นโยบายความเป็นส่วนตัว

1Scope and controller

This policy covers the Arcade Tycoon: World Tour website, the mobile game and support provided by HANA GAMES, a French société par actions simplifiée (SAS), SIREN 948 522 131, SIRET 948 522 131 00010, VAT FR13948522131. Our registered office and postal privacy contact are 60 rue François Ier, 75008 Paris, France. HANA GAMES is the controller for the processing described here.

The game is in development. Connected gameplay and diagnostics exist in development builds. Real-money purchases, platform account recovery and rewarded advertising are not currently activated. Descriptions of these optional features apply only when they are made available with their own information and choices. This website cannot sign you into, change or delete a game account.

One policy, two services. Website visitors and game players can use the same privacy contact, but browser preferences and a game account are separate. The privacy choices page explains what each control actually does; the terms of service describe use of both services. This policy is published in English. Translated page introductions and navigation help you find it; mandatory local information and language requirements remain applicable.

2Visiting the website

The website has no account login, advertising SDK, tracking pixel or audience-measurement script. Fonts and artwork are served with the site. Hosting and network services necessarily process your IP address, requested URL, time of access and browser information to deliver pages and protect the service; static hosting does not mean that no data is processed.

The information notice can remember its dismissal in local storage under arcade:cookie-notice. If you use the privacy-choice button, arcade:privacy-choice remembers your refusal on this browser. An explicit motion preference can be remembered under arcade:motion. These preferences do not contain a game account identifier. You can remove them through your browser’s site-data controls. The privacy-request form prepares a message in your email app; the website does not send it or persist its contents. There is no downloadable request file.

3Game, account and support data

Connected gameplay uses a server player identifier, session records, arcade name and catalogue avatar, room layout, owned machines and cosmetics, currencies, progression, tasks, timestamps and command receipts. These records let us save progress, validate actions, reconcile interrupted requests and prevent duplicate rewards. Session secrets are not intended for publication or inclusion in support requests.

Operational diagnostics may include game/build version, operating-system and device information, exception or error details, request identifiers and event timestamps. Security infrastructure may process connection information. Player feedback and support correspondence include what you choose to provide and information needed to investigate the report. Do not send passwords, payment-card details, identity documents or sensitive personal information unless specifically requested through an appropriate secure channel.

The game uses curated arcade-object avatars. It does not offer player-photo uploads. The described features do not require contacts, microphone recordings or precise GPS location. If a future feature needs another permission or data category, its purpose and choice must be explained before collection.

4Purposes and legal bases

We process account and gameplay records to provide the service you request and perform our contract with you. We process necessary security, anti-abuse and technical reliability data in our legitimate interests in protecting players, maintaining a functioning service and investigating faults, subject to your rights. Support is handled to answer your request and, where relevant, fulfil that contract.

We keep records required by applicable tax, accounting and consumer rules on the basis of legal obligations. Optional advertising personalisation, cross-service tracking or non-essential measurement require the applicable consent or other lawful choice before activation. You may withdraw consent without affecting processing that was lawful before withdrawal. Core gameplay is not conditional on accepting optional tracking.

Necessary does not mean unlimited. A game session identifier is needed for connected saving; advertising identifiers are not needed to arrange a room. If required account information is not provided, the corresponding connected service may not work. Refusing an unrelated optional purpose must not be treated as consent to it or remove already acquired game content.

5Purchases, identity providers and optional advertising

If platform sign-in is enabled, Google on Android or Apple on iOS may provide a verified provider identifier and the account information necessary for linking. Their own policies cover their services. A lost guest account that was never linked may not be recoverable.

If purchases become available, the store handles payment details. HANA GAMES processes product identifiers, transaction proofs, verification results and commercial rights to deliver an entitlement once, investigate interrupted delivery and handle refunds. Purchases and balances belong to the original server player account. Signing into that account reads existing rights; it does not grant already delivered consumables again or transfer them to another account.

