SpinCore Studio · Privacy Policy
Spin Hunters | Updated: October 9, 2026
Sign-in and Saves
You can sign in with Google, use an email and password, or play as a guest. Email accounts store your email address, salted password hash, and game account identifier, never your password in plain text. Registration and password recovery use Resend to send a one-time verification code valid for 10 minutes. The backend stores the code hash, purpose, attempt count, and usage status, and limits request frequency using hashes of the connection IP address and email address. A successful password reset revokes all previous sign-ins for that account. Google and email accounts are not merged automatically.
Google sign-in identifies your account. The backend verifies sign-in credentials and email verification status, and stores your Google account identifier, game player ID, and creation time; it does not store your Google password. Google credentials are used only to verify sign-in. This browser keeps you signed in for up to 30 days using a secure HttpOnly cookie. The backend stores a hash of the sign-in credential, its expiry time, and the current game window identifier. You can revoke the session by signing out on the account page.
After sign-in, cloud progress syncs first. During play, general progress is merged and saved to Cloudflare every 5 minutes, with additional save attempts when claiming rewards or leaving the screen. If the first sync finds different existing progress, you will be asked which to keep; a local recovery copy is retained before replacement. A new device or window takes over the game connection, and the old connection can no longer perform actions. Game saves are also stored locally.
Cookies and Local Storage
Essential sign-in cookies maintain your session and protect account connections. Browser local storage, including localStorage, is used for guest saves, settings, sync versions, recovery copies, and records that prevent duplicate reward claims. These uses are separate from advertising cookies. You can block or clear cookies and site data in your browser settings, but this may sign you out or remove unsynced guest progress. Save your progress before clearing data.
Google Advertising and Data Use
The web version is currently applying for Google AdSense, and live ads are not yet enabled. The account verification tag on the site verifies site ownership. The Android version uses Google AdMob rewarded ads, which load only when the player chooses to view them. Completing an ad lets you claim an in-game reward; availability depends on platform approval and ad supply. The Google Mobile Ads SDK processes IP addresses (which may indicate approximate location), ad and app interactions, crash and performance diagnostics, and device- or account-related identifiers for ad delivery, analytics, and fraud prevention. The app does not request Android Advertising ID permission, but the SDK may still process other identifiers.
Once live ads are enabled, Google and other third-party ad providers or ad networks may place and read cookies in your browser, or use technologies such as web beacons, IP addresses, and device identifiers to collect browser/device information, website or app usage, and ad interaction data. This data may be used to serve ads, provide personalized ads according to consent status, measure performance, limit repeated impressions, and detect fraud and invalid traffic.
When Google and its partners use advertising cookies, they may serve ads based on your visits to this site and other sites on the internet. Other third parties participating in ad delivery may also use their own cookies or similar technologies. Applicable providers and processing purposes will be listed in the ad consent message or the provider's privacy notice.
See Google Privacy Policy、How Google uses information from partner sites or apps and Google advertising data information. Signing in to this game with Google does not mean you have consented to personalized ads.
Ad Consent and Choices
The Android app uses Google UMP to update ad consent status and display required consent messages in applicable regions. Ads load only when the SDK determines that ad requests are permitted. When you need to manage your choices again, the account page provides Ad Privacy Options. Before live web advertising begins, a Google-certified Consent Management Platform (CMP) will be configured as required for applicable regions. Advertising cookies, local storage, and personalized ad data processing will follow your consent choices. This privacy policy itself does not mean you have consented to personalized ads.
You can also use Google My Ad Center to manage personalized ads, or visit AboutAds Choices to learn about opt-out options from participating companies. Browsers let you manage third-party cookies, and mobile devices let you manage advertising identifiers. Turning off personalized ads may not stop all ads. Some non-personalized ads may still process data for purposes such as measurement or fraud prevention and remain subject to applicable consent requirements.
Public Player IDs and Rankings
The player ID you set is stored in Cloudflare and displayed publicly in battles and rankings. Your Google identifier and email address are not made public. Rankings show the current week's rank, wins, losses, and matches played. Local practice does not count toward official rankings.
Battle Balance Analysis
When you play while signed in, the system records loadouts, upgrades, chips, opponents, terrain, wins and losses, battle duration, and idle kill rate so the studio can analyze game balance. These game analytics are separate from ad personalization, and email addresses are not made public in analytics data. Local reports and server battle data are interpreted separately.
Game Data
Game account identity data and game progress are managed separately. After signing in, you can sync progress such as stages, equipment, and materials. Guest saves are stored only on the current device and are not automatically imported into other signed-in accounts. Weekly arena rankings and rewards are settled using server records.
Report Issues and Suggestions
The report entry opens your mail app with the game version and system ID filled in. You can edit the message, attach screenshots, and send it yourself. The studio handles reports and compensation through the support email address; clicking the entry does not automatically send an email. Do not provide passwords or payment information. Reports previously submitted to the backend are retained for support handling.
Service Providers
Email verification and password reset emails are sent through Resend, which therefore processes recipient email addresses, message content, and delivery records. These emails are used only for account actions you request. See Resend Privacy Policy. Deleting a game account also deletes its email sign-in data and verification records.
The production site is hosted on Cloudflare, while OpenAI Sites remains a test entry point. Google is used for authentication, and Cloudflare for the backend and backups. These services may process connection information and necessary service logs. Ad providers' data processing is described separately above. The studio does not sell player data or request access to Gmail messages or Google Drive.
資料刪除與聯絡
你可以在帳號頁開啟「刪除遊戲帳號」，確認後刪除 Android 與網頁共用的遊戲帳號及相關雲端資料，並撤銷登入。也可從 帳號刪除申請網頁 找到不需安裝 App 的客服申請方式。這不會刪除 Google 帳號。刪除回執使用隨機字串的雜湊供 7 日內查詢，不含 Google 帳號識別碼；到期後例行清理。服務供應商備份及客服郵件的清理另依實際處理範圍告知，不承諾能遠端立即抹除離線裝置。
若要申請查詢或刪除工作室保存的雲端資料，請寄信至 spincore.studio@gmail.com，提供玩家系統 ID。我們會確認帳號所有權後處理。解除 Google 授權不會自動刪除已儲存的遊戲備份；Google 自行處理的資料，可透過上述 Google 隱私權工具管理。