Last updated: November 4, 2026. Museum Gacha is an independent project operated under the project name Museum Gacha. Contact: [email protected].
We use a Secure, HttpOnly, SameSite=Strict anonymous session cookie to connect you to your server-side save. Sessions expire after 30 days. Your save includes pack balances, owned cards, Favorites, rewards, guarantee progress and opening receipts. A session expiring does not automatically delete your save. Local browser storage may hold display preferences, pending request identifiers and a returning-visit marker; it is not the authoritative game ledger.
Optional recovery credentials are stored as hashes and expire after one year. Keep your recovery credential private; we cannot retrieve its plaintext. Diagnostic and rate-limit records help operate and protect the service. Feedback and content reports are stored in a protected operator queue, including any contact details you choose to submit. Do not include passwords, API keys, cookies or recovery credentials in feedback.
The application runs on a Tencent Cloud server in Japan. Cloudflare provides DNS/CDN and R2 object storage; storage and processing locations depend on its services. Public museum display images are separate from private encrypted save backups. No third-party advertising is enabled. Optional Google Analytics 4, when enabled, loads only after explicit analytics consent and may set its own analytics cookies and browser identifiers. It measures sanitized page views and confirmed game events. We do not pass our player IDs, session cookies, email addresses, recovery credentials or receipts to Google. You may reject analytics without affecting gameplay or change your choice using Analytics preferences. Consent expires after 180 days. Advertising personalization and Google Signals are disabled. Google processes technical request information according to its policies; this statement does not promise anonymous or legally reviewed processing. Cloudflare Web Analytics provides cookieless website visit and performance measurements; these are separate from game-player counts. Private server-side daily game activity sets and aggregated transaction counts support operations and calendar-day retention analysis. We do not add player identifiers, wallets, receipts, cookies or recovery credentials to analytics payloads. The older local event adapter continues to use its existing consent setting.
Player saves currently have no automatic deletion schedule. Local encrypted backups retain the latest 48 copies. Private offsite backup retention keeps the latest 48 hours of hourly backups, one per UTC day through 30 days, and up to one per week through eight weeks, always protecting the latest verified recoverable backup and excluding unknown objects. Backup retention may change as the beta develops. For access or deletion requests, contact [email protected]. Anonymous ownership may require an additional private verification process before changes can be made; do not send your recovery credential by email. This policy describes the implemented service and does not claim an external legal review.