Taisho Mysteries Privacy Policy

Last Updated: September 14, 2026 Effective Date: September 14, 2026

Taisho Mysteries (《大正謎錄》, the “Service”) respects the privacy and personal data of its players.

This Privacy Policy explains what information HSIEH HUI LIN (the “Operator”) may collect when operating the Taisho Mysteries website, game, accounts, Letter System, leaderboards, events, and other related features, how such information may be used and protected, and what rights players may have.

The Service is available at:

https://mysterygame.dev

Please read this Privacy Policy before using the Service.

1. Information We May Collect

Depending on how players use the Service and which features they access, the Operator may collect or process the following information.

1.1 Account and Basic Information

When a player creates or uses a Taisho Mysteries account, we may collect:

email address;
player nickname or display name;
account identifier;
login and authentication information;
account creation date;
last login time; and
other account-related information voluntarily provided by the player.

The Operator does not intentionally request government identification documents, complete financial account information, or other unnecessary highly sensitive information unrelated to the game service.

1.2 Gameplay Records

To provide the game, save progress, and manage content unlocks, we may collect:

stories, chapters, and character routes played;
game progress and unlock status;
choices made by the player;
answers and answer results;
scores and performance records;
achievements;
endings obtained;
use of hints or solutions;
Mission Rewards and other in-game rewards earned or used;
Letter System unlock and usage status; and
other records directly related to game functionality.

1.3 Letter Content and Generative AI

If a player uses the Letter System, we may collect and process:

the content entered by the player;
the intended recipient character;
sending and reply times;
story progress related to the Letter System; and
limited gameplay information reasonably necessary to generate a response consistent with the relevant character and story state.

Letter replies may be generated or assisted, in whole or in part, using generative artificial intelligence (“AI”).

To provide this feature, player-submitted content and limited information necessary to generate an appropriate character reply may be transmitted to external AI service providers or model providers used by the Operator.

The Operator will only use or transmit information to the extent reasonably necessary to provide the relevant feature and will not intentionally provide AI services with player passwords, complete payment information, or other highly sensitive information unrelated to the Letter System.

Players should not enter the following into letters:

passwords;
complete credit card or bank account information;
government identification numbers;
precise residential addresses;
medical or health information;
private information about another person without permission; or
other sensitive information unrelated to the game that the player does not wish to have processed by an external AI service.

The AI service provider, data retention arrangements, cross-border processing, and other processing conditions may vary depending on the services and contractual settings actually used by the Service.

The Operator will manage such processing in accordance with applicable law and available service settings, and may update this Privacy Policy or provide additional notice if the relevant data processing arrangements materially change.

1.4 Purchase and Transaction Information

Purchases and payments for Taisho Mysteries are processed by Paddle. Paddle acts as the Merchant of Record and authorized reseller for the applicable transactions.

When a player completes a purchase through Paddle Checkout, Paddle may collect and process information including:

name;
email address;
billing or location information;
payment method and payment information;
purchased product;
amount and currency;
transaction identifiers;
tax-related information;
payment status;
refund, chargeback, or other transaction records; and
other information necessary for payments, fraud prevention, tax compliance, and buyer support.

Paddle processes such information in accordance with its own Privacy Notice and related policies.

To fulfill purchases, confirm orders, provide product support, prevent fraud, or handle refunds, Paddle may provide the Operator with limited buyer and transaction information as reasonably necessary.

The Operator may therefore receive:

player email address;
purchased product;
order or transaction identifiers;
purchase time;
actual transaction amount and currency;
payment or refund status; and
other limited transaction information necessary to unlock content or provide support.

The Operator does not directly obtain or store full credit card numbers or card security codes entered through Paddle Checkout.

1.5 Redemption Codes, Referrals, and Event Information

When a player uses event codes, promotional codes, redemption codes, referral links, or similar features, we may collect:

the code entered or used;
referral or event source;
redemption time;
redemption result;
referral relationship;
event identifiers; and
information directly related to measuring event performance.

Such information may be used to:

provide event content and rewards;
identify referral or campaign sources;
prevent abuse; and
analyze the effectiveness of referral or promotional activities.

1.6 Leaderboard Information

If a player participates in a leaderboard, we may process:

player nickname;
character used;
score;
ranking; and
other gameplay results directly related to the leaderboard.

Such information may be visible to other players.

The Operator will not publicly disclose a player’s email address, payment information, or private letter content solely because the player participates in a leaderboard.

1.7 Customer Support, Surveys, and Player Feedback

When a player contacts support, completes a survey, provides feedback, or reports a problem, we may collect:

email address;
account information;
text submitted by the player;
survey responses;
ratings;
error information;
screenshots voluntarily provided by the player;
Paddle order or transaction identifiers; and
other information reasonably necessary to respond to the inquiry.

