Lost Beacon · Luthfi Studio

Privacy Policy

Effective and updated · 2026-10-19

Who is responsible

Lost Beacon is operated by Luthfi Studio. For privacy, support or deletion requests, contact kazutokirigayakirito354@gmail.com.

Information used to run the game

We create a random installation identifier and a game account identifier. Cloud play sends saved progress, equipment choices, battle outcomes, timing reports and game-version information to our servers. These records support saving, recovery, fair play and selection of later challenges. Reported play time is distinct from simulated battle time.

If you link a sign-in provider, Firebase and our account service process the provider identity and authentication proof. Depending on your chosen provider, the account service may receive an email address, display name and profile information. We do not receive your Google password. Game credentials are kept in protected native storage on supported mobile builds.

Purchases and subscriptions

Where Google Play subscriptions are offered, Google handles checkout and payment details under its own terms. We process a purchase token, product and plan identifiers, order references, subscription status, renewal and expiry information, and an opaque game-account identifier to verify purchases and restore access. We do not receive your full payment-card number. Purchase verification and renewal notifications are handled by our VWork backend.

Local information and sharing

Graphics, sound and language preferences, offline saves and local interaction measurements are stored on your device. Local collection-event measurements are not automatically uploaded as a separate analytics feed. Cloud battle reports are sent as part of cloud gameplay. Exporting an image or measurements, sharing an invitation, and publishing an exhibit require your action.

Published exhibits contain the selected collectible and authored battle summary. They are accessible to people with the link; public comparisons are opt-in. They do not display your sign-in credentials or purchase records. Withdrawing an exhibit removes its hosted availability, but cannot recall copies or screenshots that other people have already made.

Service providers and transfers

VWork hosts game services, account records, content and purchase processing. The current game backend runs in Singapore. Google Firebase provides authentication; Google Play and Google Cloud provide game sign-in, billing and authenticated subscription notifications when enabled. These providers may process information in other countries under their own policies.

The game uses VWork-managed automated decision processing to select bounded future challenge and supply options from gameplay context. It does not need your password, payment-card details or purchase token for those decisions. We share necessary data with service providers to operate the game, and may disclose information when legally required or necessary to protect the service. We do not sell personal information or use game records for advertising targeting.

Google Privacy Policy · Firebase privacy information

Permissions and service logs

The Android app uses internet and network-state access. It does not request access to your contacts, SMS, microphone, camera or precise location. Sharing a generated postcard grants the receiving app access to that selected file. The current game has no advertising SDK. Hosting and authentication services process request metadata, such as IP addresses, timestamps, errors and device or browser information, for delivery, security and troubleshooting.

Retention and deletion

We retain cloud saves and account mappings while needed to provide your account. Deletion removes the game account, linked identities, cloud progress, collectibles and hosted public exhibits through the account-deletion process. Requests may require fresh sign-in or other ownership verification. Failed provider deletion can require a retry before completion.

Limited deletion receipts, security records and billing records may be retained to prevent replay or fraud, handle refunds or disputes, and meet legal obligations. Deleted gameplay records are not kept as an active playable account. Backups and service logs may remain for their retention cycle. Copies stored on another device or exported to another app must be removed there.

Request account deletion. Deleting your account or uninstalling the game does not cancel a Google Play subscription. Manage or cancel it in Google Play.

Your choices and rights

You can keep an exhibit private, withdraw publication, change local preferences, use the available offline mode, and request account deletion. Offline mode has different synchronization and recovery limits. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, request portability, withdraw consent where applicable, or contact a supervisory authority. Email us to make a request; we may need to verify ownership.

Children, security and changes

Use the game only where permitted by the applicable store age rating and local law; a parent or guardian should handle purchases for a child where required. If you believe a child has provided personal information without required authorization, contact us so we can investigate and arrange deletion where appropriate.

We use HTTPS and access controls, but no service can guarantee absolute security. We will update this page when our practices change and provide additional notice when required. The date above identifies this version.