Privacy Policy
1.1 Who we are
Otsunuma Studios is a mobile game developer based in India. This Privacy Policy explains what personal data we collect when you install, play, or interact with our games and services ("Services"), why we collect it, how we use it, and the rights you have over it.
This policy applies to all games and apps published by Otsunuma Studios on the Apple App Store, Google Play Store, and our official websites.
1.2 Information we collect
Information you give us directly
- Account information: username, display name, email address, password (stored in hashed form), profile picture, date of birth, country.
- Payment information: when you make in-app purchases, the transaction is processed by Apple or Google. We do not receive or store your full card or bank details; we receive a transaction confirmation, purchase ID, and the item purchased.
- Communications: messages you send to our support team, feedback, bug reports, and content you post in in-game chat or community features.
1.2 Information we collect (automatic and third-party)
Information we collect automatically
- Device information: device model, operating system and version, device identifiers (such as IDFA on iOS or Advertising ID on Android, where permitted), language, time zone, mobile network, and approximate IP-based location (country/region, not precise GPS unless you grant permission).
- Gameplay data: levels reached, time played, in-game progress, purchases, game settings, crash logs, and performance diagnostics.
- Multiplayer data: match history, opponents, chat logs (retained for moderation), and in-game voice/text communications where applicable.
- Cookies and similar technologies on our websites (see the Cookie Policy below).
- If you sign in using Apple ID, Google, or Facebook, we receive the basic profile information you authorize those services to share (typically name, email, and a user ID).
- We receive aggregate analytics and advertising attribution data from our SDK partners (see Section 1.6).
1.3 Children
Our games are not directed to children under the age of 13 (or the minimum age of digital consent in your country, whichever is higher — 18 in India under the DPDP Act 2023, 16 in many EU states). We do not knowingly collect personal data from children below this age without verifiable parental consent. If you believe a child has provided us data without proper consent, contact hello@otsunuma.com and we will delete it promptly.
Where required by law (including India's DPDP Act 2023), we obtain verifiable parental consent before processing a child's data, do not serve targeted advertising to children, and do not track children for behavioral profiling.
1.4 How we use your information
We use personal data to:
- provide and operate the games, including accounts, saved progress, and multiplayer matchmaking;
- process in-app purchases and prevent fraudulent transactions;
- moderate in-game behavior, enforce our community rules, and investigate abuse or cheating;
- send service-related communications (password resets, purchase receipts, important updates);
- show advertising (including personalized ads where you have consented) and measure ad performance;
- analyze how players use our games so we can improve them, fix bugs, and design new features;
- comply with legal obligations and respond to lawful requests from authorities.
1.5 Legal bases for processing (for EU/UK players)
Where GDPR or UK GDPR applies, we rely on the following legal bases:
You can withdraw consent at any time through in-game settings or by contacting us.
- Contract: to deliver the game and features you've asked to use.
- Legitimate interests: to secure our Services, prevent fraud and cheating, improve our games, and run non-personalized analytics — balanced against your rights.
- Consent: for personalized advertising, optional analytics, and any processing of children's data, where required.
- Legal obligation: to meet tax, accounting, consumer-protection, and law-enforcement requirements.
1.6 Third parties we share data with
We share limited personal data with service providers who help us run the Services. Categories include:
A full, current list of SDKs and sub-processors is available upon request and will be updated as it changes.
We do not sell personal data. We may disclose data if legally required (court order, subpoena, regulatory request) or to protect our rights, users, or the public.
- Cloud hosting and backend (AWS).
- Analytics (Firebase Analytics).
- Crash reporting (Firebase Crashlytics).
- Advertising and attribution (Google AdMob, Unity Ads, AppLovin).
- Customer support (In-game support system).
- Payment processing: Apple and Google handle all in-app purchases directly; we receive only transaction metadata.
1.7 International transfers
Otsunuma Studios is based in India. Some of our service providers process data in the United States, the European Economic Area, and other jurisdictions. Where data is transferred out of the EEA/UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms. For players in India, cross-border transfers are made in compliance with the DPDP Act 2023 and any restrictions notified by the Central Government.
1.8 How long we keep data
When data is no longer needed, we delete or anonymize it.
- Account data: while your account is active, plus up to 24 months after deletion, for fraud-prevention and legal reasons.
- Purchase records: 7 years, as required by Indian tax and accounting law.
- Chat and moderation logs: up to 12 months.
- Crash logs and analytics: up to 14 months, often in aggregated/anonymized form.
1.9 Security
We use industry-standard safeguards — encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and regular security review. No system is perfectly secure; we encourage strong unique passwords and enabling any two-factor options we offer.
1.10 Your rights
Depending on where you live, you may have the right to:
For players in India: under the DPDP Act 2023, you may exercise these rights by contacting our Grievance Officer at hello@otsunuma.com. We will respond within the timelines prescribed by law.
For players in the EU/UK: you may complain to your national data-protection authority (e.g., the Data Protection Commission in Ireland, the ICO in the UK).
To make a request, email hello@otsunuma.com. We may need to verify your identity before acting.
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data ("right to be forgotten");
- object to or restrict certain processing;
- withdraw consent;
- port your data to another service;
- lodge a complaint with a data-protection authority.
1.11 Changes
We may update this Privacy Policy. Material changes will be notified in-game, by email, or through our website at least 14 days before taking effect.
1.12 Contact
If you have any questions about this Policy, please contact us at hello@otsunuma.com.
---