JAMONORI / Privacy Policy
Privacy Policy
JAMONORI (the “Operator”) handles information from users of the JAMONORI app and the jamonori.com information website as described below.
Effective date: 2026-11-05
1. Information and purposes
My Playground processes word input and scores on your device. Live Multiplay and Google sign-in use the information below. Unexpected-error reports may be sent whenever the server is reachable, regardless of play mode or sign-in status.
| Category | Information and purpose | Retention |
|---|---|---|
| Guest use | Random user identifier and hashed session information for joining and reconnecting to live play | Sessions: 7 days from issue. Identifiers attached to play and submissions are removed with the related records |
| Google sign-in | Google account identifier and hashed session information for account recognition and sign-in | Account identifier until account deletion. Sessions are valid for up to 180 days after the last session check and renew during use. Signing out revokes that session |
| Live Multiplay | Participation, submitted word paths and times, scores, ranks and automatic display name for score verification, results and abuse prevention | Records are cleaned up after 30 days from the end of the round; account deletion removes that account’s records |
| Request limits | IP address to limit excessive requests | Used in game-server request-limiting memory, not stored in the game database. Provider processing is described in section 3 |
| Error reports | Error message and code location, app version and platform (Android, iOS or web) for diagnosis | Server error logs: up to 7 days. Account and device identifiers are not sent as separate fields |
| Email and deletion requests | Sender email, message and the minimum account-verification information needed to respond and handle rights requests | Deleted from the Operator’s mailbox within 90 days after resolution. Additional verification evidence is deleted as soon as its purpose is complete. Provider records and backups are described in section 3 |
We store Google’s account identifier, but not the name, email address or profile picture supplied by Google sign-in, in account data. If you email us, we separately process your sender address and message. Rankings show an automatically assigned display name.
2. Information on your device
Game history (the latest 200 games per play type), settings, in-progress recovery data, saved and collected words, personal bests, levels, experience, rewards and record-reset undo data are stored on your device. Account deletion does not erase these local records. Use the app’s record controls, your device’s app-data controls or browser-data controls to remove them. Delete any exported history files separately.
At the end of a live round, accepted word paths and times are submitted to the server. We do not synchronize your entire solo history or wordbook to the server.
3. Providers and international processing
The Operator runs the service from the United States and uses the providers below. Information travels over the network during access, sign-in and error reporting. Support mail passes through Cloudflare Email Routing to Google Gmail. App-to-server communication uses HTTPS.
| Provider | Processing | Locations and retention |
|---|---|---|
| Cloudflare, Inc. | Website and game hosting, storage, errors and connection protection; network information such as IP, requested URL, access time and browser information | United States, European Economic Area and Cloudflare’s global infrastructure. We request Northeast Asia for game storage without a guarantee of a specific country. Game data: section 1; storage recovery history: up to 30 days. Provider security and network records follow its own processing rules |
| Cloudflare Email Routing | Email forwarding; sender, recipient, subject, message ID and delivery-result metadata | Cloudflare’s global infrastructure. Delivery analytics metadata: 31 days |
| Google LLC — Gmail | Support messages and attachments, replies, spam and security processing | Google servers worldwide, including the United States. The Operator’s retention is in section 1. Removal from provider systems and backups may take additional time after deletion |
Providers’ published processing regions do not establish the exact country used for a particular message or request. Contact privacy@jamonori.com about international processing or your rights. Avoiding online features and email support avoids the transfers needed for those features, but Live Multiplay, Google sign-in and email support will then be unavailable. Solo play does not require Google sign-in.
See the Cloudflare Privacy Policy for its contact details and processing practices, and the Email Routing analytics documentation for delivery records. Google’s processing during Google sign-in and Gmail use is described in the Google Privacy Policy and retention guidance. Google says deletion generally takes around two months, and data may remain in encrypted backups for up to six months.
We do not sell personal information or use it for personalized advertising. Apart from providing the services above and complying with legal requirements, we do not disclose it to third parties for other purposes.
4. Account deletion and your rights
You may request access, correction, deletion or restriction of processing, and contact us with privacy questions.
- In the app: after a Live Multiplay round ends, open Account, then Delete account. Your account, Google link, sessions and associated live participation, submissions, scores and ranks are removed from the server. Your Google account itself is not deleted.
- Outside the app: use our account and data deletion page or email privacy@jamonori.com. Reinstalling the app is not required to submit a request. We will explain the minimum information needed to verify ownership; an email address or display name alone is not proof of ownership.
- We aim to handle email requests within 7 days of receipt. If more verification or time is needed, we explain why and provide an expected timeline. A shorter legally required deadline takes precedence. Do not send passwords, sign-in verification codes or identity documents.
When retention ends or deletion is processed, we remove the relevant data from active storage. Cloudflare recovery history may retain earlier states for up to 30 days and is not used for normal service operation. Error logs without an account-identifier field may remain for up to 7 days. Email and provider records follow sections 1 and 3. If the law requires separate retention, we explain its basis, data and duration and limit it to what is necessary.
5. Security
Server session values are hashed. Android sign-in data is encrypted using Android Keystore. Web-game sign-in cookies use HttpOnly, SameSite and Secure attributes. Operational access is restricted, and the service is configured not to put authentication-bearing request bodies or headers into ordinary access logs.
6. Website, cookies and advertising
The jamonori.com information website has no sign-in feature and uses no advertising or visitor-analytics tools of its own. Fonts and illustrations are served by the site. Cloudflare processes network information to deliver and protect the site and may use security-check cookies when needed.
When web-game sign-in is available, jamonori_session maintains the session and jamonori_challenge verifies Google sign-in for 5 minutes. Guest sessions last 7 days; account sessions last 180 days after the latest check and renew during use. Blocking them may prevent web-game sign-in and live features. The current app does not provide advertising SDKs or payment features.
7. Age
JAMONORI is intended for users aged 14 and over. A parent or guardian who believes information about a child under 14 has been processed may contact us for review and deletion.
8. Privacy contact
- Privacy and rights-request contact: JAMONORI Privacy
- Email: privacy@jamonori.com
- The Operator handles these inquiries and requests directly.
9. Changes
We update this page and its effective date when the policy changes. Important changes to information use or your rights will be announced on the website or in the service before taking effect, with separate consent where required.