1. Information We Collect

We collect information in the following ways:

a. Information You Provide

When you create an account via OAuth (Google, Facebook, or Twitter/X), we receive your name, email address, and profile picture directly from the respective identity provider. We do not collect passwords.

b. Information Collected Automatically

We use Google Analytics to collect anonymised data about how users interact with the Platform, including page views, session duration, and device type. This data cannot be used to identify you personally.

c. Locally Stored Data

For users who are not signed in, game progress (hearts balance, unlocked stories, power-ups) is stored exclusively in your browser's local storage and is never transmitted to our servers.

2. How We Use Your Information

We use the information we collect solely for the following purposes:

• —To create and manage your account and authenticate your identity.
• —To save and synchronise your hearts balance, unlocked content, and game progress across devices.
• —To process in-app transactions (hearts packs and premium items).
• —To analyse anonymised usage data for the purpose of improving the Platform.
• —To comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to any third party for commercial or marketing purposes.

3. Cookies

We use cookies and similar tracking technologies for two purposes:

• —Session cookies — required for user authentication via NextAuth.js. Disabling these cookies will prevent you from signing in.
• —Analytics cookies — set by Google Analytics to collect anonymised usage statistics. These are non-essential and can be disabled in your browser settings without affecting core functionality.

4. Data Retention

Your account data is retained for as long as your account remains active. If you wish to delete your account and all associated personal data — including your hearts balance, unlocked content, and game history — please submit a deletion request to deluluromance@gmail.com. We will action all valid deletion requests within 30 calendar days.

5. Data Security

We implement industry-standard security measures to protect your personal information, including HTTPS encryption for all data in transit and secure, hashed session management. However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take immediate steps to delete that information. If you believe a child under 13 has submitted personal information to us, please contact us at the address below.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• —The right to access the personal data we hold about you.
• —The right to request correction of inaccurate data.
• —The right to request deletion of your personal data.
• —The right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact us at deluluromance@gmail.com.

8. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy to this page, with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Platform following the posting of changes constitutes your acceptance of those changes.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: