Privacy Policy

01 Introduction and scope

Welcome to Senjigen Studio and the Web edition of White Lantern Crossing. This policy explains what the site and email-verification access service process, why and for how long, and the boundary between local game saves and access data.

This policy applies to the public site, the Web edition of White Lantern Crossing, and its email-verification access service. Separate or unreleased products are governed by the notices shown with them.

02 Information we collect

2.1 Email verification codes

• Recipient address:Used to send a one-time code. The authentication database stores only an irreversible HMAC identifier, not the address in plain text.
• Verification code:The code is used briefly for delivery. Only its HMAC is stored; the plain code is not stored or logged.
• Temporary inboxes:We do not blacklist disposable-email domains, but delivery is not guaranteed. Verification works only when the provider accepts our message and the address can receive it; an expired address cannot be used again.

2.2 Security and operational data

• IP security identifier:To limit abuse, an irreversible HMAC identifier is derived from the requesting IP. The authentication database does not store the plain IP.
• Session data:After verification, a random session token is created. The server stores only its HMAC and expiry; the browser stores a secure cookie.
• Necessary logs:The server may log access time, request path, status code, and diagnostic ID for security and troubleshooting. Logs do not include codes, email bodies, or request bodies.

2.3 Game saves

Story progress, choices, settings, achievements, and gallery unlocks remain in the current browser. Email verification does not upload them to the authentication server or sync them between devices. Clearing browser data may erase local saves.

03 How information is used

This information is used only for:

• Access verification:Sending a one-time code to confirm the visitor can read the specified inbox.
• Session continuity:Maintaining access for a limited time without re-verifying every asset request.
• Abuse prevention:Applying cooldowns, attempt limits, and address/IP rate limits.
• Operations and security:Diagnosing failures, defending against automated attacks, and meeting legal obligations.

Email verification is not used for marketing subscriptions, advertising profiles, or cross-site tracking.

04 Sharing and disclosure

4.1 We do not sell personal information

We do not sell your personal information to third parties.

4.2 When information may be shared

• With consent:Information may be shared within the scope you expressly authorize.
• Necessary providers:Necessary data may be processed by email-delivery and cloud-hosting providers solely to send codes or host the site, subject to confidentiality and security duties.
• Legal requirements:Information may be disclosed where required by law or a lawful request from a judicial or administrative authority.
• Protection of rights:Information may be disclosed where reasonably necessary to protect Senjigen Studio, users, or the public.

4.3 Transfers

If personal information transfers through a merger, acquisition, or asset sale, the new holder must remain bound by this policy or seek consent again.

05 Storage and protection

5.1 Storage location

Personal information is stored within the People’s Republic of China. Any cross-border transfer will follow applicable law and security requirements.

5.2 Retention

• Codes are valid for 10 minutes by default and allow up to five attempts. They become invalid after use or expiry, and related challenge records are deleted on the security cleanup cycle.
• Rate-limit events are retained only for the short window needed to enforce limits.
• Sessions expire after 12 hours by default. Signing out deletes the server session; expired sessions are removed on the cleanup cycle.
• Necessary logs are kept only as long as required for security, troubleshooting, and compliance. Email-provider retention follows its policies and contract.

5.3 Safeguards

• Codes, email addresses, IPs, and session tokens enter the authentication database only as server-keyed HMAC values.
• Codes use a cryptographically secure random generator. Access endpoints use HTTPS with cooldowns, rate limits, and secure cookies.
• Production keys are kept separate from code, public pages, and logs, with access limited to necessary systems and operators.
• No internet system is completely secure, but reasonable measures are used to protect your information.

06 Your rights

You have the following rights regarding personal information:

• End a session:You may use sign-out to delete the current server session and clear the cookie in your browser.
• Deletion and restriction:Where applicable law permits, you may request deletion or restriction of email-verification data.
• Withdraw consent:You may stop using verification. Withdrawal does not affect processing already completed on the basis of consent.
• Local saves:You manage game saves in the current browser. Clearing local site storage deletes those saves.

To exercise these rights, contact us as described below. We will respond within fifteen working days of receiving the request.

07 Cookies and similar technologies

After successful email verification, we set a necessary session cookie scoped only to /white-lantern . It is Secure, HttpOnly, SameSite=Lax, expires after 12 hours by default, and determines access to game files.

• The session cookie is not exposed to other site paths and is not used for advertising or cross-site tracking.
• White Lantern Crossing uses browser local storage for progress, settings, and unlocks; this data is not uploaded with the cookie.
• Disabling the necessary cookie prevents access after verification. Clearing local storage may erase saves.

08 Protection of minors

We take minors’ privacy seriously. White Lantern Crossing contains mystery, horror, and death-related material and is primarily intended for adults.

• Users under 18 should read this policy with a guardian and consider the content notice before playing.
• Email verification confirms inbox access; it does not infer age or perform real-name identity verification.
• A guardian who believes a minor’s information was mishandled may contact the address below.

09 Third-party services

Cloud infrastructure and configured email-delivery services may be used to provide the site and codes. Providers process data only as needed for those functions and under their contractual and privacy obligations.

• Email delivery:Tencent Cloud SES or the configured SMTP provider receives the recipient address, code email content, and delivery metadata.
• Cloud hosting:Cloud infrastructure for the site and authentication service processes requests and necessary operational logs.

The email-verification page does not offer WeChat, QQ, Apple, Steam, or other third-party account login, and does not embed advertising or payment entry points.

10 Policy updates

This policy may be revised as services or laws change. Material changes will be announced prominently, such as through an in-app notice or site announcement.

Please review this page for the latest version. Continued use after an update indicates acceptance of the revised policy.

11 Contact us

For questions, comments, or privacy-rights requests, contact:

• Email: privacy@senjigen.com

After verifying a request, we will respond within the period required by law or otherwise reasonable.

12 Terms of Service

12.1 Acceptance

These terms govern use of Senjigen Studio products and services. Read them before use. Selecting “Agree” or using the service means you have read and accepted them.

12.2 Email verification and access

• White Lantern Crossing uses a one-time email code and requires no password. You must be authorized to use the address and protect access to its inbox.
• Codes are for personal use and must not be requested in bulk, sold, published, or used to bypass access controls.
• An expired disposable inbox, rejected mail, or lost inbox access may prevent re-verification. Local saves do not automatically move to another address or device.

12.3 User conduct

You must not:

• Violate applicable law or public order
• Use cheats, unauthorized scripts, or similar tools
• Exploit defects for improper gain
• Publish unlawful, infringing, obscene, or false material
• Harass others or disrupt the game environment
• Access or alter game data without authorization
• Otherwise harm the lawful rights of Senjigen Studio or others

12.4 Saves and content access

• Saves currently remain in the local browser. Changing device or browser, or clearing site data, may make them unrecoverable.
• Verification grants time-limited personal access only and transfers no intellectual-property rights in game content, assets, or software.

12.5 Changes and suspension

• Services may be adjusted, updated, or discontinued as operations require.
• Service may be unavailable due to force majeure, policy changes, or technical upgrades, subject to applicable law.
• Where service is discontinued, reasonable notice and legally required handling will be provided.

12.6 Disclaimer

To the maximum extent permitted by law, we are not liable for:

• Interruptions or data loss caused by force majeure
• Access or data loss caused by the user
• Service failure caused by a third party
• Indirect, incidental, or punitive loss

12.7 Changes to these terms

These terms may be revised. The new version will be published here; continued use indicates acceptance.