PRESENTATION WEBSITE · GAME IN DEVELOPMENT

Privacy

Shinvara is a project by Gioele Giacalone, Switzerland. Shinvara Studios is a creative name, not a company.

Contact: support@shinvara.net

Advertising (Google AdSense)

To support the game’s development, the site shows Google AdSense ads, labelled “Advertisement”. Google and its partners may use cookies and device identifiers to show ads, measure them and prevent fraud.

In the European Economic Area, the United Kingdom and Switzerland, Google’s consent message, an IAB TCF-certified platform, asks for your choice: you can accept, decline, or close the message with the X, which counts as declining. If you decline, Google may show non-personalised or limited ads; according to Google, cookies and local storage are then used only to fight invalid traffic. In the United States, Google shows a link to opt out of the sale or sharing of data. Declining never stops you from using the site.

You can change your choice at any time with the “Privacy and cookie settings” button at the bottom of every page; withdrawal applies from then on. How Google uses information from partner sites: policies.google.com/technologies/partner-sites. Google’s advertising cookies and their duration (for example FCCDCF and FCNEC for your choice, __gads, __gpi and __eoi for ads and security, up to 13 months): business.safety.google/adscookies.

Legal basis: your consent for personalised ads and for the cookies that require it. Google acts as an independent controller of its own processing and may transfer data to the United States under the safeguards it adopts.

Site rewards

The Rewards page previews the daily gifts. The service is not active yet and currently collects no codes, accounts or other data. Before it goes live, this page will explain which data is needed to credit the gifts.

Data stored on your device

The site remembers, only on your device, the latest patch notes you have seen (local storage key shinvara.seen.v1). Nothing is sent to us, and you can clear it from your browser settings.

The Account page also uses that browser tab’s sessionStorage: shinvara.account holds the session (session code, account ID and expiry, never the password) and is deleted as described in “Shinvara account”; shinvara.lock holds the number of wrong passwords in a row and the end of the 5-minute pause that follows five of them. Both stay only in that tab and disappear when you close it.

Email contact

The support link opens your email application. If you write, you send Gioele Giacalone your email address and message content so that he can reply. Domain email is handled by Infomaniak. Do not send passwords or sign-in codes.

Hosting and full documentation

Pages are hosted by Infomaniak on the existing Starter hosting.

Technical delivery of the pages may involve hosting-provider logs, separate from the website code. Full documentation, including retention, legal bases and how to exercise your rights, is being prepared. For information or requests concerning your data, use the contact above.

In the game (Shinvara iPhone app)

The game is still in development and is currently available only as a closed TestFlight beta. This section describes how it will handle data once it is released on the App Store; we will update it if anything changes.

Account and saves. The game uses PlayFab (Microsoft) to save your progress on the server: levels, characters, items, in-game currencies and rewards. To do so it creates a player identifier (PlayFab ID), even if you play as a guest. If you create an account we also use your email address and the sign-in method you choose (email and password, Apple or Google). They are used only to run the game, recover your account and prevent fraud.

Purchases. Payments are handled by Apple: we never see your card details. Apple sends us the transaction confirmation (product, date, identifier), which we keep with your account to credit the purchase and handle refunds or disputes.

Advertising. The game may show optional rewarded video ads provided by Google AdMob and other ad networks through mediation. These providers may collect device identifiers, data about the ads you see, an approximate location derived from your IP address and technical crash and performance data. In the EEA, the UK and Switzerland we ask for your consent with Google’s message; on iPhone the advertising identifier (IDFA) is used only if you allow it in Apple’s “Allow tracking” prompt. If you are under 14 or have not given your age, we show only non-personalised ads and never ask for tracking. You can change your choices in the game settings and in iPhone Settings › Privacy & Security › Tracking.

What we do not collect. The game does not access contacts, photos, camera, microphone or precise location, and uses no analytics tools of its own.

Retention and deletion. We keep account data for as long as the account exists. You can ask for deletion from the account settings in the game or by writing to support@shinvara.net: we delete the account, progress and linked data within 30 days, except what the law requires us to keep (for example proof of purchases). The steps are on the Delete your account page.

Children. The game is suitable for everyone. Creating an account under 14 requires a parent’s consent; without an account you play as a guest.

Shinvara account

On the Account page you can create a Shinvara account, which is the same account as the game. We process the account identifier (PlayFab ID), the creation date and the linked sign-in methods; if you use them, also your email address, a random technical username and the display name you choose. Your password is received and kept only by PlayFab’s systems: we never see or store it.

