Privacy Policy

1. Information we collect

The information we process depends on how you use the game and which optional features you choose.

How we receive information

We receive information directly from you, automatically from the game or your device, from other players who interact with you, and from service providers such as Apple, Google, RevenueCat, and Supabase. You can choose not to provide optional information, but a feature that needs it may not work.

This website

This marketing website does not intentionally use advertising or analytics cookies. Its hosting and security provider may process standard request information such as IP address, browser type, requested page, and timestamp to deliver and protect the site. If we add analytics, newsletters, or other tracking later, we will update this policy and request consent where required.

2. How we use information

We use personal information to:

• provide the game, authenticate players, save progress, operate battles and social features, and synchronize content;
• process, validate, restore, and support purchases and virtual entitlements;
• provide optional rewarded ads and the rewards attached to them;
• answer support, privacy, safety, and account-deletion requests;
• detect cheating, fraudulent transactions, unauthorized access, harmful conduct, and technical or security problems;
• maintain, debug, balance, and improve the game, including through aggregated or de-identified analysis; and
• comply with law, enforce our Terms, and establish, exercise, or defend legal claims.

Legal bases in the EEA, United Kingdom, and similar regions

Depending on the activity, we process information because it is necessary to perform our contract with you, to comply with law, with your consent, or for legitimate interests such as securing and improving NinjaHorizon, preventing fraud, and supporting players. We balance those interests against your rights. You may withdraw consent at any time, without affecting earlier processing.

3. When we disclose information

We disclose only the information reasonably needed for the purposes below. The providers we currently use include:

• Supabase - account authentication, databases, backend functions, and security logs.
• Apple and Google - app distribution, purchases, platform services, and optional linked sign-in.
• RevenueCat - purchase validation, entitlement management, purchase restores, and refund status.
• Google Mobile Ads and its consent tools - optional rewarded ads, privacy choices, ad delivery, measurement, and fraud prevention.
• Cloudflare - website, game-content, update, network, and security services.

When a provider processes information on our behalf, we require it through contract or applicable service terms to safeguard that information consistently with this policy and applicable law. Some companies, such as an app store processing your purchase, may also act independently under their own privacy terms. We may also disclose information to professional advisers; to a competent authority when required by law; to protect players, our rights, or public safety; or as part of a merger, financing, acquisition, or sale, subject to appropriate protections.

Information visible to other players

Multiplayer and community features are public or social by nature. Your player name, character appearance, rank or leaderboard position, clan name and membership, clan announcement, and related game activity may be visible to other players. Do not include real names, contact details, or other sensitive information in public player or clan fields.

4. Sale, sharing, and targeted advertising

We do not sell personal information for money. Some privacy laws use "sale," "sharing," or "targeted advertising" more broadly to cover certain advertising technology. Depending on your region, device settings, consent, and how Google configures an ad, optional rewarded advertising may fall within those definitions. Where required, you can opt out through the in-game Privacy Choices control, the consent message shown in the game, or your device privacy settings. You will not receive the associated in-game reward if you choose not to watch a rewarded ad.

5. Optional rewarded ads

NinjaHorizon uses Google Mobile Ads for voluntary rewarded ads. The Google Mobile Ads SDK may collect or receive IP address (which can indicate approximate location), device or advertising identifiers, interactions with the app and ads, and diagnostic or performance information. The exact processing depends on your platform, region, consent, and device settings. A player identifier and reward-session reference may be used to verify that the correct account completed an ad and to prevent duplicate or fraudulent rewards.

Where required, the game asks for consent before requesting ads and provides access to Privacy Choices in Settings. On Apple devices, you can also deny any system tracking permission request. Changing a choice does not affect processing that was already lawful.

6. How long we keep information

We apply the following retention principles:

• Account, profile, social, and gameplay records are generally kept while your account is active and until they are deleted or no longer needed to provide the service.
• Verified deletion requests are ordinarily completed in active systems within 30 days, unless law permits or requires us to keep specified records longer.
• Purchase receipts, transaction identifiers, entitlement history, refunds, and related fraud records may be retained for the period required by tax, accounting, consumer-protection, platform, and dispute-resolution obligations. We restrict and, where feasible, de-link those records from your deleted profile.
• Security, authentication, support, and moderation records are kept only as long as reasonably needed for security, dispute, enforcement, and legal purposes.
• Residual copies may remain temporarily in protected backups until they rotate out under our normal backup schedule. De-identified information that can no longer reasonably identify you may be retained.

We consider the amount and sensitivity of the information, the reason it was collected, security and fraud risk, applicable limitation periods, and legal or platform requirements when setting a retention period.

7. Security and international transfers

We use reasonable administrative, technical, and organizational measures designed to protect information, including authenticated access, encrypted network transport, access restrictions, and security logging. No online service can guarantee absolute security. Please tell us promptly if you suspect unauthorized account access.

We and our providers may process information in countries other than your own. Where required, we use recognized transfer mechanisms and contractual safeguards. You may contact us for more information about safeguards relevant to your region.

8. Your choices and privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, or a portable copy of personal information; restrict or object to processing; withdraw consent; or appeal our response. You may also complain to your local privacy or data-protection authority. We will not discriminate against you for exercising a privacy right.

• Advertising: open Settings and choose Privacy Choices when the option is available, or use device-level privacy controls.
• Linked sign-in: manage Apple or Google access in the settings for that provider. Revoking provider access does not by itself delete your NinjaHorizon account.
• Account: use the in-game deletion control or the web request method described below.

We may need to verify your identity and authority before fulfilling a request. An authorized agent may submit a request where local law allows it, but we may ask for proof of authorization and direct verification with the player.

9. Account deletion

You can permanently delete your account in the game from Settings > Danger Zone > Delete account, or submit a request without reinstalling the app from our account-deletion page. Deletion is permanent and removes your player profile, progress, inventory, balances, and linked sign-in identity, subject to the limited retention described in Section 6.

A clan master must transfer clan leadership or disband the clan before deletion so that the request does not strand a shared player group. Our deletion page explains this step and the information we may retain.

10. Children and younger players

NinjaHorizon is intended for players age 13 and older and is not directed to children under 13. A higher minimum age may apply in your country. If you are under the age of legal majority where you live, a parent or legal guardian must review and agree to the Terms with you. We do not knowingly collect personal information from a child below the applicable minimum age. A parent or guardian who believes this occurred should contact us so we can investigate and delete it.

11. Changes to this policy

We may update this policy as NinjaHorizon, our providers, or legal requirements change. We will post the revised policy here, change the effective date, and provide additional notice in the game or by another appropriate method when a change is material or consent is required.

12. Contact us

Privacy questions and requests may be submitted through the support option provided in the Service or the public contact method in the applicable app-store listing.