Privacy Policy
Last updated: 28 August 2026
This policy explains what data we collect when you use S4KURA, what we use it for, who it is shared with and how you can delete it. It applies to all three ways of playing: the Telegram Mini App, the s4kura.com website and the Android application.
The short version. We do not sell your data. We do not show ads. There are no third-party trackers in the game or on the website. And you can delete your entire account — conversations and memory included — whenever you like, yourself, from inside the game.
1. Who is responsible
The controller of your data is S4KURA STUDIO, based in Floridablanca, Santander, Colombia. Full tax identification details are available to the competent authorities and to anyone demonstrating a legitimate interest, on request through the contact details below.
You can reach us through the Telegram bot @s4kuragame_bot or the contact form at s4kura.com. That is also the channel for exercising any of the rights in section 8.
2. What data we collect
a) Identification data, depending on how you sign in
| Sign-in method | What we receive |
|---|---|
| Telegram | Your numeric Telegram ID, username, display name, profile photo URL and language. Telegram provides this when you open the Mini App; we do not access your Telegram chats. |
| An identifier for your Google account and your email address, which Google provides after you authorise it. | |
| Anonymous (app) | Only an identifier we generate ourselves. No name, no email, no personal data at all. |
b) Data generated by how you play
Progress, level, card and sticker collection, items, gems, energy, battle results, minigame activity, marketplace and auction operations, and your chosen language.
c) Your conversations with the characters
We store the history of the messages you exchange with each character and a memory derived from them: phrases and facts the character should recall later, also stored numerically (as vectors) so they can be searched. Without this, characters would start from scratch in every conversation — which is exactly what the game promises will not happen.
d) Payment data
We never see or store your card or banking details. Payment is processed entirely by Telegram, Google Play or the relevant payment gateway. We only keep the transaction identifier, the amount, the date and what was delivered — what we need for support and refunds.
If you voluntarily connect a TON wallet, we store its public address.
e) Technical and security data
Server logs with the date and type of request, and your IP address at specific moments: when claiming a welcome promotion, when redeeming a code, and when detecting possible trades between accounts belonging to the same person. It is the only practical way to stop promotion abuse without asking you for documents, and we do not use it to profile you or for advertising.
3. What we use each thing for
- Providing the service — your account, progress, collection and the characters' memory.
- Payments and support — delivering what you bought, handling refunds.
- Security and abuse prevention — stopping multiple accounts, economy manipulation and unauthorised access.
- Moderation — automated systems review content to block what our terms prohibit, especially anything involving minors. A very small number of flagged cases may be reviewed by a member of our team.
- Legal compliance — where a legal obligation exists.
We do not use your data for advertising, we do not sell it, and we do not pass it to data brokers.
4. Who it is shared with
Only with providers needed for the game to work, and only with what each one needs:
| Provider | What they receive and why |
|---|---|
| Language-model providers (DeepSeek, with OpenRouter as a fallback if the primary fails) | The text of your conversation, in order to generate the character's reply. This is the most sensitive item in this policy, which is why it is listed first. |
| Telegram | Your identification and Stars payments, if you play from Telegram. |
| Your identification, if you sign in with Google; and purchases, if you play through the Android app. | |
| Cloudflare | Routes traffic and protects the service from attacks; it sees network requests, not the content of your conversations. It also stores our encrypted backups. |
| TON network | Only if you choose to mint a card as a collectible: the operation is public and permanent on the blockchain. |
What does NOT leave our server: the characters' vector memory is computed by a model running on our own machine. Those vectors are not sent to anyone.
5. Where your data is
The database and images are on our own servers located in Colombia. Backups are stored encrypted on Cloudflare R2.
The providers in the table above operate from other countries, so using the service involves international transfers of the data described. We carry them out on the basis of performing our contract with you and, where applicable, standard contractual clauses.
6. How long we keep it
- Account, progress and conversations — for as long as the account is active.
- Payment records — for the period required by accounting and tax law, even if you delete your account.
- Technical logs — short periods, as needed to diagnose problems and detect abuse.
7. How to delete your account
You can request it yourself from inside the game (Profile → delete account) or on this page, without contacting anyone and without giving a reason.
There is a 7-day window in case you change your mind or someone requested it without your permission; you can cancel it by signing back in. After that, everything is deleted automatically: account, progress, collection, chat history and memory vectors. This is not reversible and we do not keep a copy.
Operations already written to the blockchain cannot be deleted: they are public and permanent by the design of the network, not by any decision of ours.
8. Your rights
At any time you can ask us to: access your data, correct it, delete it, obtain a copy in a readable format, restrict or object to certain processing, and withdraw your consent where processing is based on it.
Contact us using the details in section 1. We respond within a maximum of 30 days. If you believe we have not handled your request properly, you may complain to the data protection authority in your country; in Colombia, the Superintendencia de Industria y Comercio.
9. Minors
The minimum age to use S4KURA is 16. We do not knowingly collect data from anyone below that age. If we identify an account belonging to someone under 16, we close it and delete its data. If you are a parent or guardian and believe your child has an account, contact us and we will remove it.
10. Cookies and storage on your device
We use browser or device local storage to keep you signed in, remember your language and store interface preferences. That is the minimum needed for the game to work.
We do not use advertising cookies, tracking pixels or third-party analytics tools.
11. Security
Traffic is encrypted in transit, server access is restricted, backups are encrypted, and provider keys are not stored in the code. No system is infallible: should a breach affecting your data occur, we will notify you and report it to the competent authority within the legal deadlines.
12. A recommendation
The characters are fiction. Do not share passwords, banking details, identity documents or medical information with them. They never need any of it, and everything you write in the chat is stored as part of their memory.
13. Changes to this policy
If we amend it, the current version will always be on this page with its date. Where a change is material, we will announce it inside the game before it takes effect.