Ways to sign in. You can sign in with an email and password. Sign-in with Google and with Apple is not active yet: the paragraphs about them apply from when it is. In every case the account is the same as the game’s.

Sign in with Google (not active yet). If you choose “Continue with Google”, Google asks for your consent to share your Google account identifier, email address and basic profile data with Shinvara (“openid”, “email”, “profile” permissions). Google returns to this page a credential that is valid for one sign-in only; the page forwards it straight to PlayFab without keeping it, and PlayFab verifies it directly with Google. The site never sees your Google password. With the account, PlayFab keeps your Google identifier and, when Google provides them, the email address, name, language and gender set in your Google profile; your Shinvara profile shows only the Google email address. We use this data only to recognise you and run your Shinvara account, in line with the Google API Services User Data Policy, including the Limited Use requirements; we do not use it for advertising and do not share it with third parties. Google is an independent controller for its part (policies.google.com/privacy). You can revoke access at myaccount.google.com/permissions; revoking does not delete your Shinvara account.

Sign in with Apple (not active yet). If you choose “Continue with Apple”, Apple confirms your identity and returns to this page a signed token with an anonymous, developer-specific identifier; the page checks that the token is meant for Shinvara, forwards it straight to PlayFab without keeping it, and PlayFab verifies its signature. The site asks Apple for neither your name nor your email. Apple is an independent controller for its part (apple.com/legal/privacy). Sign in with Apple on the website is a separate method from the iPhone app: to use the same account, link it from your profile after signing in, or add an email and password. You can stop using Apple sign-in in Settings › [your name] › Sign in with Apple or at account.apple.com; your Shinvara account remains until you ask us to delete it.

When you create the account or sign in, PlayFab also records your device’s IP address, the approximate location derived from it (for example country and city) and the date and time of your sign-ins, for account security and to run the service.

Accounts are managed with PlayFab, a Microsoft service acting as our processor; data may be processed on Microsoft servers, including in the United States, under the safeguards Microsoft adopts (such as the standard contractual clauses). If you ask to reset your password, PlayFab sends the email to the address you enter.

Purpose: to create and manage your account, shared with the game for sign-in and saves and, in the future, to credit site rewards. Legal basis: performance of a contract, that is providing the service you ask for (Art. 6(1)(b) GDPR). You must be at least 14 years old to create an account.

Google and Apple scripts, and cookies. The Account page loads Google’s or Apple’s sign-in script only when you press that button; from then on your browser connects to their servers, which receive your IP address and technical browser data and may use their own cookies on their domains, including through the browser’s FedCM feature. The site sets no cookies for the account, does not use Google One Tap and keeps no Google or Apple credential: each one is used for one sign-in and then discarded. The Account page shows no ads.

After you sign in, the session (a session code, the account ID and its expiry, never the password) stays only in this browser tab (sessionStorage) and is deleted when you log out, close the tab or open another page of shinvara.net. If you go from this tab to another website, the code stays in the tab, readable only by shinvara.net, until you close it or open another page of shinvara.net. It is strictly necessary for the service you request and needs no consent. Logging out removes the code from this browser; on PlayFab the session code stays valid until it expires (24 hours at most), even after a password change.

Linking methods. You can link several methods to the same account and, from your profile, unlink Google or Apple as long as the account keeps another way to sign in. A method belongs to one account only, and accounts are never merged automatically. If your profile shows a method you do not recognise, unlink it, change your password and write to support@shinvara.net.

Retention and deletion. We keep account data, including linked Google and Apple identifiers, until you delete the account. To delete it, use “Request account deletion” in your profile or write to support@shinvara.net quoting the account ID shown in your profile. To confirm the account is yours, we will write to the sign-in email address recorded in the account and act only after your reply from that address: the account ID, the creation date and the other data shown in the profile are not enough as proof. If the account has no sign-in email (for example if you only use Google or Apple), sign in and add an email and password from your profile first. Within 30 days of confirmation we erase the account, its Google and Apple links and the linked game data, on the site and in the game; PlayFab backup copies are erased on Microsoft’s technical schedule. You can exercise the rights described below at any time.

Your rights

You can ask for access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to support@shinvara.net. You can also complain to a supervisory authority: in Switzerland the FDPIC, in the European Union the authority of your country (in Italy the Garante per la protezione dei dati personali).