Privacy Policy

1. Scope and controller

This Privacy Policy applies to NarutoSim.com, including its website, progressive web app, accounts, card and deck tools, and any simulator, multiplayer, community, event, membership, or subscription features we enable (the “Service”). Balbi Games LLC is the business responsible for the Service and the controller of personal data described here. Contact us at contact@narutosim.com.

A planned feature does not collect the information described for that feature until the feature is enabled and you use it.

2. Information we collect

Information you provide

• Account information: email address, account identifier, display name, optional avatar, authentication provider, and records of legal acceptance.
• Profiles and user content: profile details, deck names and lists, deck guides, collection or binder data, uploaded profile images or other custom media, visibility choices, and content you publish or share.
• Simulator and multiplayer data: room membership, matchmaking selections, deck snapshots, game actions and state, connection status, chat messages, reports, ratings, match results, match history, spectator activity, and eligible game replays when those features are enabled.
• Membership and billing records: Stripe customer and subscription identifiers, plan, subscription status, billing interval, renewal or expiration date, entitlement history, and transaction or dispute records when subscriptions are offered. Stripe processes payment-card and other payment details. NarutoSim.com does not receive or store full payment-card numbers.
• Communications: messages and information you send when contacting us or submitting a privacy, intellectual property, safety, moderation, billing, or support request.

Information collected automatically

• Session and technical data: authentication cookies, IP address, browser and device information, request timestamps, error information, and security logs ordinarily generated by our hosting and infrastructure providers.
• Usage and integrity records: signed-in feature activity such as deck views and likes, moderation events, rate-limit events, anti-abuse indicators, and simulator integrity records when applicable. We do not assign a persistent analytics identifier to anonymous visitors.
• Local device data: deck drafts, filters, selected cards, simulator preferences, service-worker caches, and similar settings may remain in your browser. This data stays on your device unless a feature expressly syncs it.

Information from other sources

If you sign in with Google or Discord, we receive the account data that provider makes available under your settings, typically an identifier, email address, display name, and avatar. If Discord community features are enabled and you connect Discord, we may also receive or maintain the Discord identifiers needed to synchronize eligible roles. We receive billing, fraud, transaction, and subscription status information from Stripe when subscriptions are enabled, plus service and security information from vendors that help operate NarutoSim.com.

We do not intentionally collect sensitive personal information such as precise location, government identifiers, health data, biometric data, or payment account credentials. Do not include sensitive personal information in profiles, decks, chat, reports, or support messages.

3. How we use information and our legal bases

We do not use personal information for solely automated decisions that produce legal or similarly significant effects. Automated matchmaking, simulator rules, moderation signals, or fraud checks may assist the Service, but material account enforcement is subject to review or appeal where appropriate.

4. How we disclose information

We disclose information only as needed for the purposes above:

• Service providers: Supabase provides authentication, database, and file storage; Cloudflare provides hosting, delivery, security, and multiplayer infrastructure; and Stripe processes subscription checkout, billing, fraud signals, and payment events.
• Sign-in and integration providers: Google or Discord when you choose that sign-in method or connect the related integration. Their policies govern information they process independently.
• Other users and the public: your display name, membership badge, match or simulator information, and content you make public, unlisted, shared, spectatable, or available to match participants, according to the feature and your choices.
• Legal and safety recipients: authorities, advisers, rights holders, or affected parties when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish and defend legal claims.
• Business transactions: a successor or participant in a merger, financing, reorganization, bankruptcy, or transfer of all or part of the Service, subject to appropriate confidentiality protections.

We do not sell personal information or share it for cross-context behavioral advertising. We do not disclose personal information to third parties for their own direct marketing.

5. Cookies and local storage

NarutoSim.com uses storage needed to provide user-requested features. Supabase authentication cookies keep you signed in and protect your session. Browser storage and service-worker caches may remember local drafts, filters, settings, recent items, simulator preferences, and offline assets. We do not use advertising cookies or third-party analytics cookies. Because current storage is necessary or user-requested functional storage, the site does not display a consent banner. If that practice changes, we will provide any consent control required before activating nonessential storage.

