1. Scope and Principles

This Policy applies to your access and use of Wooden Fish. We follow principles of necessity, transparency, and user control, aiming to minimize personal data processing while meeting functional needs.

2. Information We Collect

• Browser localStorage: stores local data (e.g., merit count) on your device. It is not automatically aggregated server-side or used for profiling.
• Device and log information (if any): to ensure operation and security, servers may record access logs (e.g., IP, timestamp, path, error details). Logs are used for maintenance and security with limited retention.
• Cookies (if applicable): only for necessary functions (e.g., language preference). We do not use third-party ad cookies for cross-site tracking.
• Third-party resources (e.g., fonts, CDNs): when referencing third-party resources, those providers may collect necessary technical information per their policies. See their privacy notices.

3. Purposes and Legal Bases

• Contract performance/legitimate interests: to provide, maintain, and improve the experience (sound playback, interaction, language selection), ensuring stability and security.
• Legal obligations: to comply with applicable laws and regulatory requirements (e.g., cybersecurity, data protection, export control), necessary logs may be processed.
• Consent (where required): when consent is legally required (e.g., certain regions for non-essential cookies), we will request consent in a clear manner.

4. Sharing and International Transfers

We do not sell your personal data. Where necessary, limited data may be shared with service providers engaged for site operation (e.g., hosting). For cross-border transfers (e.g., from within the EU), appropriate safeguards (e.g., SCCs, equivalence assessments) will be applied in line with law.

5. Retention

LocalStorage data is controlled by your device and can be cleared in the browser. Server access logs (if any) are retained only as needed for maintenance, security, and compliance, then deleted or anonymized.

6. Security Measures

We apply reasonable technical and organizational measures to protect data, though no system can be absolutely secure. Users should take basic precautions (e.g., updating browsers, using secure networks, being cautious with links).

7. Children and Minors

The service is intended for a general audience and is not directed at children. Minors should use it with guardian consent and guidance, and in compliance with local requirements (e.g., GDPR, COPPA).

8. Religious Sensitivities

The experience relates to the wooden fish and religious tradition but does not provide doctrine or guarantees. We respect different religious and cultural norms. In sensitive contexts, please judge appropriate use per local guidance and avoid misunderstandings.

9. Your Rights

• EU/EEA users: you may have rights to access, rectify, erase, restrict processing, data portability, and object per GDPR. We will respond within legal and reasonable scope.
• California users: per CCPA/CPRA, you may have rights to know, delete, and opt out of sale of personal information. We do not sell personal information and process only as necessary.
• Other regions: we respect applicable rights requests in your jurisdiction and will cooperate within legal bounds.

10. Changes and Notices

We may update this Policy from time to time. Material changes will be indicated on the page or by updating the effective date. Continued use signifies acceptance of the updated Policy.

11. Contact

For privacy questions or rights requests, please use the “About” page or contact channels provided. To protect privacy, identity verification may be required.