Unity LevelPlay is the planned rewarded-ad integration; it is currently inactive. Its advertising partners, identifiers, consent management and verified reward flow must be disclosed before real activation. Installing an SDK does not mean advertising is enabled. A device tracking permission is separate from consent to specific processing. Refusing optional advertising does not remove earned progress or existing purchases.

6Recipients and international transfers

Confirmed hosting arrangements: AWS hosts the website and OVH hosts the game services/server. HANA GAMES has confirmed that the hosted data are located in the European Union. Access is limited to authorised HANA GAMES personnel and providers who need it for their role, under applicable confidentiality, security and data-processing obligations.

No advertising sale or cross-context sharing is implemented on this website. The game currently enables no real advertising partner flow. Before a new partner or data-sharing purpose is activated, the relevant recipient information and choices must be provided. For transfers outside the European Economic Area, an applicable adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses, are required. You can ask us about recipients, transfer locations and safeguards relevant to your data.

The names above identify the confirmed providers, not a claim that every entity in their corporate groups receives player records. Ask us which contracting entity, service and location apply to your records. Hosting providers do not become advertising partners merely by delivering the service. Where a provider determines its own processing purposes, its separate notice and responsibilities also apply.

7Retention and deletion

Gameplay and account records are retained while needed to provide your account, preserve acquired rights and resolve pending transactions. Inactivity alone must not silently destroy paid rights. Support correspondence is retained for the time needed to resolve and follow up the request; technical and security records for diagnosis, protection and investigation. Statutory transaction records and information needed for a dispute can be retained for the applicable legal period, with restricted access.

Retention is determined by the purpose, legal requirements, transaction status and any unresolved dispute, rather than indefinite reuse for marketing. Deletion requests are assessed against those requirements. Where erasure is required, active records are removed or anonymised; isolated backup copies expire under their rotation and must not be reused to reinstate an erased account. The site does not promise an automatic deletion feature or a production backup schedule that is not yet implemented.

A retention criterion is not an unlimited term. We must review whether the purpose still requires identifiable records, restrict records kept for a legal duty or dispute, and avoid restoring deleted active records from a backup. You may ask for the retention period or criterion applying to a particular record and for an explanation of any deletion exception. Uninstalling the game, clearing browser storage and asking us to erase a server account are three different actions.

8Your rights and how to contact us

Depending on the applicable law, you can request access, correction, erasure, restriction, portability of data processed by consent or contract, and objection to processing based on legitimate interests. You can withdraw consent at any time and object to direct marketing. These rights are subject to their legal conditions, including duties to preserve certain records.

Write to HANA GAMES, Privacy, 60 rue François Ier, 75008 Paris, France, or use the contact channel linked below. Describe your request and, if relevant, your player identifier and platform. We ask only for proportionate information needed to find your records and verify that the request is yours. Never send a session token or password. We normally respond within one month; where the law allows an extension for complexity or volume, we explain it within that first month. Requests are normally free.

You may complain to the CNIL at cnil.fr or your competent data-protection authority. California residents, where the CCPA applies, may exercise applicable access, correction, deletion and sale/sharing opt-out rights, including through an authorised agent. We do not require creating an account to ask for an opt-out or penalise you for exercising applicable rights. Browser Global Privacy Control is treated as a refusal for this website; it is not a remote instruction to a separately identified game account.

9Children and young players

The game may be used by young players, subject to its eventual store rating and applicable rules. We do not impose a new minimum age through this policy. A parent or guardian must assist where local law requires their authorisation for a contract or consent-based processing. Optional advertising must apply appropriate age and territory safeguards before activation; young players must not be treated as adults by default.

Parents and guardians can contact us about a child's data using the same privacy channel. We will check the request proportionately and address processing that lacks the required authorisation. HANA GAMES does not currently enable behavioural advertising in the game.

