Privacy Policy
These documents cover every product run by Moonlit Ronin Studios (“we”, “us”):
- Moonlit Ronin Studios games and apps — browser games on https://moonlitronin.com (Monk & Dragon Sister, Alley Cats, Red String Ronin, Elemental Shinobi Brawl, Farming Acres / Moonlit Acres, Moonlit Hanafuda and future titles), their Android apps, and desktop/Steam builds.
- MRS Network — the optional cross-game player profile, achievements, Moon Shards and MRS Tokens.
- Garden Variety Gamer — our gaming YouTube channel(s) and the internal tools that edit and publish its videos through the YouTube API Services.
- eSports AI Coach — our AI match-analysis and coaching tool.
This policy explains what personal information we collect, why, and the choices you have. We collect as little as we can: most of our games work with no account at all.
1. Information we collect
Information you give us
- MRS Network profile (optional): display name, and an email address if you choose a sign-in method that uses one.
- Leaderboards: the name or initials you enter, your score and the date.
- Submissions and messages: clips, goals or messages you send us, and your contact details if you include them.
- Purchases: the store (e.g. WHOP, Google Play, Steam) tells us that a purchase happened and which product; it processes your payment details, not us.
Information collected automatically
- Gameplay analytics: anonymous events such as “chapter started” or “boss failed”, with a random session ID, game name, version, device type and screen size. No name, email or precise location. It is off when your browser sends Do Not Track, in test/demo modes, and can be turned off in each game’s Settings.
- Saves on your device: game progress and settings are stored in your browser’s local storage or the app’s storage. If you use cloud save, a copy is stored with your MRS Network profile.
- Server logs: our web host records standard request logs (IP address, browser, pages requested) for security and to keep the site running.
- Optional real-world features: some games show tonight’s moon phase (calculated on your device) and local weather. For weather, your browser asks a geolocation-by-IP service (GeoJS) for an approximate city and then asks a weather service; these requests go from your device to those services and we do not store the result.
- Online co-op: peer-to-peer sessions use a connection broker (PeerJS) and, if needed, a relay. Your IP address is visible to the broker/relay and to the friend you connect with, as with any peer-to-peer game.
2. Google user data and the YouTube API Services
Garden Variety Gamer’s publishing tools and eSports AI Coach use the YouTube API Services. They are used to manage our own channels and, where a feature offers it, a channel you choose to connect.
What we access (only the scopes you approve on Google’s consent screen): uploading videos and setting their title, description, tags, thumbnail, privacy status and schedule on the selected channel (youtube.upload); reading that channel’s basic information, video list and metadata (youtube.readonly); and, where a feature shows statistics, the channel’s YouTube Analytics reports (yt-analytics.readonly).
How we use it: only to provide the feature you asked for — publishing videos you approved, showing your channel’s videos and performance inside the tool, and generating coaching or content suggestions. We do not use Google user data for advertising, we do not sell it, and we do not use it to build profiles unrelated to the feature.
Sharing: we do not share Google user data with third parties except service providers that host our systems under confidentiality obligations, when you ask us to, or when required by law.
Storage and retention: OAuth access and refresh tokens are stored encrypted on systems we control and are used only by the tool you authorised. Video and analytics data retrieved from the API is cached for no more than 30 days and is then refreshed or deleted. When you revoke access or ask us to delete your data, we delete the tokens and any stored API data within 7 days.
Revoking access: at any time at https://security.google.com/settings/security/permissions, or by emailing legal@moonlitronin.com.
By using these features you agree to the YouTube Terms of Service; see also the Google Privacy Policy.
Limited Use: Moonlit Ronin Studios’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. How we use information
- To run the games, save progress, show leaderboards and achievements, and deliver purchases.
- To fix bugs, balance difficulty and decide what to build next (anonymous analytics).
- To publish and manage our videos and provide eSports AI Coach features.
- To keep the services secure and prevent cheating and abuse.
- To answer messages and, only if you opt in, send news about new games.
Where the law requires a legal basis (for example in the EU/UK), we rely on performing our agreement with you, our legitimate interest in running and improving the services, and your consent (which you can withdraw) for optional features.
4. Who we share it with
| Provider | What for |
|---|---|
| Web hosting provider | Hosting the website, games and request logs |
| Supabase (database) | Leaderboards, anonymous analytics, MRS Network profiles and cloud saves |
| WHOP, Google Play, Steam | Selling and delivering paid products |
| PeerJS broker / relay | Connecting online co-op sessions |
| Google / YouTube | Publishing and reading channel data you authorised |
| GeoJS, weather and holiday data services | Optional real-world features, requested directly from your device |
We do not sell personal information and we do not share it for cross-context behavioural advertising. We may disclose information if required by law or to protect our users and services.
5. Cookies and local storage
We do not use advertising cookies. Games use your browser’s local storage for saves and settings. You can clear it in your browser settings (this resets your local progress).
6. How long we keep it
- Anonymous analytics events: up to 24 months, then deleted or aggregated.
- Leaderboard entries: while the leaderboard exists.
- MRS Network profiles and cloud saves: until you delete them or ask us to.
- Google / YouTube API data: see section 2 (cache ≤ 30 days; deletion within 7 days of revocation).
- Server logs: as kept by our host, typically no more than 90 days.
7. Your choices and rights
Depending on where you live (including under Canada’s PIPEDA, the EU/UK GDPR and California’s CCPA/CPRA), you may have the right to access, correct, delete or get a copy of your personal information, and to object to or restrict some uses. Email legal@moonlitronin.com from the address linked to your data, or tell us your MRS Network display name. We will respond within 30 days. You can also complain to your local data-protection authority (in Canada, the Office of the Privacy Commissioner).
8. Children
Our games are made for general audiences. We do not knowingly collect personal information from children under 13 (or the minimum age in your country) beyond anonymous analytics; children should play without creating an MRS Network profile or entering real names. If you believe a child has given us personal information, email legal@moonlitronin.com and we will delete it.
9. Security
We use HTTPS, access controls, row-level security on our database and encrypted storage for credentials. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
10. International transfers
We are based in Canada and our providers may process data in Canada, the United States or other countries. Where required, we rely on appropriate safeguards for these transfers.
11. Changes
We will update the effective date above when this policy changes and highlight significant changes on the site or in the game.
12. Contact
Moonlit Ronin Studios · legal@moonlitronin.com