Senpai Showdown Privacy Policy

Updated: 25 October 2026. Operator: Senpai Team. Contact: samquansah@protonmail.com.

Senpai Showdown ("we", "the game") is an anime trivia game. This policy explains what we collect and why.

Mobile purchases and rewarded ads remain disabled in the submitted mobile release. The browser shop shows whether website purchases are available. Sponsor links, if configured, use no third-party ad script or tracking pixel. Website advertising and its privacy controls are described below.

What we collect

• A random account key. The server issues one the first time you play; the mobile app stores it in your device's secure storage, and the website stores it in browser local storage. On the website you can copy this private recovery key to restore your account on another browser. We keep only a scrambled (hashed) copy on our server.
• Your display name. It's set to a random name like Player1234 until you change it. Other players see it in matches and on the ladder.
• Gameplay data. Your rank (Elo), coins, matches played, placements, chosen cosmetics, recently seen questions, XP, mastery, achievements, cosmetic unlocks, daily scores/streaks, and daily goal progress.
• Match records. Scores, placements, mode and question correctness, linked to your account number. We use a 90-day rolling match-history window; records older than that are purged when new matches are saved. This supports game operation and content quality.
• Question reports. A question identifier and the reason you select, associated with your account to prevent duplicate reports.
• Friend rooms. Your chosen name, portrait, readiness, and connection status are visible to people who join the room. Room codes expire after 30 minutes and room state is temporary.
• Friends list. If you use it, we store a shareable friend code, requests, accepted friendships and request blocks. Accepted friends can see your display name, chosen portrait and ranked Elo. Requests require a friend code and acceptance; we do not upload your contacts or provide a name search. Removing a friend deletes the relationship. Request timestamps are kept for up to one day to limit spam. You can remove friends, decline requests, block requests and unblock players under Friends → Your friends. Account deletion removes these friend records.
• Preset reactions. You can choose a short, predefined reaction after answering. The reaction and your display name are delivered to the current match, kept temporarily in memory, and not stored as chat history. You can mute reactions. Desktop text chat is described below. Image and file uploads are not supported. A display-name filter rejects offensive names and common evasions.
• Purchases, when enabled. A separate random billing identifier is shared with RevenueCat and the relevant Apple/Google store to verify and restore purchases. The game server stores the resulting cosmetic entitlement. We do not receive your payment-card information.
• Rewarded ads, when enabled and chosen. Google AdMob and its consent service may process device information, advertising identifiers where permitted, consent choices, and ad interaction data under their policies. We request non-personalized ads after the consent flow. A random billing identifier, reward ticket, and transaction identifier are used for server-verified cosmetic rewards. You can decline ads and keep playing. The current ad offer is restricted to users confirming they are adults.

The game does not ask for your email, phone number, contacts, photos, or precise location. Hosting providers process network information necessary to deliver the service. We do not sell your data. We use gameplay records for aggregate operational measurements; we do not currently integrate a separate third-party analytics SDK. Purchase/ad providers process information described above only when their respective integrations are enabled and used. Review RevenueCat's privacy policy and Google's privacy policy.

If you contact support by email, we receive your email address and message, along with any display name, device details or attachments you choose to include. We use that correspondence to answer your request and handle account or privacy issues. Do not send your guest account key, passwords, verification codes or payment-card details.

Browser purchases and measurement

When website checkout is enabled, Stripe processes the payment and may collect your email, billing information, payment details and fraud-prevention data. We send only an order reference, product, amount and return address. Our game server stores the product, amount, payment references, delivery state, refunds and dispute state, linked to your game account. It does not receive card details. Contact support for delivery and refund issues. Deleting a game account removes its link to retained payment references; financial records held by Stripe and records needed for accounting or dispute handling may remain under applicable retention requirements. See Stripe privacy and our purchase terms.

We record source and campaign tags from your first browser visit, your game account number, UTC activity days and completed matches. This helps us compare creator campaigns and returning-player counts. We use no third-party analytics SDK, advertising identifier, fingerprint or cross-site tracking cookie for this measurement. Account deletion removes these browser measurement records. Sponsor links can take you to another website governed by its own privacy policy; no account key is included.

