Privacy policy

1. Controller

2. Website, game and device storage

Requests for pages and assets transmit your IP address and technical request information to our hosting infrastructure. We use this information to deliver the service and protect it against abuse (Article 6(1)(f) GDPR; our legitimate interests are reliable delivery and security). The website hosting infrastructure is provided by Hetzner Online GmbH in Germany.

The standalone game stores progress, a save timestamp, sound and other settings on your device under yukiminato.save.v1, yukiminato.save.t, yukiminato.muted and yukiminato.settings. The Arcade integration also reads katana-arcade-owner:ryoshi to associate a save with its owner. Local storage has no automatic expiry; it remains until replaced, reset or cleared in your browser. New Harbor resets progress, not all settings.

The standalone game uses a service worker and ryoshi-* caches for offline play. Cached files remain until replaced, evicted or removed through browser site-data settings. Clearing site data can erase your local harbor. Device storage required for the game and settings you request is used under § 25(2)(2) TDDDG; related personal data is processed under Article 6(1)(b) GDPR where necessary to provide that service.

Fonts, game libraries, images, audio and the website gameplay video are served locally. The reviewed Ryoshi pages do not embed advertising pixels, analytics, third-party maps, third-party video players or an AI chat. Ordinary links to Rewards and Mint open those services only when followed. No optional tracking consent is stored by this website.

3. Wallet connection and holder tier

A wallet can be connected only to your Katana Inu Launcher account by signing a connection message. The Launcher server reads public blockchain data only: $KATA balances on Ethereum, BNB Smart Chain and Base, and Takeru and Forge holdings on Ethereum. It uses the result only to determine your holder tier and any applicable game-item discount. We never request, receive or store private keys or seed phrases.

The legal basis is Article 6(1)(b) GDPR where this is needed to provide the wallet connection and holder benefit you request, and Article 6(1)(f) GDPR for preventing misuse and securing the service. The Launcher processes the connected public wallet address and tier result while the connection is active.

4. One account across purchase channels

Purchases made through the Katana Inu Launcher, website or store are assigned to the same Katana Inu Launcher account where the purchase can be matched to it. We process the account identifier, order and payment reference, item entitlement and order status to provide the digital item, prevent duplicate grants and handle support. The legal basis is Article 6(1)(b) GDPR. Order records are retained for the duration required by applicable tax and commercial-record rules, and otherwise only as long as needed for the purchase, support, security or legal claims.

5. Account, cloud saves and public rankings

In the Arcade, Ryoshi exchanges account status, inventory, cloud-save data, profile information, play activity and milestone events with its same-origin parent page. The Launcher uses account identifiers and game events to provide cloud saves, account-bound items, XP, levels and play-time records. The legal basis for processing necessary to provide these requested account features is Article 6(1)(b) GDPR.

The leaderboard API is launcherapiv2.katanainu.com. The website requests its preview only when you select Load leaderboard; the dedicated leaderboard page requests rankings when you open it. These public requests omit account cookies. The API receives your IP address, request information and, if you search, the player name or tag you enter. We use the request to provide the rankings you ask to view (Article 6(1)(f) GDPR; our legitimate interest is operating the requested ranking display).

Rankings publish player names, player tags, rank, level, XP, play time and session counts to all visitors. Do not use a real name as your public player name if you do not want it displayed. A season reset does not itself delete the underlying account profile.

The wallet and purchase features described above belong to the Launcher, not a direct wallet connection in this game.

6. Account and payment providers

The Katana Inu Launcher uses Supabase for authentication and account data, Stripe for card payments and fraud prevention, and NOWPayments for crypto invoices and payment status. Providers receive only data needed for their task. Card details stay with Stripe; private keys and seed phrases are never requested.

Account information is required for cloud features and account-bound purchases; it is not required for local guest play. The checkout identifies the payment information needed to complete an order. Do not send payment card details, private keys or seed phrases by email.

7. Search, administrator access and messages

Leaderboard search is optional and sends only your search text and technical request data to the ranking API. Administrator access sends a password to the admin API on launcherapiv2.katanainu.com and uses a session cookie and CSRF token for restricted maintenance. Session restoration contacts that API when the admin page opens. These protections and maintenance audit records serve our legitimate interest in preventing unauthorised changes (Article 6(1)(f) GDPR); necessary session storage falls under § 25(2)(2) TDDDG.

If you email us, we process your address, message and any order reference to answer you, fulfil a contract or handle a withdrawal (Article 6(1)(b) GDPR), meet applicable legal duties (Article 6(1)(c)) or answer other enquiries (Article 6(1)(f); our legitimate interest is responding to your request).

There is no newsletter registration or public upload/comment form in these Ryoshi pages.

8. International processing

The controller is in the United Arab Emirates. Transfers outside the EEA use an adequacy decision, Standard Contractual Clauses or another lawful safeguard where required.

9. Your choices and rights

Where the legal conditions apply, you can request access, correction, deletion, restriction and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation; you can object to direct marketing at any time. If we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. Contact business@katanainu.com.

You may complain to a supervisory authority, in particular in the EU Member State of your habitual residence, workplace or an alleged infringement. We do not make solely automated decisions with legal or similarly significant effects.