We process account email addresses, internal account and device identifiers, login sessions, purchased products, order numbers, payment provider and payment status, as well as IP address, timestamps, browser information, and necessary diagnostic or security logs. Aquarium progress is primarily stored in your current browser's local storage and may be removed when browser data is cleared.
Purposes
We use this information to create and secure accounts, maintain sessions, provide game features, create and verify orders, grant permanent theme access, handle refunds and support, prevent fraud, diagnose failures, and meet legal obligations. We do not sell personal information.
Storage and service providers
Account, order, and entitlement records are stored on servers and databases under our control. Providers supporting hosting, networking, security, email, logging, or payments may process limited data on our behalf. Where processing crosses regions, we use contractual safeguards, security controls, and protections required by applicable law.
Payment information
Payments are handled by independent providers such as Creem and Waffo Pancake on their hosted checkout pages. Fin Nook does not receive or store full card numbers, security codes, or payment account credentials. We retain only product, order, and payment-status information needed to complete orders and grant access. Payment providers process payment data under their own privacy policies.
Security
We use HTTPS encryption in transit and protect server-side data through access controls, least privilege, protected runtime configuration, log review, and necessary backups. Access is limited to people or services that require it for operational, support, security, or legal duties. No internet service can guarantee absolute security.
Retention
Account information is retained while the account is active and is normally deleted or anonymized within 30 days after closure unless legal, security, or dispute needs require longer retention. Order, payment-status, refund, and financial records may be retained for up to seven years for tax, accounting, fraud prevention, and dispute handling. Activity and security logs are generally retained for no more than 90 days. Backup data is removed through the backup rotation cycle. You control deletion of locally stored browser game data.
Your rights
You may request access, correction, export, or deletion of relevant personal information; object to or restrict certain processing; or request account closure. Available rights depend on local law. We may verify identity before fulfilling a request to protect the account.
Contact
To exercise your rights or ask a privacy question, contact [email protected].