Privacy policy

Last updated: September 25, 2026

This policy explains what data the game Shinobi (shinobi.fr, shinobi.net and the mobile apps) collects, why, how long it keeps it, and how to exercise your rights.

1. Who is responsible

The data controller is SARL Suki Web. For any question about your data: [email protected].

2. Data we collect

• Account: username, email address, password, village, sign-up date. A guest account has neither email nor password.
• Game: your shinobi (level, inventory, jutsus, missions, team), your fights and their replays, your rankings, your achievements.
• Communications: the private and chat messages you send or receive.
• Technical data: IP address, device and browser type, technical device fingerprint, login dates and in-game action logs.
• Purchases: payments go through PayPal. We receive the PayPal account's email address, the transaction reference, the amount and the country. We never see your card details.
• Mobile app: for a guest account, a device token kept in the phone's secure storage, which lets you resume your game.

3. Why we use it

• To run the game and your account (performance of the contract you accept by playing).
• To protect the game: account security, fighting cheating and multi-accounting, moderating messages (legitimate interest).
• To keep the accounting records of purchases (legal obligation).
• To fix technical errors, through an error tracking service (legitimate interest).
• To measure the website's audience (Google Analytics).
• To send you account emails: confirmation, forgotten password, end of an account deletion.

4. Who can access it

Other players see your username, your public profile, your rankings, your fights and the messages you send them.

Our service providers, only for the needs of the service: hosting (OVHcloud, France), Cloudflare (content delivery and site protection), PayPal (payments), Brevo (email sending), Sentry (error tracking) and Google Analytics (website audience).

Some of these providers may process data outside the European Union, especially in the United States. These transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

We neither sell nor rent your data.

5. How long

• Account and game data: as long as the account exists.
• After a deletion request: the account is deactivated at once and erased 30 days later, with its personal data.
• Purchase records: 10 years, for accounting.
• Messages and chat of a deleted account: hidden, then erased 1 year after the deletion (moderation).
• The username of a deleted account: reserved with no time limit to prevent impersonation. Only its fingerprint is kept, with no link to the rest of the account.
• Technical backups: erased as they are renewed.

6. Deleting your account

In the app: profile menu, then "Delete my account". On the website: "My account", then "Delete my character". Without the app: [email protected]. The page Delete your Shinobi account details the steps and what is erased or kept.

7. Your rights

You can access your data, have it corrected or erased, ask for its portability, object to processing based on legitimate interest or ask for its restriction. Write to [email protected] from your account's email address. We answer within one month. You can also contact the French data protection authority, the CNIL (cnil.fr).

8. Minors

A player under 15 needs a parent's consent to create an account. Purchases by a player under 18 require the consent of their legal guardian.

9. Cookies

The website uses a session cookie, required to stay logged in, and Google Analytics cookies for audience measurement. The mobile app does not use Google Analytics.

10. Changes

This policy may change. The last update date is shown at the top of the page.