NINJA WORLD — Privacy Policy
Last updated: 15 August 2026
NINJA WORLD is a mobile game. This policy explains exactly what it stores, why, and what it does not do. It is written to be read, not to be survived.
Who is responsible
NINJA WORLD is made by an independent developer. Contact for anything in this policy, including deletion requests: paultulai@gmail.com.
What the game stores
You play under an account, so the game keeps four things:
- Your account. A username you choose and a password you set. The
password is never stored in readable form — authentication is handled by Supabase,
and the game itself never sees or keeps your password. Because the sign-in system
expects an email address, the game derives a synthetic one from your username
(
yourname@player.ninja-world.game). It is not a real mailbox, nothing is ever sent to it, and it is not used to contact you. - Your characters and their world. Level, stats, inventory, quests, map discovery, clan membership and everything else the game needs to be the same game tomorrow as it was today.
- Where your character is standing, while you have the map open. So that other players can see a pin for you on the world map. This row holds a display name, a level, a village and a map position — nothing else, and never your inventory, your account or your real-world location. It is only your character's position inside a fictional map. It updates while the map screen is open and stops when you leave it.
- Safety records, only if you create one. If you report another player, the game stores who reported, who was reported, the reason you picked, and the name as it read at that moment — so that the person reviewing it can see what was actually said, and so that renaming does not erase it. If you block someone, the game stores that you blocked them. Your block list is readable only by you: nobody can find out who is avoiding them, which is precisely the information a person being avoided should not have. Reports are readable only by the developer, never by other players.
What the game does NOT collect
- No real-world location. The game never requests or receives GPS or any location permission.
- No contacts, photos, files, microphone or camera.
- No advertising, no advertising identifier, no analytics SDK, no tracking across other apps or websites.
- No payment information. The game does not sell anything.
- No personal data is sold or shared with third parties. There are no third parties, beyond the hosting provider below.
Where it is stored
Game data is stored with Supabase, which hosts the database and handles sign-in. Access is restricted at the database level so that one player cannot read another player's account or save. The only data any other player can see is the map pin described above.
Children
The game is not directed at children under 13 and does not knowingly collect data from them. If you believe a child has created an account, write to the address above and it will be deleted.
Deleting your account and your data
You can delete your account and everything attached to it at any time. There is no retention period after deletion — the rows are removed, not flagged.
Changes
If this policy changes, the date at the top changes with it. Material changes will be announced in the game.