Desktop chat

The public lobby is visible to desktop visitors with a game account. Friend-room and match messages are available to current members of that room or match. Text posts include your display name, public player number, message and time. Do not post private contact details or account keys. There are no direct messages, file uploads or clickable links.

Rooms show up to 50 messages from the last 24 hours. Messages expire from active storage after 24 hours. A report saves a copy, its reason and the reporter's player number for up to 30 days so the operator can review it. Block lists and active chat restrictions are stored with your account. Filters and posting limits help control abuse; they cannot catch every harmful message. The operator can remove posts, review reports and restrict chat access. Account deletion removes your chat posts, associated reports, blocks and restrictions from active storage. Hosting backups follow the retention described below.

Chat screens carry no website ads. Our integration does not include chat text in advertising requests. See the chat rules and reporting instructions.

How we use it

To run matches, show the ladder, save your progress and keep the game fair.

Where it's stored

On our game server, hosted by Render in Ohio, United States. Network traffic and operational logs are also processed by Render to provide hosting. Data may be processed outside your country. Render disk snapshots can retain older data for up to seven days under its backup schedule.

Deleting your data

Open Locker → Account → Delete account in the app. This deletes your active profile, progress, daily scores, reports, reward tickets, and game-server billing association. Retained match records have your account link removed; reward transaction identifiers may remain without your player association to prevent duplicate rewards. Provider purchase records, legal retention, and hosting backups follow the applicable provider policies; game account deletion does not automatically delete records held by Apple, Google, or RevenueCat. Contact us for provider-data deletion requests and cancellation/refund assistance. You can also request account or data deletion at https://senpai-showdown.onrender.com/delete-account or email samquansah@protonmail.com. We may need to verify which guest account belongs to you before acting. Do not send your account key, passwords or verification codes. If you have lost the device account key, we may be unable to verify ownership of a guest account.

Children

The game isn't directed at children under 13, and we don't knowingly collect personal information from them.

Website advertising

After provider approval and activation, Adsterra banner ads load automatically on selected game menus or results. The game does not ask visitors to turn ads on or confirm an age before showing a banner. A visible advertising notice links to Privacy settings. A saved refusal is respected until you change it. An earlier Google ad choice does not control Adsterra. We keep ads off for browsers with Global Privacy Control enabled and for Supporter accounts. Timed matches, queues, private rooms, chat and purchase or account-recovery screens do not request banners.

When Adsterra loads, requests to Adsterra and its advertising partners may disclose your IP address, browser and device information and page address. Their code may use cookies or other browser storage and ad-interaction information for ad selection, delivery, fraud prevention and reporting. We do not describe Adsterra ads as cookie-free or non-personalized. See Adsterra's privacy policy and cookies policy. Our integration does not intentionally include your private recovery key, wallet, friend list, chat text or purchase records in ad requests. Advertiser links lead to sites governed by their own policies. There is no payment or game reward for clicking an advertisement.

Use Privacy settings on game menus to stop advertising cookies and related Adsterra requests, or to change an earlier refusal. If provider code has already loaded, changing to off reloads the page to stop that code on the new page; this cannot undo information already sent or remove cookies already stored by a provider. Your choice is saved only in this browser, separately for each provider and separately from your game account. Clearing browser storage removes that choice. You can manage existing cookies in your browser and contact providers about their retained data.

Google AdSense remains a separate optional integration for substantial anime-guide articles on wide screens. Where approved and explicitly enabled, it requires its own adult opt-in and applicable Google consent response before requesting ads. An unknown or failed response keeps ads off. That integration requests non-personalized ads with restricted data processing; these ads can still use cookies. Google may process IP address, device information, existing cookies, consent choices and ad interactions for delivery, fraud prevention, frequency limits and reporting. See how Google uses information from partner sites. Google's consent message can be reopened from Ad choices where applicable. Selecting Adsterra does not activate Google ads.

Contact

Senpai Team · samquansah@protonmail.com