1.8 Device, Website, and Usage Information

When a player visits the website or uses the Service, we or technical service providers necessary to operate the Service may automatically process:

IP address;
cookies or similar online identifiers;
browser type;
operating system;
device type;
language settings;
approximate country or region;
traffic or referral source;
pages viewed;
game pages accessed;
session and usage time;
website interaction information;
error or performance information; and
other technical information necessary to operate, secure, or analyze the Service.

2. Purposes for Which We Use Information

The Operator may use collected information, to the extent reasonably necessary, for the following purposes:

creating and managing player accounts;
authenticating player identity and login;
saving and synchronizing game progress;
providing stories, character routes, endings, achievements, and other game content;
managing purchases, account entitlements, and content unlocks;
providing the Letter System;
using AI or other technologies to generate or assist with in-game character letters;
managing Mission Rewards and other in-game rewards;
providing and maintaining leaderboards;
managing promotions, referrals, redemption codes, and events;
responding to customer support inquiries, refund eligibility questions, technical issues, and other player requests;
cooperating with Paddle regarding order fulfillment, refunds, payment disputes, fraud prevention, and other reasonable transaction-related matters;
analyzing how players use the Service;
analyzing the overall effectiveness of different events, referral channels, and promotional channels;
improving stories, user interfaces, game flows, performance, and other product experiences;
identifying and fixing bugs;
maintaining the security of accounts, the website, and the Service;
detecting or preventing cheating, unauthorized access, system attacks, automated abuse, redemption-code abuse, fraud, or other improper conduct;
sending notices necessary to provide the Service, including account, security, or material service-change notices;
providing information about new stories, events, or other marketing communications where required consent has been obtained or another lawful basis applies;
complying with legal, tax, accounting, regulatory, or other statutory obligations; and
handling disputes and protecting the legitimate rights and interests of players, the Operator, and third parties.

The Operator generally will not use personal data for new purposes that are not reasonably related to those described above.

If the purposes of processing materially change in a way that requires additional notice, disclosure, or consent under applicable law, the Operator will comply with those requirements.

3. Lovable and Website Technology Services

The Taisho Mysteries website is built or operated using third-party technology services such as Lovable.

To provide website and app functionality, Lovable, its related infrastructure, or its subprocessors may process information relating to players’ use of the Service on behalf of the Operator.

Such processing may include:

website and application operation;
cloud infrastructure;
technical logs;
app usage information;
security monitoring;
error and performance analysis; and
other technical processing necessary to maintain the Service.

For information provided by players through Taisho Mysteries, the Operator determines the purposes for which that information is collected and used and is responsible for providing this Privacy Policy and any legally required choices or consent mechanisms.

Information collected by Lovable through its own website, platform accounts, or independently provided services is handled in accordance with Lovable’s own privacy policy.

4. Paddle and Payment Data

Paddle, as Merchant of Record for transactions relating to Taisho Mysteries, collects and processes personal data for its own services, including:

checkout;
payment processing;
tax compliance;
invoices and receipts;
fraud prevention;
chargebacks;
refunds;
buyer support; and
legal and regulatory obligations.

Such information is processed by Paddle in accordance with its own Privacy Notice.

Paddle may provide necessary buyer information to the Operator for reasonable purposes such as product fulfillment, order processing, fraud prevention, and product support.

The Operator will use transaction information received from Paddle only for the reasonable purposes described in this Privacy Policy and will not use such information for unrelated purposes without an appropriate legal basis.

5. Cookies, Local Storage, and Similar Technologies

The Service may use cookies, Local Storage, or similar technologies to:

maintain login sessions;
store player preferences;
save or support game progress;
provide necessary website and game functionality;
maintain security;
prevent abuse; and
analyze website and game usage.

Some technologies may be necessary for the Service to function properly.

If the Service uses analytics, advertising, or other non-essential technologies that require player choice or consent under applicable law, the Operator will provide appropriate notice, settings, or consent mechanisms.

Players may also restrict or delete cookies through their browser settings. However, disabling cookies, Local Storage, or other storage mechanisms necessary for the Service may cause certain features to stop functioning properly.

6. UTM Parameters, Referrals, and Source Analytics

If a player reaches Taisho Mysteries through:

exhibitions;
events;
social media;
referral links;
QR codes;
advertisements; or
other promotional channels,

the relevant link may contain UTM parameters or other source identifiers.

