Privacy Policy

Who we are

Savanzo, operated by Iodine Studio, is a California business. Contact us about privacy at privacy@savanzo.com.

Information we collect

Depending on how you use Savanzo, we collect:

• your guest identifier and nickname;
• your registered username, optional email address, and password hash;
• your optional self-attested 21+ setting for advertising eligibility and promotions;
• session, MMR, win-loss, match, move, and rating-history records;
• operational request, device-class, diagnostic, abuse-prevention, and security metadata; and
• browser storage described below and, when configured, sanitized monetization telemetry.

Sanitized monetization telemetry may include eligible surface views; placement, route, and experiment cohort; aggregate ad delivery outcomes; optional-support impressions and Ko-fi link selections; queue starts, match completions, and Queue Again selections; ad-slot dimensions; hard-navigation page-performance fields; and a coarse mobile or desktop device class. We do not record AdSense clicks, user IDs, tokens, nicknames, match IDs, player names, moves, results, or ad content in those events.

First-party engagement measurement is disabled by default. It may run only after its public feature flag is enabled and the separate consent workstream supplies an eligible decision. When eligible, a visit event contains only the home, Daily, or Support route class; whether a prior visit marker exists; a direct, organic, Google Search, or Reddit campaign class; and a coarse mobile or desktop device class. A support event contains only a support impression or selection, its coarse route class, and that device class. Raw URLs, UTM values, referrers, user or match identifiers, nicknames, email addresses, tokens, player names, and moves are not sent in these engagement events.

How we use information

We use information to authenticate users, create and maintain sessions, operate matchmaking and games, provide ratings and records, prevent fraud and abuse, protect security, improve reliability, respond to support, comply with law, and measure configured monetization features. When separately enabled and eligible, we use the limited first-party engagement fields above to understand aggregate launch traffic, repeat visits, and support interest.

If you choose to provide it, we use the current 21+ self-attestation only for advertising eligibility and promotions. It does not affect gameplay, and it is not consent to receive marketing or proof of legal location.

How we share information

We disclose information to infrastructure and service providers that help operate Savanzo; to advertising and consent-management providers such as AdSense when enabled; when reasonably necessary for legal, safety, or security purposes; and as part of a business reorganization, financing, sale, or succession. Ko-fi receives information only when you choose to navigate to its external service. Those providers have their own privacy practices.

Iodine Studio does not sell account passwords or gameplay records. If third-party advertising is enabled, the advertising provider may collect or receive identifiers and activity data as explained through its consent controls.

Cookies and browser storage

Savanzo uses a secure session cookie for authentication. Local browser storage may hold a profile snapshot and an advertising experiment cohort so the interface can persist between visits. When first-party engagement measurement is eligible, local storage also holds the booleansavanzo-visit-seen marker so the next hard-page visit can be classified as returning; the marker does not contain an identifier or visit history. Clearing browser storage does not delete an account, match history, rating history, or other server-side records.

Advertising and online tracking

Advertising and a consent-management platform may be enabled. When they are active, third parties may use cookies or similar technology subject to the choices available in the consent controls. Savanzo does not currently change its own behavior in response to browser “Do Not Track” signals. You may use available consent controls or contact us about your choices.

The 21+ setting is an optional self-attestation. Savanzo does not collect your date of birth or independently verify your age in this release, and the setting alone does not make an advertisement or promotion legally eligible.

Retention

Sessions are retained until expiry or revocation. Private-game invites are retained until expiry and operational cleanup. Account, rated-match, and rating-history records are retained while reasonably needed to provide player records and protect game integrity. The current 21+ setting is retained with the player identity until you change or revoke it or the related account record is deleted. Security, dispute, and legal records may be retained as reasonably necessary for those purposes.

First-party engagement events are currently limited to the coarse fields described above and may appear in ordinary rotating operational logs. There is no dedicated raw-event or aggregate analytics store and no separate engagement-retention schedule today. This policy will be updated before a persistent raw or aggregate engagement store is introduced.

Security

We use reasonable administrative and technical safeguards appropriate to the service, but no transmission or storage system can be guaranteed absolutely secure.

Your choices and requests

You may change or revoke this setting from Profile without affecting gameplay. You may request access to, correction of, or deletion of information by emailing privacy@savanzo.com. We may need to verify your identity and may retain information where permitted or required for security, integrity, legal, or operational reasons.

Children

Savanzo is not directed to children under 13. If you believe a child under 13 supplied personal information, contact us at privacy@savanzo.com.

California disclosures

The categories described above include identifiers, account and authentication information, internet or electronic activity, gameplay and profile records, and inferences such as ratings. Sources include you, your browser or device, service operation, and service providers. We use and disclose those categories for the purposes and to the third-party categories described above.

If applicable law gives you rights to know, access, delete, correct, restrict, opt out, or receive equal service when exercising a privacy right, submit a request to the privacy email above. We will process verified requests as required by applicable law.

Changes to this policy

We may update this Privacy Policy. We will update the effective date and provide notice of material changes. A Privacy-only update will not by itself block access to gameplay.