Privacy Policy

1. Who we are

Shanhai Myth is operated by [registered business name], [registered business address]. For anything privacy-related, contact us at hello@shanhaimyth.com.

2. What we collect

We collect only what we need to run the service:

• Account details — your email address, a display name if you set one, and a scrambled (hashed) version of your password that cannot be read back. If you sign in with Google or Facebook, we receive the basic profile information those services share with us, such as your email address.
• Your activity — your guardian-test answers and result, the guardian cards you collect, draw and synthesis history, your card lineup, and your companion chat messages and credit balance.
• Order details — order numbers, the items you purchased, and payment status. Full card numbers never reach us; they are handled by our payment processors.
• Emails you share — for example, if you sign up for drop alerts, or write to our support address.
• Basic technical data — the kind of information servers log automatically to keep the service running and safe, such as your IP address, browser type, and the pages you request.

3. How we use your information

• Provide the service — run the guardian test, store your collection, generate companion replies, and keep your account working across visits.
• Deliver what you pay for — process orders, apply credits and card unlocks, and handle refunds.
• Communicate with you — send verification codes and service messages, and send news or drop alerts only when you have asked for them.
• Keep the service safe — detect abuse, fraud, and misuse, and enforce our Terms of Service.
• Understand and improve — see which features are used and working (in aggregate), and make the experience better.

4. Cookies and local storage

We use a small number of essential technologies — and no advertising trackers:

• A session cookie (gs_sid) that keeps you signed in while you use the site.
• Your browser’s local storage, used to remember things like your cart, recent activity, and interface preferences on your own device.

You can clear cookies and local storage at any time in your browser settings — you will simply be signed out and start fresh.

5. When we share information

We do not sell your personal data, and we do not share it for advertising — under California privacy law, we do not "sell" or "share" your personal information (no disclosures to third parties for money or for cross-context behavioral advertising). We share it only with the service providers that make Shanhai Myth work, and only as needed:

• Hosting, storage, and content delivery — to run the site and serve artwork.
• Email delivery — to send verification codes and notifications.
• Sign-in providers — Google and Facebook, when you choose to sign in with them.
• Payment processors — PayPal for merchandise orders and our payment partners for digital purchases, to take payment and handle refunds.
• Legal reasons — if we are required to by law, or to protect the rights, safety, or security of our users or the service.

6. How long we keep it

We keep your personal information only as long as we need it:

• Account, collection, and chat data — while your account is active; if you ask us to delete your account, we remove your personal data within 30 days.
• Order and tax records — for as long as tax and accounting law requires us to retain them.
• Marketing emails — until you unsubscribe.
• Support conversations — only as long as needed to resolve your request and keep a record of it.

7. Your choices and rights

You can:

• See and update your account information by signing in.
• Unsubscribe from marketing emails at any time using the link in the email — service messages (such as verification codes) will still be sent when needed.
• Ask us to delete your account and personal data, or ask for a copy of your data, by emailing hello@shanhaimyth.com.

Depending on where you live, you may have additional rights over your personal information (for example, under GDPR or CCPA-style privacy laws). This includes rights to know, access, correct, delete, and to opt out of the sale or sharing of personal information — we do not sell or share it (see Section 5). We honor these rights for everyone — just write to us.

8. Children

Shanhai Myth is not directed to children under 13, and we do not knowingly collect personal information from them. New accounts must confirm that the user is at least 13 years old. If we learn that a child under 13 has provided us with personal information, we will delete it as quickly as we can — and if you believe a child under 13 has created an account, please contact us and we will delete the account and its data.

9. Security

We protect your information with reasonable technical and organizational measures — including encrypted connections (HTTPS), hashed passwords, and access controls. No method of storage or transmission is perfectly secure, but we work to keep your data safe and to fix issues quickly.

10. International transfers

We serve users around the world, and our service providers may process your information in countries other than yours. Where that happens, we take steps to make sure your information receives an appropriate level of protection.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or on the site. Continuing to use the service after changes take effect means you accept the updated policy.

12. Contact

Privacy questions, requests, or complaints: email hello@shanhaimyth.com.