PRIVACY & COOKIE POLICY
Last updated: June 13, 2025

This Privacy & Cookie Policy (“Policy”) explains how StoryverseNYC Inc. (“Company,” “we,” “us,” or “our”) collects, uses, and protects information when you access Fairylandshow.com, our companion mobile or game apps, and any in-venue hardware or live-performance services (collectively, “Fairyland”).

--------------------------------------------------------------------
1. WHO WE ARE
--------------------------------------------------------------------
Data Controller / Business: StoryverseNYC Inc.
Address: 484 W 43rd Street, New York, NY 10036 USA
Privacy Contact: privacy@fairylandshow.com

--------------------------------------------------------------------
2. INFORMATION WE COLLECT
--------------------------------------------------------------------
a. Identity & Account Data
• Name, email address, username, age bracket, and authentication tokens.

b. Device & Technical Data
• IP address, device type, operating system, browser, crash logs, cookies,
advertising IDs, and approximate geolocation (if AR features are enabled).

c. Gameplay & Telemetry Data
• Story choices, achievements, session times, in-world purchases, location
pings during live AR events, and interactions with other players.

d. Audio / Video Streams
• Voice chat, uploaded media, live-venue recordings, and vision-tracking
footage where applicable.

e. User-Generated Content (“UGC”)
• Fan art, screenshots, forum posts, cosplay photos, feedback, and surveys.

f. Payment & Transaction Data
• Transaction IDs, virtual-item purchases, and limited billing details
provided by our payment processors (we never store full card numbers).

--------------------------------------------------------------------
3. HOW WE USE YOUR INFORMATION
--------------------------------------------------------------------
• Perform our contract: authenticate you, save progress, deliver digital goods.
• Legitimate interests: fraud prevention, anti-cheat, service improvement.
• Consent: push notifications, precise geolocation, marketing emails, any
non-essential cookies.
• Legal obligations: tax, accounting, COPPA parental verification.
• