Privacy Policy

1. Who we are

The Service is operated by the CraftNova team. Contact: craftnovagame@gmail.com

We will provide our name, address, and (if applicable) the name of our representative without delay on request to the contact address above.

2. Information we collect

• Account information: email address, password (stored only in encrypted form by our authentication provider), and display name
• Profile information (optional): avatar, banner image, bio, website, and social media links
• Content you post: game HTML, title, description, thumbnail, genre, and other posting settings
• Activity: plays, likes, favorites, bug reports, feedback, and reports
• Contact form messages
• IP address: collected when you play a game, like a game, send a bug report, feedback, or report without logging in, or use the contact form
• Sign-up language: whether you signed up on the Japanese or English site
• Cookies and similar technologies: see section 6

Save data from games is stored only in your browser and is not sent to us.

3. How we use it

• To create and manage your account and let you sign in, post games, and use other features
• To publish and display the content you post, and, for games set to "All Countries" (or games whose text is in a different language from the site they appear on), to translate the title and description with AI and show the translation
• To count plays and likes without duplicates, and to prevent fraud, abuse, and ranking manipulation (IP address)
• To suggest the Japanese or English site based on the country of your access (determined from your IP address; the country is not stored)
• To send you notices and reply to your inquiries (for personal notices, we use the language of the site you signed up on to choose the language)
• To maintain security, investigate problems, and improve the Service
• To show ads (see section 6)

4. Service providers and international transfers

We don't sell your personal information or share it with third parties, except where required by law. We use the following service providers to run the Service:

• Supabase Inc. (USA): database, authentication, and file storage. Data is stored on servers in Japan (Tokyo region).
• Vercel Inc. (USA): hosting and server processing
• Google LLC (USA): advertising through Google AdSense, and Google Fonts
• Anthropic PBC (USA): AI translation of game titles and descriptions
• Cloudflare, Inc. (cdnjs) and jsDelivr: delivery of fonts and code libraries used by the site and by games. Your browser connects to them directly, so they receive your IP address.

These providers are based in the United States, and your information may be processed there. The United States has no comprehensive federal privacy law, but the providers above protect personal information under their own security measures and data processing terms. For information on the United States' privacy laws, see the report on U.S. federal privacy law published by Japan's Personal Information Protection Commission (in Japanese).

If you are in the EEA, the UK, or Switzerland: Japan has an adequacy decision from the European Commission and the UK. Transfers to providers in the United States rely on the safeguards those providers offer, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.

5. How long we keep it

• Account, profile, and posted content: until you delete your account. When you delete your account, we delete your games, profile, uploaded images, and activity history.
• IP addresses used to count plays: deleted after 30 days
• IP addresses attached to bug reports, feedback, reports, and contact messages: deleted after 180 days
• Contact messages: kept as long as needed to respond and to keep a record of the exchange

Backups may contain copies of deleted data for a limited time before they are overwritten.

6. Cookies, local storage, and ads

• Keeping you signed in (authentication session)
• Remembering your display language and whether you closed the language banner
• Remembering likes and which notices you've read
• Ads: we plan to show ads through Google AdSense. Google and its partners may use cookies to show ads based on your visits to this and other sites. You can learn how Google uses this information at How Google uses information from sites or apps that use our services, and turn off personalized ads in Google's Ad Settings.
• For visitors in the EEA, the UK, and Switzerland, we will ask for your consent before using cookies for personalized ads.

Our site does not respond to "Do Not Track" browser signals. You can control ad personalization through the settings above.

7. Your rights and how to make a request

You can ask us to tell you how we use your information, or to disclose, correct, add to, delete, stop using, or stop sharing your personal information. You can also see and edit most of your information yourself in Account settings and My page, and delete your account at any time.

To make a request, email craftnovagame@gmail.com. We will confirm that the request comes from you (for example, by replying to the email address registered to your account) and respond without delay. There is no fee.

If you are in the EEA, the UK, or Switzerland, you also have the right to access, rectify, erase, restrict, or object to processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection authority.

8. Legal bases (EEA, UK, and Switzerland)

• Performance of a contract: providing your account, publishing and translating the content you post, and replying to inquiries
• Legitimate interests: preventing duplicate counts, fraud, and abuse; keeping the Service secure; suggesting the right language; improving the Service
• Consent: cookies for personalized ads
• Legal obligations: where the law requires us to keep or disclose information

9. Security

We protect personal information with measures that include:

• Encrypting all communication with HTTPS
• Limiting access to data with database access controls, and keeping administrator keys on the server only
• Running posted games in an isolated sandbox that can't access your account or connect to the internet
• Using service providers that maintain their own security measures
• Understanding the privacy laws of the countries where providers are located (see section 4)

We can provide more details on our security measures on request, unless doing so would put the information at risk.

10. Children

The Service is not directed to children under 13. You must be at least 13 years old to create an account, and if you are under the age required by the laws of your country, you need permission from a parent or guardian. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete it.

11. Changes to this policy

We may update this policy. We will post the updated policy on this page with a new effective date, and announce important changes on the Service.

12. Contact

Email: craftnovagame@gmail.com