Privacy Policy

In short

Shobukan works without sign-up by default. You play with an anonymous identifier generated on your device. You can then link your Apple or Google account if you want to recover your Premium status and custom packs on another device; this link is required to claim free online games. We collect the bare minimum to run the game and fix bugs.

Data collected

• Anonymous ID: a UUID generated automatically on first launch, stored on your device. No PII attached.
• Nickname + avatar: chosen by you, shared with other players in the room. Stored locally and server-side.
• Apple / Google linking (optional, required for free games): if you choose "Continue with Apple/Google", your identifier is linked to your Supabase session. Your email stays private unless you allow sharing it.
• Free-game anti-abuse: when you activate free games, we keep a non-reversible SHA-256 hash of the Apple/Google technical identifier and its associated counter. Neither the raw identifier nor your email is kept in this counter.
• Custom packs: your word pairs / questions / cards are stored server-side, accessible by you (and by the community if you publish a pack).
• Game events: descriptions, votes, questions recorded for the game to run. Deleted at the end of the game.
• Purchases: RevenueCat processes your In-App purchases and keeps a transaction ID. No banking details on Shobukan's side (Apple / Google handle them).
• Crashes and performance: Sentry captures technical errors (anonymized stack traces). PostHog measures screen usage to improve the app — without IDFA as long as you decline tracking.

Data NOT collected

• Email, phone number, postal address (except Apple/Google linking where you choose what you share)
• Payment data (Apple / Google handle them)
• Location data
• Contacts or photos
• Cross-app advertising data without ATT consent

Sub-processors

• Supabase, Inc. — database and auth (supabase.com/privacy)
• RevenueCat, Inc. — In-App purchase management (revenuecat.com/privacy)
• Sentry (Functional Software, Inc.) — crash reporting (sentry.io/privacy)
• PostHog — product analytics, EU hosting (posthog.com/privacy)
• Apple / Google — sign-in, In-App purchases, push notifications

Cross-app tracking (ATT)

iOS asks for tracking permission via the system pop-up (ATT). If you decline, PostHog and RevenueCat do not use your IDFA. You keep access to all features; only aggregated usage metrics are affected.

Purchases (Premium, credits and Story Mode)

Premium subscriptions and creation credits are handled by Apple / Google. Premium renews automatically according to the selected plan unless cancelled from your App Store or Google Play account; credits are one-time purchases. Story Mode (Expedition) card packs are one-time, restorable purchases; life refills are consumable purchases. Your lives and Story Mode progress are stored on your device and backed up to our servers (Supabase) when possible, so you can pick them up on another device. You can restore Premium and your card packs from Settings → "Restore purchases". No refund is processed by Shobukan: please go through Apple / Google support.

Data retention

• Game data: deleted at the end of the game or within 2h for abandoned rooms
• Profile + stats + packs: kept as long as your account is active
• Pseudonymized free-game marker: up to 12 months after your last use, then the quota can reset
• Sentry crash reports: 90 days
• PostHog analytics: 12 months max, aggregated
• Linked account: until you delete it

Your rights (GDPR)

You have the rights of access, rectification, deletion, portability and objection. You can:

• Reset your data from Profile → "Reset" (erases everything server-side, keeps an anonymous session)
• Permanently delete your account from Profile → "Delete my account" (also erases your auth account)
• Export your data from Settings → "Download my data"

For any specific request, contact us via the legal notices.

Changes

We may change this policy. In case of a substantial change, the new version will be shown at app launch and you will have to accept it to keep using the service.