PRIVACY POLICY

Privacy Policy

The operator of Domitoria (“we” or “the operator”) handles user information in the game Domitoria and its related websites (collectively, the “Service”) as described below.

Established: July 14, 2026 / Last updated: July 31, 2026

1. Information We Collect

Account information

  • User identifiers issued by Firebase Authentication
  • Email address, display name, and profile image URL
  • Information about the authentication method used, such as Google or Apple

Game usage information

  • Player name, owned monsters, party, gems, summon count, and game progress
  • Mission progress and reward claim history
  • Inputs, progress, results, ratings, and history for NPC and online battles
  • Player-name reports, report timestamps, and hidden-name settings
  • Aggregated data used to review game balance, including monster usage

Notification, advertising, and purchase information

  • Notification tokens, device type, and notification registration status
  • Ad-reward request identifiers, grant results, and next eligible time
  • Measurement events such as app install, app open, tutorial completion, new-account registration, battle completion, and purchase completion; advertising-campaign attribution; device and app information; IP address; and advertising identifiers where permitted by the user
  • Purchased product, displayed amount, order or transaction identifier, verification result, and grant result
  • A randomly issued purchase-device ID for each installation or browser, plus a broad device category such as iPhone, Android, or computer, so Purchase History can identify the purchasing device

Technical and support information

  • Information processed by infrastructure providers to deliver and protect the Service, including IP address, access time, device and browser information, and request information
  • Sign-in state and app settings stored in browser local storage, IndexedDB, cookies, and similar technologies
  • Support-message contents, email address, attached images, and order numbers

2. How We Use Information

  • Identity verification, account management, cloud-save storage, and synchronization between devices
  • Providing NPC battles, online battles, summons, missions, rankings, and related features
  • Delivering push notifications and managing notification settings for each device
  • Verifying purchases, granting content, displaying purchase history, granting ad rewards, and preventing duplicate grants
  • Measuring app-ad performance, attributing installs, optimizing campaigns, and detecting fraudulent advertising results
  • Reviewing inappropriate player names, limiting unwanted exposure between users, and responding to Terms violations
  • Detecting and preventing fraud, impersonation, excessive access, and disruption of the Service
  • Investigating defects, improving quality, balancing the game, and compiling usage statistics
  • Responding to inquiries, delivering important notices, and meeting legal obligations

3. Advertising

The iPhone and Android versions of the Service use Google AdMob and User Messaging Platform to provide optional rewarded ads. Google may process advertising identifiers, device information, IP addresses, and ad impression or interaction information for ad delivery, measurement, fraud prevention, and consent management.

We use AppsFlyer to measure app-install sources and subsequent usage outcomes, and may share aggregated results or advertising-performance information with advertising platforms including X Ads. AppsFlyer receives a limited set of install, app-open, tutorial, new-registration, battle, and server-verified purchase events, together with device and app information, IP address, campaign information, and an advertising identifier where permitted. We do not send email addresses, player names, Firebase user identifiers, room codes, notification tokens, order or transaction identifiers, or purchase tokens to AppsFlyer.

In the browser version, we request consent for advertising measurement when a user arrives from an X ad. Only after consent do we load the X Pixel and use the X Click ID (twclid), campaign information, a random measurement ID issued to the browser, first-battle completion, and a random conversion identifier to measure and optimize advertising. X may process the IP address and browser or device information when the Pixel communicates. We do not send email addresses, player names, Firebase user identifiers, room codes, or order or transaction identifiers to the X Pixel. Browser measurement records without a conversion are deleted after 180 days; conversion records are retained for period comparisons and cumulative-purchase analysis.

On iPhone and iPad, use of the advertising identifier follows the user's App Tracking Transparency choice. On Android, measurement starts in accordance with User Messaging Platform and the device's advertising-privacy settings. Aggregated measurement that does not use an advertising identifier may still occur.

Where ad consent or privacy settings can be changed, an item is shown in the app's Options menu. X advertising measurement in the browser version can be turned off per browser at any time. See the Google Privacy Policy for information about Google's handling of data.

4. Purchases

Apple processes purchases in the iPhone version, and Google Play processes purchases in the Android version. To verify a purchase and grant in-game content, we process the product ID, order or transaction identifier, purchase token, and verification result. We do not obtain or store the credit card number itself.

Stripe processes purchases in the browser version and handles card information. We process the purchased product, payment amount, order or transaction identifier, and verification result.

The purchase-device ID is not a device serial number or advertising identifier. It is a random identifier issued by the Service. Deleting browser or app data may cause a new purchase-device ID to be issued.

5. Service Providers

The following providers process information as necessary to operate the Service. Each provider handles information under its own terms and privacy policy.

  • Google: Firebase Authentication, Firebase Cloud Messaging, Google Sign-In, Google Play Billing, and Google AdMob
  • Apple: Sign in with Apple, App Store purchase processing, and push notifications
  • Cloudflare: delivery and protection of the website, API, database, and online battle infrastructure
  • Stripe: payment processing for the browser version
  • AppsFlyer: app-install attribution, advertising measurement, and fraud prevention
  • X: X Ads delivery, advertising-performance measurement, and campaign optimization

These providers may process information at locations or on servers outside Japan.

6. Disclosure to Third Parties

We do not sell or provide information that identifies users to third parties except in the following circumstances:

  • With the user's consent
  • When handling is entrusted to a provider listed in this policy to the extent necessary to deliver the Service
  • When required by law or necessary to protect a person's life, health, or property
  • When information is transferred as part of a business succession

7. Retention and Deletion

Account information and game data are retained while the Service is offered or while the account remains active. Records needed for support, purchase reconciliation, fraud prevention, and legal compliance are retained for the period necessary for each purpose. When information is no longer needed, it is deleted or de-identified.

Deleting an account removes the user profile, cloud save, registered notification devices, battle sessions, missions, rating, hidden-name settings, and account-specific purchase and ad-reward records. Player-identifying portions of game-balance analytics are anonymized.

Records required for legal obligations, payment reconciliation, fraud prevention, responses to Terms violations or reports, and dispute resolution, as well as information independently controlled by outside providers, may be retained for a period after deletion. Temporary information in active or expired online battle rooms may remain until the room's automatic shutdown process completes.

8. Access, Changes, and Deletion

You can review or change your player name, sound, notifications, ad privacy settings, and hidden players in the app's Options menu. Account deletion can be requested from Options or by following the account deletion guide.

To request disclosure, correction, or suspension of use of your personal information, contact us with the information required to verify your identity. We will respond in accordance with applicable law.

9. Security

We take reasonable measures to prevent unauthorized access, disclosure, and alteration, including encrypted communications, access control using authentication tokens, server-side verification of purchases and ad rewards, and access-rate limits.

10. Use by Minors

Minors must obtain the prior consent of a parent or other legal representative before making a purchase in the Service. If a parent contacts us about a minor's information, we will respond after completing the necessary identity and relationship checks.

11. Changes to This Policy

We may revise this policy in response to changes in the Service or applicable law. Material changes will be announced on this site or in the app. The revised policy takes effect when posted on this page.

12. Contact

Operator: Domitoria

Email: support@game-senmu.com

See the Support page for contact instructions.