Who is responsible
TORII XIII is a project operated under the Etechcode brand (etechcode.com). Location: Adolfo López Mateos neighborhood, postal code 76750, Tequisquiapan, Querétaro, Mexico. Contact contacto@toriixii.online for privacy, rights and support. The account deletion page lets you start a request without installing the app.
Data we process
Account: a random identifier, session, email, name or alias and a profile-picture reference if supplied by Google. Apple/Google credentials needed to revoke authorization are encrypted on the server. Invited test accounts use email and password managed by our authentication provider; passwords are not included in app logs. Game: levels, stars, bonds, collection and confirmed progress. Previous economy and summon records are retained for users who have them. Purchases: product, store, transaction, status and adjustments; we never receive your full card number. Operations: IP address, time, requested route, status and minimal security data. Support: information you choose to send.
Why we use it
Necessary purposes include authentication and recovery, saving and validating progress, purchase and access management, fraud prevention, support, deletion requests and applicable obligations. RevenueCat purchase and revenue metrics help operate the service. Optional gameplay usage and error analysis helps us improve the game: decline or withdraw it in Settings without losing puzzle access. You can separately accept or decline optional sanctuary reminders.
Optional diagnostics
Diagnostics are initially off. If enabled, we send limited session, language, version, level, puzzle action, spirit, hint, completion and error-count events linked to your account identifier. They do not include free-text errors, email, name or advertising identifiers. Events older than 30 days are purged and are removed when the account is deleted. Turning diagnostics off stops new submissions.
Optional reminders
If you enable reminders, we use Google Firebase Cloud Messaging and Apple push services to deliver them. We process a random installation identifier, notification token, platform, version, language and time-zone offset, linked to your account and progress to avoid reminders without available content. The time-zone offset is not your precise location. Occasional reminders arrive at most twice per week. If you choose Daily reminders, we send at most one per day, only if you have not opened the app that day. Reminders arrive between 6 pm and 8 pm according to your registered time-zone offset and stop after 21 days without activity. We save your chosen frequency; updating the app does not enable daily reminders automatically. Google Analytics and advertising tracking are not enabled. Turn reminders off in Settings or system permissions. Disabling reminders, signing out or deleting your account removes the sending registration; when offline, server removal completes after reconnection.
Providers and international processing
Supabase handles authentication and database services; Hostinger hosts the website and API; RevenueCat validates purchases and maintains purchase history and metrics. Apple and Google provide optional sign-in, distribution and payment processing under their own policies. These providers may process data outside Mexico. We use them for the stated purposes, not data sales, targeted advertising or cross-app tracking. Advertising integrations are not enabled.
Retention and security
We retain account and progress data while active. When deletion is accepted, access is blocked and server gameplay data is removed; identity and provider cleanup must finish within 30 days. Revocation credentials are deleted once linked authorizations are confirmed revoked. Minimal financial records may be retained up to 24 months for refunds, disputes and fraud. Technical logs rotate under operational controls and are retained on a limited basis for security. We use encrypted connections, restricted access and separated credentials. Local preferences and pending results remain on the device until synced or cleared.
Your rights and choices
Request access, correction, cancellation, objection, withdrawal of consent or limitations on use through our privacy email. Identify the right, relevant data and a reply channel. We verify identity proportionately; do not send identity documents, passwords or full financial details in your first message. We respond through that channel within applicable deadlines and explain relevant steps or limitations. Disable diagnostics or request deletion in the app or through this website. We do not send advertising emails.
Age and children
Our intended audience is 13 and older; TORII does not participate in Kids/Families. Store ratings may vary by region. Minors need any required parent or guardian permission to use the app or purchase. Contact us if a child's data may have been processed without required authorization so we can investigate and delete it where appropriate.
This website
This website does not use cookies, tracking forms or advertising analytics. Fonts, images and videos are served from our domain. Hosting may log IP address, route, time and technical data necessary for security and operation. Email links open your email app; we receive only what you choose to send.
Notice updates
Updates will appear here with their date. Relevant processing changes will also be communicated in the app where appropriate. Participating in testing does not remove your privacy rights.