Privacy Policy

01

About This Policy

Suvarnaveda is a service from Mysore Mango. In this policy, “we,” “us” and “our” refer to Suvarnaveda and the business providing it.

This Privacy Policy explains how we handle information when you visit suvarnaveda.com or www.suvarnaveda.com, use our account and game features, or contact us. Public knowledge pages can be browsed without an account. External websites linked from Suvarnaveda have their own privacy practices.

For privacy questions or requests, contact suvarnavedaofficial@gmail.com.

02

Information We Collect

Website and security information. Our infrastructure receives information such as your IP address, requested pages and artwork, browser details and request times. Security records may include account and action identifiers, request frequency and review flags. Some rate-limit identifiers use hashed IP addresses; this does not necessarily make the information anonymous.

Account and sign-in information. Supabase Auth handles account email, sign-in credentials, provider identities and sessions. If you choose Google sign-in, Google and Supabase exchange the information needed to authenticate you. A stable user identifier connects your sign-in identity to your Suvarnaveda account. Passwords are managed by the authentication provider rather than stored as plain text in our collection database.

Profile and social information. We store your unique username, display-name information, chosen Spirit avatar or profile symbol, optional biography, visibility settings, friendship preferences and challenge preferences. Spirit avatars use catalog artwork and eligible card ownership; they are not uploaded personal photographs. Please keep sensitive information and other people’s private details out of public profiles.

Collections and transactions. We maintain card editions, individual copy references, ownership and acquisition history, reservations, gifts, trade offers, Sacred Exchange records, reward claims, achievements, gemstones, purchase eligibility and Dharma transactions. Saved rosters, Temple arrangements and leader selections are also associated with your account.

Gameplay and world information. We process matchmaking and presence, actions and results, ratings, Shakti and recovery times, Guardian Path progress and records needed to investigate disputes or misuse. Kalpavriksha records include Tapas reservations, Boons, rewarded copies, encounters, choices, Wishes, discoveries, titles and Omens. Amaravati records include trials, reservations, reigns, audiences, decisions and Chronicle events. Beyond the Veil stores encountered clues and observations. These are fictional activities; we do not ask you to disclose personal religious practices.

Story and exploration progress. Your verified Crown of Svarga victory is used to determine story and open-world eligibility. Available Indra Dev campaign records can include choices, character paths, quests, experience, equipment, inventory and story-card growth. Bharatavarsha’s current exploration position, discoveries, local encounters and supplies are stored in the browser, rather than automatically synchronized to your account across devices.

Messages and editorial contributions. If you contact us, we receive your email address, message, attachments you choose to send and related correspondence. Restricted editorial records may include contributor identities, revisions, references and asset metadata.

Optional analytics. With your permission on eligible public pages, Google Analytics may process usage, referral, browser, device, approximate location and cookie-based information. Our integration supplies sanitized public page locations rather than arbitrary search text. Please do not enter personal information in public searches.

03

How We Use Information

We use information to provide accounts and games, maintain collections and valid ownership, process permitted transactions, deliver social features, validate progression and rewards, protect the service, investigate disputes, respond to requests and meet applicable legal obligations. Optional analytics helps us understand public-site usage when you choose to allow it.

Where applicable law requires a legal basis, that basis depends on the activity and jurisdiction. It may include providing a requested service, consent for optional processing, permitted legitimate interests in security and reliability, or a legal obligation. Creating an account does not, by itself, provide consent to marketing emails.

04

Public Profiles and Information Sharing

Public player summaries may show your username or display name, Spirit avatar or symbol, Player Tier, current Dharma and ranked records. Rated players may appear on the global leaderboard. Selected ruler and reign information can appear in the relevant Amaravati court and Chronicle. Hiding your biography does not hide every summary or historical field.

Biography, friends-list, collection and Temple visibility have separate controls. Collection details are private by default. A public Temple shows its displayed cards and permitted profile information. Changing a feature to private limits subsequent access through our public routes, but cannot recall screenshots or copies already made by others.

Gift and trade participants can see the offered copies and offer status. Copy-verification pages provide limited card, copy, status and permitted owner-display information. They do not expose account email or private transaction history. You can view the history of copies you own.

Blocking limits certain direct interactions. It does not guarantee that your account will disappear from all leaderboards, historical records or other players’ visible friends lists.

05

Cookies and Analytics Preferences

Essential cookies and authentication storage support sign-in, verified sessions and account recovery. Our application session cookie is HTTP-only. A one-use recovery permission lasts up to ten minutes. Essential authentication functions are separate from optional analytics.

Your analytics preference is stored in your browser and remains valid for 180 days. Clearing site data can reset that choice. The preference is specific to your browser and website origin; it does not automatically synchronize across devices or accounts. Preference validity is separate from Google’s cookie durations and data-retention settings.

Google Analytics loads only after an affirmative choice on eligible public routes. Our integration excludes account, game, player, simulation, story, restricted editorial, search-query and preview routes. Google Signals and advertising-personalization signals are disabled in the application configuration. We do not currently have a personalized-advertising integration.

Use Analytics Preferences below or in the website footer to change your choice. Choosing Essential Only disables our integration and attempts to expire accessible Analytics cookies; it does not delete information already received by Google. Browser restrictions and provider settings may affect identifiers and retention. We do not currently promise automatic handling of every Do Not Track or Global Privacy Control signal.

Browser storage also remembers interface, sound and music preferences, pending battle submissions for reconnection, and local exploration saves. Clearing it can reset preferences or remove local progress without deleting your server-held account, cards or balances. On a shared device, other people using the same browser profile may be able to access locally stored information.

Google Fonts operates separately from Analytics. Loading these fonts may send connection information to Google even when you decline Analytics.

06

Service Providers and International Processing

We use Sites-managed hosting backed by Cloudflare for the website and application database, Cloudflare R2 for artwork and media, and an additional Cloudflare service for real-time matchmaking and battle notifications. That real-time service processes account identifiers, queue and match identifiers, ratings, power and timing/status information to coordinate play. The main backend remains responsible for card ownership, valid actions, balances and results.

Supabase Auth handles authentication; Google services support sign-in, optional analytics and fonts; Gmail handles support correspondence. Source repositories and engineering services, including GitHub, support website development. Domain services support access to the website. Providers receive information needed for their particular service; these descriptions do not mean every provider receives your collection or full account history.

Service providers may process information outside your country. Their service regions, subprocessors, terms and retention practices vary. Applicable requirements for international transfers and service-provider safeguards continue to apply.

Our Analytics integration is configured to measure eligible public pages rather than account identities, private match records or support correspondence.

07

Retention and Account Closure

We retain account and game information to operate the service, verify ownership, prevent duplicate claims, investigate misuse and resolve disputes. Certain transaction and safety histories are append-only. A complete retention schedule, including confirmed provider-backup expiry, is still being established.

To request account closure, access or deletion, email suvarnavedaofficial@gmail.com. A self-service download of selected account records is available in Profile & Settings after a recent sign-in. Larger downloads and additional personal-information requests are handled through our contact channel. You can also submit and track a deletion request in Settings → Account → Privacy & Data → Danger Zone after a recent sign-in. The request records your account identifier, verified contact email, confirmation and review status for secure handling. Submission does not mean deletion is completed. Fully coordinated automated account deletion is not currently available. Requests require assessment across authentication records, application data, support correspondence, relevant service providers and other people’s valid transaction records.

Deleting a sign-in identity or clearing browser data does not, by itself, erase all related server records. Retention exceptions must have a lawful purpose and basis. These service limitations do not remove your applicable privacy rights or permit indefinite retention without justification.

08

Your Privacy Rights

Depending on applicable law, you may have rights to access, correct, obtain a copy of, delete or restrict the use of your personal information, object to certain processing, withdraw consent, or complain to a competent privacy authority.

Send requests to suvarnavedaofficial@gmail.com with the subject Privacy Request. Explain the information involved and the action you are requesting. We may need proportionate identity verification and must consider lawful exceptions and other people’s privacy. Applicable response obligations remain in force even where a request requires manual handling.

Do not send passwords, verification codes, access tokens, payment details or identity-document images through ordinary email. Some anonymous or aggregated information may no longer be traceable after an identifier is cleared.

09

Children and Account Eligibility

Public educational browsing does not require an account. New registered accounts and collectible-card participation are intended for adults aged 18 or older. Before creating a Suvarnaveda account, including after provider sign-in, you must explicitly affirm that you are 18 or older. We store the account identifier, affirmation time and policy version, not your full birth date or identity documents.

Age eligibility is self-declared and is not independently verified. We do not offer child accounts through parental consent. An authentication provider may create a sign-in identity before Suvarnaveda onboarding is completed; this does not grant a Suvarnaveda collection or game access. Existing-account transition arrangements remain under review; no existing account or collectibles are automatically removed by this release.

If you believe a child’s information has been provided without required permission or should not be retained, email suvarnavedaofficial@gmail.com with enough information to identify the concern. Avoid sending unnecessary sensitive details. Applicable protections for children remain in force.

10

Security, Updates and Contact

We use HTTPS, verified authentication, server-side authorization and transaction controls to reduce security risks. No system or method of transmission can be guaranteed secure.

We will update this policy when our information practices materially change and provide additional notice or seek permission where required. The date at the top of this page identifies the latest update.

For privacy, security or accessibility concerns, contact suvarnavedaofficial@gmail.com. Please do not publish credentials or access another person’s account to demonstrate a problem.