Privacy Policy

1. Game data

To save progress and operate the game, the app stores the following on your device:

• Settings such as language, sound, vibration, effects and seasonal appearance
• Progress, including stage completion records and whether the tutorial was completed or skipped
• In-game purchase status and transaction identifiers needed to apply purchases correctly

The app does not upload these game records to the content delivery server. For device backups, see Retention and deletion.

2. Content delivery and anonymous authentication

The gradual release of landmarks and festivals uses the content delivery system described below. The same availability settings apply to all players, regardless of installation date. This rollout does not introduce additional personal data collection. Offline play uses the last received availability settings, or the initial release settings before the first successful check.

At launch, when you return to the app and during periodic checks while it is in use, the app uses an anonymous ID from Firebase Authentication to retrieve availability settings, additional stages and announcements from Cloud Firestore. From version 1.2, it also retrieves seasonal event schedules. Seasonal appearance is selected on your device. From version 1.1.0, the same delivery system also retrieves corrections to completed artwork and descriptions. This correction feature does not collect additional user information. You can also check manually in Settings, under Additional stages & announcements, using Check for updates. If a waiting time is displayed, follow the instructions in the app before trying again. No email address or password is required. Landmarks are free; festival access depends on your Festival Journey purchase status.

To monitor the operation of content delivery, our server access record contains the anonymous ID and its latest access time. This record does not contain a history of launches, completion records, purchase history, your name, email address or current location. Authentication credentials are stored in protected storage on your device. Downloaded stages, artwork and description corrections, delivery settings, seasonal event schedules, received announcements and read status are stored on the device. Announcement viewing history is not sent to the delivery server. Received announcement history can be viewed offline and remains on the device after delivery ends.

To prevent abuse, Google (Firebase App Check) and Apple (App Attest) process app and device attestation information to verify authenticity. Firebase App Check does not retain attestation material. Apple’s handling is governed by its privacy policy. See Privacy and Security in Firebase for details.

Firebase handles connection information such as IP addresses and user-agent strings to provide authentication and communications and prevent abuse. According to Firebase Authentication's documentation, logged IP addresses are retained for a few weeks; other authentication information is removed from live and backup systems within 180 days after account deletion is initiated. Deleting data through the app does not mean that every record held by the service provider is erased immediately. See Privacy and Security in Firebase for details. If a connection is unavailable, you can play using the last downloaded availability settings and saved stages.

The anonymous account and latest access time are retained until you delete them or we remove them during maintenance. In the Privacy section of Settings, select Delete anonymous delivery data, then confirm with Delete to delete the server access record and anonymous account. Progress and purchase information are kept. A new anonymous ID is created at the next automatic or manual content check. To limit repeated operations, the app stores timing information on your device to manage intervals between operations. If deletion fails because of a connection problem, wait for the interval shown in the app, then try again when you are online.

Authentication credentials may remain on your device after you uninstall the app. Uninstalling alone does not delete the anonymous account or access record on the server.

3. No advertising or tracking

The app contains no ads or advertising SDKs. It does not request tracking permission or access the advertising identifier (IDFA). The game is ad-free whether or not you make a purchase.

4. In-app purchases

Apple processes in-app payments. The app uses product identifiers and transaction information to apply purchases, prevent duplicate application and restore purchases. The app does not receive payment information such as your card number.

Apple handles information under its Privacy Policy.

5. External maps and search

Landmark map links pass the destination coordinates or search terms to Google Maps. Festival search links pass the festival's location and name to Google Search. These links open an external app or website. The game does not collect or transmit your current location.

After you open Google Maps or Google Search, Google's policies apply to information handling and service settings.

6. Support website

This website is served through Firebase Hosting. We have not added user registration, a contact form, our own analytics tools or advertising scripts to this website.

Firebase Hosting processes IP addresses when you visit the website. Firebase states that these addresses are used to detect abuse and analyze usage and are retained for a few months. See Privacy and Security in Firebase.

7. Retention and deletion

Game records, downloaded stages, artwork and description corrections, delivery settings, seasonal event schedules, announcement history and read status remain on the device until the app's data is deleted. Deleting the app deletes these local records. Offloading the app while keeping its data does not delete these records.

Apple's purchase history and data included in device backups may remain. Restoring a backup may restore game records. Use Apple's services to manage backups and purchase information.

Deleting the app does not by itself erase information already processed by Google or Apple. See their policies below for retention periods and data management and deletion procedures.

Deleting anonymous delivery data may take some time. Keep the app open until deletion finishes. Content services require version 1.2 or later. Older versions can no longer retrieve content or delete anonymous delivery data. Update to version 1.2 or later to use these features.

8. External service policies

• Google Privacy Policy
• Apple Privacy Policy
• Privacy and Security in Firebase

9. Users in the United Kingdom and Switzerland

This section applies if the UK General Data Protection Regulation (UK GDPR) or the Swiss Federal Act on Data Protection (FADP) applies to you.

Controller: The controller for the app and this support website is Play Harbor, operated by an individual based in Japan. The operator's name appears as the seller on the App Store. See Contact for how to reach us.

Legal bases:

• Anonymous authentication, delivery of stages and announcements, recording the latest access time and preventing abuse: our legitimate interest in providing and operating the delivery feature securely
• Applying and restoring purchases: performance of the purchase contract
• Handling inquiries: our legitimate interest in answering your inquiry

Processors and recipients: Google (Firebase) processes data on our behalf for authentication, content delivery and hosting. Apple App Attest is used to verify the app and device. Apple processes in-app payments under its own responsibility. We do not sell or disclose personal data to any other third party.

International transfers: The operator is based in Japan, and Google may process information in the United States and other countries. These transfers rely on safeguards permitted by applicable law, such as adequacy decisions or standard contractual clauses.

Retention: As described in sections 2 and 7. Inquiry messages are deleted once they are no longer needed after the inquiry has been handled.

Your rights: Under applicable law, you may request access to, rectification or erasure of your personal data, restriction of processing, data portability, and you may object to processing based on legitimate interests. You can delete the anonymous delivery data in Settings → Privacy → Delete anonymous delivery data. For other requests, please contact us. We may ask for information needed to identify your anonymous ID.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

The app does not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

10. Policy updates

If app features, services or information handling practices change, we will update this page and its last-updated date.

11. Contact

For questions about this policy or information handling, email our support team. On the Japanese support page, select “メールアドレスを表示” (Show email address) to view the contact address.

We use information you send, such as your email address, message and attachments, to the extent necessary to reply, investigate problems and handle your inquiry. Do not send passwords, payment card numbers or other information that is not needed to address your request.