You can sign out, clear site data in your browser, or uninstall the PWA to remove browser-held data. Clearing local data may erase unsynced drafts and preferences.

6. Retention

We keep personal information only as long as reasonably necessary for the purpose collected, including:

• account, private deck, profile, and collection data while your account is active and until deletion is completed;
• public content until you remove it or request deletion, although deidentified records and copies shared by others may remain;
• simulator room, match, result, and integrity data for the period needed to provide history, operate replays, resolve disputes, prevent cheating, and enforce rules;
• match history and statistics for the life of the account unless you request deletion or we establish a different retention schedule;
• full multiplayer replay data for 48 hours when created by a free player; replays created while Supporter or VIP access is active are retained permanently, even if that access later ends;
• chat, report, safety, and moderation records for as long as needed for gameplay integrity, dispute handling, safety, and enforcement;
• subscription and transaction records for as long as needed to administer membership, resolve billing disputes, prevent fraud, and meet tax, accounting, or other legal obligations;
• support and privacy-request records for as long as needed to answer the request and demonstrate compliance; and
• security logs and backups on limited, rolling schedules set by us and our providers.

Before enabling a feature with a specific replay, chat, or membership retention period, we will display that period in the applicable feature or membership disclosure. We may retain information longer when law requires it or when reasonably necessary to establish, exercise, or defend legal claims. We delete or deidentify information when it is no longer needed.

7. International data transfers

Balbi Games LLC and our providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we rely on recognized safeguards for restricted transfers, such as adequacy decisions, standard contractual clauses, and supplementary measures provided by our service providers.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including encrypted transport, access controls, least-privilege database policies, and separation of public and server credentials. No system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account or information has been compromised.

9. Your privacy rights

Depending on where you live, you may have rights to know or access personal information; correct it; delete it; receive a portable copy; restrict or object to processing; opt out of eligible sale, sharing, targeted advertising, or profiling; withdraw consent where processing relies on consent; and appeal or complain to a regulator. You may update available profile information in Profile Settings. For any other request, visit Your Privacy Choices or email contact@narutosim.com.

We will verify requests in a way proportionate to their sensitivity and may ask you to use your account email. Authorized agents may submit requests where permitted by law, but we may require proof of authority and direct identity verification. We will not discriminate against you for exercising a privacy right. GDPR requests are generally answered within one month; verified California requests are generally answered within 45 days, subject to lawful extensions and exceptions.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority. We encourage you to contact us first so we can try to resolve the concern.

10. California privacy notice

California residents may request access to categories and specific pieces of personal information, deletion, and correction, and may receive information about collection, use, and disclosure. They also have rights to opt out of sale or sharing and to limit certain uses of sensitive personal information when those practices occur. NarutoSim.com does not sell or share personal information as those terms are defined by the CCPA, does not use or disclose sensitive personal information for purposes requiring a limit right, and has no actual knowledge that it sells or shares personal information of consumers under 16. We therefore do not offer a sale or sharing toggle. Because we do not sell or share personal information, Global Privacy Control signals do not change our current practices.

In the preceding 12 months, we collected the identifiers, customer-record information, internet or other electronic activity, commercial or subscription information, user-generated content, and inferences inherent in gameplay or deck preferences described in Section 2. We used and disclosed those categories for the business purposes in Sections 3 and 4. We did not sell or share any category. We retain each category under the criteria in Section 6. These disclosures will be reviewed at least annually.

11. Children

The Service is intended for a general audience age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you are under the age at which you can consent to data processing or enter a binding agreement where you live, use the Service only with permission from a parent or legal guardian. Contact us if you believe a child provided personal information contrary to this section so we can investigate and delete it as appropriate.

12. Changes to this policy

We may update this policy as the Service, simulator, subscriptions, providers, or law changes. We will post the revised policy with a new effective date and provide additional notice when a change is material and applicable law requires it. Prior versions may be requested by email.

13. Contact us

Contact Balbi Games LLC at contact@narutosim.com. For privacy requests, use the subject “Privacy Rights Request” and identify the right you want to exercise. Do not email passwords, government identification, or other sensitive documents unless we specifically request a secure verification method.