10Policy changes

The revision date appears above. Material changes to data uses or choices will be explained through the relevant service before they take effect; a new purpose requiring consent is not authorised simply by updating this page. This policy does not replace a store's own policy or your statutory rights.

11Browser storage and tracking signals

No advertising or analytics script runs on this website. The local entries below store user choices rather than a server account. No optional tracking consent is inferred from closing the information notice, scrolling a page or changing language.

Global Privacy Control (GPC) is treated as a refusal on this website. It does not identify a game player on another device. We do not run cross-site behavioural tracking here regardless of a legacy Do Not Track setting; that setting is not a server-account instruction. Browser resets may remove stored choices, while an active GPC signal continues to express a refusal.

12EU hosting and international access

The confirmed website and game hosting locations are in the European Union. Storage location and a transfer are not the same question: a new recipient or remote access from another country must be assessed before it is permitted. No future advertising, support or platform integration is authorised by the existence of this policy.

Where EU/UK rules apply to an international transfer, we must use the relevant lawful mechanism, such as an applicable adequacy decision or appropriate contractual safeguards and any necessary additional measures. Local rules in other regions may require separate consent, disclosures or safeguards. You can ask the privacy contact about actual recipients, access locations and the safeguards relevant to your data; we do not claim certification under a transfer programme that has not been confirmed.

13Security, incidents and automated game decisions

We use access restrictions and transaction safeguards appropriate to the service. No network or device is completely secure; protect your device and platform credentials. Report suspected account misuse through support rather than posting account secrets publicly.

We must use proportionate organisational and technical safeguards, limit operational access and keep authentication secrets out of public diagnostics. No online service can guarantee zero security risk. If you suspect compromise, contact support without publishing credentials; secure the relevant device and linked platform account where available.

If a personal-data breach occurs, we must assess its consequences and make the notifications to competent authorities and affected people required by applicable law. This policy does not replace an incident notice or promise an unverified notification channel.

Server validation, timers and gameplay calculations apply game rules; they are not credit decisions, employment decisions or a real-world lending service. The described website has no advertising profiling. If a future feature introduces automated decisions producing legally significant or similarly significant effects, its logic, consequences and applicable human-review rights must be explained before use.

14Additional rights by region

Mandatory local law takes priority. The table is an overview of major regional frameworks, not a declaration that every law applies to every visit or that the game is released in every territory. Rights depend on the law’s scope, the processing and any lawful exception. The same privacy contact accepts requests from other regions too; tell us your country and the service concerned so we can identify the applicable procedure.

We explain a lawful refusal, any proportionate verification, applicable response period and any available appeal or complaint route. A one-month GDPR response statement is not a replacement for a different local deadline. An authorised agent or guardian may act where local rules permit. We do not impose a new account-registration step to submit a browser opt-out.

15How to exercise a right

1. Identify the service and request. For game-account and associated-data deletion, follow the in-game account guide or data guide; the website cannot submit that request. For other applicable privacy rights, use the privacy contact form or write to HANA GAMES, Privacy, 60 rue François Ier, 75008 Paris, France. State the service concerned, your country if relevant, a safe reply contact and the action sought. Mandatory statutory rights and complaint routes are not limited by these operational instructions.

2. Match the records proportionately. A player identifier and platform may help find an account. We may ask for limited additional verification where necessary to avoid disclosing or deleting someone else’s data. Do not send passwords, session tokens or unnecessary identity documents. An agent must provide the authority required by the applicable law.

3. Receive a response and explanation. We respond under the applicable deadline, explain permitted extensions and give reasons for any lawful exception or refusal. Requests are normally free; any permitted fee or refusal for abusive requests must be justified under the relevant law. We must preserve applicable appeal and supervisory-complaint rights.

4. Understand the effect. Account erasure can remove progress and access to account-linked content. Some transaction or legal records may remain under a separate duty with restricted access. A browser opt-out does not erase an account; clearing browser storage does not erase hosted game records. These distinctions do not remove your right to erasure where it applies.