The Operator may use such information to understand:

how players discovered Taisho Mysteries;
the overall effectiveness of different events or promotional channels;
use of referral and redemption campaigns; and
general usage trends among players from different acquisition sources.

Unless there is an appropriate legal basis and suitable notice, the Operator will not use such source parameters to track a player’s private activity on unrelated third-party websites.

7. External AI and Other Service Providers

To provide the Service, the Operator may use external service providers for purposes such as:

cloud and website infrastructure;
databases;
account login and authentication;
email services;
website analytics;
error and performance monitoring;
AI and generative AI;
customer support; and
other technologies necessary to provide the Service.

Where a service provider processes personal data on behalf of the Operator, the Operator will reasonably limit the purposes of such processing and manage the provider as required by applicable law and the nature of the service.

Where a third party independently processes player information for its own purposes, that third party’s own privacy policy may separately apply.

8. Disclosure of Personal Data to Third Parties

The Operator does not sell players’ personal data.

Except in the following circumstances, the Operator generally will not disclose personal data that identifies a particular player to third parties:

where the player has given prior consent;
where disclosure is reasonably necessary to provide a feature or service requested by the player;
where the processing constitutes outsourcing, business succession, or another category that is not treated as ordinary third-party disclosure under applicable law;
where disclosure is required by law or legal process;
where disclosure is necessary to protect life, physical safety, or property and obtaining consent promptly is difficult;
where disclosure is necessary, to the extent permitted by applicable law, to detect, investigate, or address fraud, major security incidents, or other serious abuse;
where necessary data is transferred in connection with a lawful business transfer, inheritance, merger, reorganization, or other legitimate succession of operations; or
where otherwise permitted by applicable law.

The Operator does not sell private player letters, email addresses, or gameplay records to third parties for their own advertising or marketing purposes.

9. Cross-Border Data Processing

Players of Taisho Mysteries may be located in different countries or regions, and services used by the Operator, including:

Lovable;
Paddle;
cloud services;
AI services;
email services;
analytics tools; and
other external technology services,

may process or store data outside Japan.

Accordingly, player information may be processed outside the player’s location, including in Japan, the United States, Europe, or other countries and regions where relevant service providers maintain infrastructure.

Such information may include:

account information;
technical and website usage information;
transaction information processed by Paddle;
content necessary to provide the Letter System; and
other information necessary to provide the Service.

When processing personal data outside Japan or providing personal data to overseas third parties, the Operator will take contractual, informational, consent-based, verification, or other protective measures required under Japan’s Act on the Protection of Personal Information and other applicable laws.

Where applicable law requires further information regarding a particular overseas recipient, processing country, data protection framework, or security measure, the Operator will provide such information based on the services actually used and the applicable legal requirements.

10. Data Retention

The Operator does not retain player personal data indefinitely where there is no reasonable need to do so.

Retention periods are determined based on factors including:

the period necessary to provide and maintain the player’s account;
whether the player continues to use the Service;
the period necessary to save and provide game progress;
the period necessary to continue providing purchased digital content;
the period necessary to provide the Letter System or other gameplay features;
the period necessary to handle customer support, refunds, payments, or transaction disputes;
the period necessary to prevent cheating, fraud, abuse, or security incidents;
legally required tax, accounting, or record-retention periods; and
periods reasonably necessary for backups, system recovery, and technical operation.

Data processed by external service providers may also be retained for periods necessary under their contractual, technical, and security arrangements.

When there is no longer a reasonable need to retain information, the Operator will take appropriate steps based on the nature of the information and technical circumstances, such as deletion, de-identification, or other reasonable measures.

After account deletion, certain information may continue to be retained where necessary for:

legal retention obligations;
transaction records;
refund or dispute handling;
fraud prevention and security; or
reasonable system backups.

11. Aggregated, Statistical, and De-Identified Information

The Operator may aggregate, analyze statistically, or de-identify gameplay and usage information, for example to analyze:

completion rates for different character routes;
distribution of endings achieved;
question accuracy rates;
use of hints;
points at which players leave the game;
conversion results from different acquisition sources;
overall usage by language version; and
general use of different game features.

To the extent such information can no longer reasonably identify a particular player, the Operator may use it for:

product improvement;
game design;
operational analysis;
research;
business decision-making; and
presenting overall usage trends relating to Taisho Mysteries.

Where such processing is subject to specific legal requirements concerning anonymized or processed information, the Operator will comply with applicable law.

12. Data Security

The Operator will take reasonable and appropriate security measures based on the scale of the Service, the nature of the information, and relevant risks in order to reduce the risk of:

unauthorized access;
disclosure;
loss;
alteration;
destruction; or
misuse of personal data.

