PRIVACY

1The short version

You can play as a guest without an account. Guest progress stays in your browser. Optional accounts use Supabase Authentication and store an account ID, your chosen sign-in identity and an optional display name.

Account sign-in uses session cookies to keep you signed in across this site. WalletConnect, if you choose it, stores connection data in your browser and contacts its relay service. The site does not use advertising pixels or analytics trackers.

2Who is responsible

Katana Marketplace, Craigmuir Chambers, Road Town, Tortola, VG 1110, British Virgin Islands. Questions about this page or about your data go to the contact address on the imprint page.

3What your browser stores

A referral code is stored in sessionStorage if you arrive through a referral link. It credits the person who recommended the game when you buy during that visit.

Optional sign-in stores access and refresh tokens in HttpOnly cookies. These cookies are sent to this site and are not readable by game JavaScript. Signing out removes the current session. A short-lived wallet challenge cookie binds a login signature to your browser.

Your game progress is stored by the game itself, in your browser. Clearing site data clears it. We cannot restore it, because we never had it.

4What we store when you buy

An order record: an order number, the time it was created, the amount, which items it covers, the referral code and its commission if there was one, and whether it is open, paid or failed. If you connected a wallet, the wallet address is stored with the order.

A wallet address can be linked to you, so we treat it as personal data. Purchases are currently delivered by a game-specific redemption code; connecting a wallet does not prove ownership of an account or authorize spending.

We never see or store your card details, your bank details or your recovery phrase. Payment happens on the payment provider's own page, not on ours.

Order records are kept on our server, outside the publicly served directory. They are not shared with anyone except as described in section 5.

5Who else is involved

NOWPayments processes the payment. We send them the amount, the currency, an order number, a short description and the addresses to return you to. We do not send them your name, email or wallet. Whatever they collect from you on their own page, they collect as their own controller under their own privacy policy.

Vercel hosts this site. Like any web host, its servers process the request data every website receives — IP address, time, page requested, browser string — in order to deliver the page and to defend against abuse.

Supabase stores account identities, authentication sessions and the platform's order, voucher, referral and burn records. If you choose Google, Google also processes your sign-in. Wallet sign-in verifies your signed login message; it does not request your recovery phrase or a token transfer.

The blockchain itself is public. A buyback or burn transaction is visible to everyone forever; that is the point of publishing it, and it is not something we can undo.

6How long we keep itOPEN

OPEN — the retention period for paid order records is not fixed yet. Records of a completed sale usually have to be kept for a set number of years for tax and accounting purposes, and that number depends on the jurisdiction that applies. Until it is decided, this page will not name a figure it cannot stand behind.

7Your rights

You can request access, correction or deletion of your data using the contact address on the imprint page. For account requests, identify the account using your sign-in email or wallet; for purchase requests, include the order number. We may need to verify ownership before responding.

If you live in the EU or the UK and think we handled your data wrongly, you can complain to your national data protection authority.

8Children

The games are not directed at children under 13, and nothing on this site asks a visitor for their age. If you are a parent and believe a purchase was made by a child, write to the address on the imprint page.

9Changes

If what the site does changes, this page changes with it — before the change goes live, not after. The date at the top is the date it last changed.