a refusal is kept for 6 months.
Game saves (necessary). Stored in your browser's IndexedDB storage by each game on play.warweaverstudios.com. Kept until you delete them or clear your browser's site data.
Motion setting (necessary). Remembers whether you turned site animations on or off, in session storage. Deleted when you close the tab.
Game files (necessary). Your browser may keep the downloaded game files in its normal cache so the next visit loads faster.
Playtest ID (only while analytics is on). A random ID stored by the game in your browser. Deleted as soon as you turn analytics off.

We do not use advertising, social media or third-party analytics cookies. If that ever changes, we will ask you first.

We do not sell or rent personal data, and we do not share it for advertising. We use a small number of service providers who process data only on our instructions:

Hosting: Hetzner Online GmbH (Germany), which runs the server for our website, games and playtest analytics. The server is in Finland.
Email: Google (Google Workspace), which hosts our games@warweaver.io inbox.
[Add a DNS or content delivery provider here if one is used.]

We may also disclose information if Japanese or other applicable law requires it, or to protect our rights, our players or the public.

Where your data is processed

We are based in Japan. Our server is in Finland, in the European Union, and our email is provided by Google, a company based in the United States.

Japan has an adequacy decision from the European Commission, which recognises its data protection as essentially equivalent to the GDPR. Personal data from the EU is handled under the Supplementary Rules that come with that decision.
For Google, transfers are covered by Google's data processing terms, including the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. [Confirm.]
For people in Japan: we take the steps APPI requires when a foreign service provider stores data for us, including understanding the data protection systems of the countries involved (Finland and the European Union, the United States and Japan).

How long we keep it

Server logs: up to 14 days.
Emails: up to 2 years after our last exchange.
Detailed playtest analytics: up to 12 months, then deleted or turned into statistics that cannot identify anyone.
Your privacy choice: 12 months (6 months for a refusal in the EU, EEA, UK and Switzerland), in your browser only.
Game saves and playtest ID: in your browser, until you delete them.

Your rights

Depending on where you live, you can ask us to:

tell you what data we have about you and give you a copy;
correct it;
delete it;
stop or restrict using it, or object to how we use it;
give it to you in a portable format;
stop using it for playtest analytics. Withdrawing consent or opting out does not affect what we did before, but we will delete the data linked to your playtest ID if you ask.

In Japan, you can request disclosure, correction, addition or deletion, suspension of use, and records of third-party provision of your retained personal data, as APPI provides.

To make a request, email games@warweaver.io. Because playtest data is linked only to a random ID, we can find it only if you tell us that ID. [Describe where the game shows the playtest ID — to be built.] We may ask for information to confirm a request is yours. We answer within one month and do not charge a fee.

You can also complain to a data protection authority, for example the authority in the EU country where you live, the Information Commissioner's Office in the UK, or the Personal Information Protection Commission in Japan. We would appreciate the chance to fix a problem first.

Open Privacy choices at the bottom of any page on warweaverstudios.com or play.warweaverstudios.com and turn off Playtest analytics. The game stops sending data straight away, even in the middle of a session, and deletes its playtest ID from your browser. To delete the data we already received, email us your playtest ID.

Children

Our games are not directed at children under 13. If you are under 16, please ask a parent or guardian before turning on Playtest analytics, or opt out if it is on by default where you live. In the EU, EEA, UK and Switzerland, allowing analytics confirms you are 16 or older, or that a parent or guardian agrees.

If you believe a child has sent us personal data without that permission, contact us and we will delete it.

How we protect data

We keep what we collect to a minimum and limit who can see it.

Organisation: one team member is responsible for privacy and for handling requests and incidents. Everyone who can access the data is bound to keep it confidential. [Confirm who, and that confidentiality is agreed in writing.]
Access: only the three of us can reach the analytics data, through individual accounts with strong authentication. [Confirm once the server is set up.]
Technical: data is encrypted in transit (HTTPS). The analytics service stores no IP addresses, checks every submission, limits how often data can be sent, and keeps its database on our server only.
Devices: team computers use disk encryption, screen locks and up-to-date software. [Confirm for all three team members.]
Foreign providers: we check the data protection systems of the countries where our service providers store data.

If a data breach puts you at risk, we will tell you and the relevant authorities as the law requires.

Changes to this policy

We will update this page when our games or services change, and show the new date at the top. If a change affects what you allowed or opted out of, we will ask for your choice again.

Questions about this policy: games@warweaver.io.