Privacy Policy

Effective from 10/10/2026 · The What The Shops team

1. Data we collect

• Account: username, password (stored only as a one-way hash), secondary password (hashed), display name, shop name, in-game address (made up by you, not a real address).
• Technical: IP address, a random device ID generated by the app, browser / device type, login times, page-load error logs.
• In-game activity: orders, Xu transactions, items, rankings, reviews, abuse reports.
• Content you send: messages, avatar, guild logo, Story photos and posts, voice messages (recorded only when you press record).
• Optional: Facebook / TikTok links you add to your profile.

We do NOT collect email addresses, phone numbers, contacts, GPS location or payment information.

2. How we use it

• Running the game: sign-in, saving progress, rankings, chat.
• Safety: preventing cheating and multi-account abuse, blocking spam, handling reports.
• Improving quality: fixing bugs, measuring load speed, balancing the in-game economy.

We do not sell personal data and we do not use your data for third-party advertising.

3. Storage and retention

Data is stored on servers rented by us. Some data is deleted automatically:

• Chat messages and notifications: about 3 days.
• Voice messages: a few minutes after sending.
• Page-load error logs: about 3 days.
• Promotion images submitted for review: deleted after review.

Account data is kept until you delete your account, or until it is cleaned up under our inactive-account policy.

4. Sharing

Your display name, shop name, avatar, rankings, Stories and messages in public chat rooms are visible to other players.

We only disclose data to competent authorities when required by law.

5. On-device storage

The app and website store on your device: your sign-in session, chosen server, language, sound / theme settings and, if you opt in, "Remember me" details. You can clear them by signing out or clearing the browser / app data.

6. Your rights

You can view and edit (display name, shop name, password) and delete your account inside the game. For other personal-data requests, contact us (see Contact); we reply within 30 days.

7. Security

Passwords are one-way hashed, connections use HTTPS and admin access is restricted. No system is perfectly secure, so please use a unique password for the game and turn on the secondary password.

8. Children

The Game does not knowingly collect identifying information from children. If a child under 13 is playing without parental consent, a parent can contact us to delete the account.

9. Contact

Data controller: The What The Shops team. Contact: the official What The Shops Facebook community (https://www.facebook.com/share/g/1PbC15egDQ/).