Privacy Policy

1. About this draft

This policy describes the pre-release web and mobile versions of That Time I Was Reincarnated as a Squad Commander (the Game).

2. Information you provide

When you create or use an account, the Game may store:

• Your display name and email address.
• An indication of the sign-in method linked to your account, such as email and password or Google.
• Account preferences and security records, including active sessions.
• Messages and details you send when requesting support.

Passwords for credential accounts are handled by the authentication system and are not displayed to administrators or other players. Sign-in providers may process information under their own privacy policies.

3. Gameplay and account information

The Game stores information needed to provide persistent play, including campaign saves, squads, roster and collection state, mission progress, rewards, inventory, match commands and results, purchases, entitlements, and timestamps associated with those records. This information is connected to your account so that progress can be restored after you sign in on another supported device.

The current product does not intentionally make your email address or authentication records visible to other players. Multiplayer features may expose the player-facing name and game state needed for a match.

4. Purchases and payment providers

Web purchases currently use Stripe Checkout. Stripe processes payment details under its own privacy policy. The Game stores the product purchased, purchase status, amount, currency, provider reference, and the account entitlement needed to deliver the purchase. The Game does not receive or store your complete card number.

When mobile purchasing is enabled, Apple App Store or Google Play processes the purchase under its own policy. The Game receives provider transaction details needed to verify the purchase and grant or revoke the related entitlement. The Game does not receive your complete payment-card number from those stores.

5. Images, assets, and Cloudinary

The Game uses Cloudinary to host and deliver game or administrator-authored images through a content delivery network. Loading those assets can cause Cloudinary to receive ordinary network information such as an IP address, browser or device details, requested asset, and request time. The current player experience does not advertise a feature for uploading personal photos. If player uploads are added, this policy and the in-product controls must be updated before launch.

6. Diagnostics, logs, and gameplay events

The service may process request logs, error details, IP addresses, browser or device information, and security events needed to operate, diagnose, and protect the Game. It may also record gameplay events that are necessary to resolve matches, award progress, prevent duplicate rewards, or investigate defects.

Beta builds use Sentry for application errors and PostHog for a small set of gameplay and reliability events, including performance summaries. These services may receive the app version, build, platform, device or browser type, a pseudonymous account or app identifier, event names, counts and timings, and technical error details. PostHog's automatic touch tracking and session replay are disabled. We do not intentionally send passwords, authentication tokens, purchase receipts, email addresses, player names, or report descriptions to these services.

If you choose **Report a problem**, the Game sends the description you enter, limited build/device/screen context, and any screenshot you choose to attach to our support storage. A screenshot or description may contain information you choose to include. Reports are connected to your account so we can investigate and respond. Do not include passwords, payment details, or other sensitive information in a report.

7. How information is used

Information is used to:

• Authenticate accounts and keep sessions secure.
• Save progress and provide game features.
• Deliver purchases and maintain entitlement records.
• Prevent fraud, abuse, and duplicate rewards.
• Diagnose errors, monitor reliability, and improve gameplay.
• Respond to support, privacy, and account-deletion requests.
• Meet legal, tax, accounting, and platform obligations that apply to the service.

The current product is not designed to sell personal information or serve targeted advertising.

8. Service providers and disclosures

Information may be processed by vendors that help operate the Game, including hosting and database providers, authentication and email services, Stripe for web payments, Apple and Google for enabled mobile purchases, Cloudinary for asset delivery, Ably for real-time game communication, Sentry for error diagnostics, PostHog for product analytics, and an optional social sign-in provider you choose. Only the information reasonably needed for the relevant service should be provided.

Information may also be disclosed when required by law, to protect players or the service, or as part of a business transaction subject to appropriate safeguards. The final policy should identify the production operator and confirm the exact vendor list before launch.

9. Retention and deletion

Account and gameplay data is generally retained while an account remains active. Session records expire or may be revoked. Problem reports and attached screenshots are removed with the account. Sentry and PostHog events follow the retention settings of those services; the operator must finalize and disclose the exact periods before enabling beta collection. Purchase, fraud-prevention, security, backup, tax, or transaction records may need to be retained after an account request where permitted or required by law.

Self-service account deletion is available from the Account page and from the public Account Deletion instructions. Credential accounts confirm the current password; social-only accounts must have a recent provider sign-in. Active account and player data is removed immediately from the application database when the transaction completes.

10. Security and your choices

Reasonable technical and organizational measures are used to protect account information, but no online service can guarantee absolute security. You can update your display name, change a credential password, revoke other sessions, or sign out from the Account page. You may also request access, correction, or deletion where applicable by following the Support and Account Deletion pages.

11. Children

The intended launch age and parental-consent requirements have not yet been finalized. Do not submit this draft to an app store until counsel has confirmed the audience, age rating, and any child-privacy obligations.

12. Changes and contact

This policy may change as the Game and its providers change. The version and effective date at the top of this page will be updated when material revisions are published. During pre-release, use the support method described on the Support page for privacy questions. The production business name, mailing address, and privacy contact must be added before launch.