Such measures may include:

account and permission management;
appropriate authentication;
encryption in transit;
restricted access to administrative interfaces;
database and system access controls;
backup and recovery measures;
appropriate selection and management of external service providers;
system updates; and
security and error monitoring.

For security reasons, the Operator may not disclose all technical details of its security measures.

If a personal data incident occurs that legally requires notification to a supervisory authority or affected players, the Operator will take the necessary measures in accordance with applicable law.

13. Player Rights Regarding Personal Data

Depending on the player’s location and applicable law, a player may have the right to request:

confirmation of whether the Operator holds personal data relating to the player;
information about the purposes for which such data is used;
disclosure of personal data or related records where legally available;
correction of inaccurate or incomplete information;
addition of necessary information;
deletion of information where legally available;
suspension or restriction of processing where legally available;
cessation of third-party disclosure where legally available;
withdrawal of consent for specific consent-based processing;
cessation of non-essential marketing communications; and
other rights provided under applicable law.

To prevent another person from impersonating a player and accessing, modifying, or deleting their information, the Operator may request reasonable information to verify identity.

Where certain information cannot be immediately deleted or processing cannot be stopped due to:

legal retention obligations;
performance of a transaction;
security or fraud prevention;
dispute handling; or
another lawful basis,

the Operator will handle the request in accordance with applicable law.

Players may submit requests through the contact details provided at the end of this Privacy Policy.

For payment and buyer information independently processed by Paddle, the player may need to submit the relevant rights request directly to Paddle.

14. Account Deletion

Players may request deletion of their Taisho Mysteries account through functions provided on the website or by contacting customer support.

Deleting an account may result in:

loss of game progress;
loss of ending and achievement records;
expiration of Mission Rewards and other account-based rewards;
loss of access to Letter System records;
removal or de-identification of leaderboard records; and
loss of other features linked directly to the account.

Once an account has been deleted, restoration of related game records cannot be guaranteed.

Account deletion may also affect the player’s ability to regain access to previously purchased digital content. Players should therefore review the consequences before requesting account deletion.

Deleting a Taisho Mysteries account does not mean that transaction, tax, payment, or other records independently retained by Paddle under applicable law will also be deleted at the same time.

To exercise rights relating to information held by Paddle, the player may need to contact Paddle directly.

15. Minor Players

The Service is not specifically directed at children under the age of 13.

If the law applicable in the player’s location requires parental or legal guardian consent before a minor may:

create an account;
provide certain personal information;
use certain features; or
make a purchase,

the player must obtain the required consent.

If the Operator becomes aware that personal data relating to a minor has been improperly collected in circumstances where legally required parental or guardian consent was not obtained, the Operator will take reasonable and necessary steps in accordance with applicable law.

16. Third-Party Websites and External Services

The Service may include or link to:

Paddle;
social media platforms;
external websites;
payment or buyer-support pages; and
other services independently provided by third parties.

Once a player leaves Taisho Mysteries and uses a service independently provided by a third party, the collection and use of information by that third party will generally be governed by the third party’s own privacy policy and terms of service.

This Privacy Policy does not apply to independent third-party websites or services that are not controlled by the Operator.

17. Changes to This Privacy Policy

The Operator may update this Privacy Policy due to:

changes to the Service;
changes to system architecture;
changes involving Lovable, Paddle, AI, or other external services;
changes to data processing practices;
legal or regulatory requirements; or
other reasonable operational needs.

If a change may materially affect players’ privacy rights or interests, the Operator will provide notice as appropriate through:

the website;
email;
in-service notifications; or
another reasonable method.

If applicable law requires player consent for a particular type of data processing, the Operator will obtain such consent as required.

The updated Privacy Policy will apply from the effective date stated in the updated version.

18. Operator and Contact Information

Taisho Mysteries

Personal Data Controller / Operator: HSIEH HUI LIN

Address: If you wish to obtain the Operator’s address, please submit a request through the customer support email address below. The Operator will provide the relevant information within a reasonable period and without undue delay after receiving a reasonable request.

Customer Support and Privacy Contact Email: support.mystery.dev@gmail.com

Website: https://mysterygame.dev

Players may contact the Operator at the email address above regarding:

this Privacy Policy;
collection or use of personal data;
Letter System and AI-related data processing;
account information;
requests to access, correct, delete, or restrict the use of personal data;
security or privacy concerns;
requests for the Operator’s address; or
other matters relating to the handling of personal data by Taisho Mysteries.

For matters relating to payment, checkout, or buyer information independently processed by Paddle, players may also need to contact Paddle directly.

Last Updated: September 14, 2026 Effective Date: September 14, 2026