Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Chikati Studio ("we", "us", or "our") — an independent web games studio operated by an individual developer — collects, uses, and protects information when you visit chikatistudio.com, play our browser games, or sign in with a third-party provider such as Google. By using our site or games, you agree to the practices described here.

1. Information we collect

We keep data collection to the minimum needed to run our games. We may collect:

Account information via Google Sign-In. When you choose to sign in with Google, Google shares a limited set of profile details with us: your name, email address, profile picture, and a Google account identifier. We use this only to create and secure your game account and to recognise you when you return. We do not receive your Google password or access to any other Google services.
Gameplay data. To let you pick up where you left off, we store in-game progress, scores, achievements, and game state associated with your account.
Usage & analytics data. We may collect anonymised, aggregated usage information — such as page views, interactions, approximate region, browser type, and device characteristics — to understand how our games are played and to improve them. Where used, this is not linked to your identity to target you individually.
Technical data. Standard information your browser sends automatically, such as IP address (used transiently for security and delivery) and error diagnostics.

2. How we use your information

To create, secure, and operate your game account.
To save and restore your gameplay progress across sessions and devices.
To operate, maintain, debug, and improve our games and website.
To communicate with you about your account or important service changes, if needed.
To protect against fraud, abuse, and security threats, and to comply with the law.

We never sell your personal data, and we do not show third-party advertising. Your information is used to run the games you play — nothing more.

3. How we share information

We do not sell or rent your personal data. We only share information in these limited cases:

Service providers. Trusted infrastructure providers (for example, cloud hosting and authentication services) that process data on our behalf under confidentiality obligations, solely to deliver our service.
Legal requirements. When required by applicable law, regulation, legal process, or enforceable governmental request.
Protection of rights. Where necessary to protect the safety, rights, or property of our players, the public, or the studio.

4. Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We request only the basic profile scopes needed to sign you in, we use that data only for the account and gameplay features described above, and we do not transfer it to others except as necessary to provide or improve those features, comply with the law, or as part of a merger with your consent.

5. Data retention

We keep your account and gameplay data for as long as your account is active or as needed to provide our games. If you delete your account, we delete or anonymise your associated personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Vitta Vriksha Mobile Application (Offline-First Privacy)

For users of our Android mobile application Vitta Vriksha (com.chikatistudio.vittavriksha):

Zero Network Connectivity: The application does not request or contain the android.permission.INTERNET permission. It has zero capability to transmit data to external servers or cloud services.
100% On-Device Local Storage: All financial entries, accounts, portfolios, transactions, and settings are stored locally on your device in an encrypted SQLite database.
SMS & Notification Parsing: Financial SMS reading and notification listener features are opt-in and execute entirely on-device to categorize transactions. No SMS content or contact data ever leaves your device.
CAS Statement Processing: Mutual Fund Consolidated Account Statements (CAS PDFs) are parsed entirely on-device in memory.
Zero Telemetry & Zero Ads: There are no third-party tracking SDKs, analytics frameworks, or advertising libraries embedded in the application.

7. Your rights & choices

Depending on where you live, you may have rights under data protection laws such as the EU/UK General Data Protection Regulation (GDPR) and other applicable local privacy laws, including the rights to:

access the personal data we hold about you;
correct inaccurate or incomplete data;
delete your account and associated personal data;
object to or restrict certain processing;
request a copy of your data in a portable format;
withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email us at help@chikatistudio.com. You may also revoke our access to your Google account at any time via your Google Account permissions.

8. Security

We use reasonable technical and organisational measures — including encrypted connections (HTTPS) and access controls — to protect your data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children's privacy

Our games are not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International users

We operate on the web and may process and store data in countries other than your own, including through our cloud service providers. Where required, we take steps to ensure your data receives an adequate level of protection wherever it is processed.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where changes are significant, take reasonable steps to notify you. Continued use of our site or games after changes take effect constitutes acceptance of the updated policy.

12. Contact us

Questions about this policy or your data? Reach the person behind Chikati Studio at help@chikatistudio.com.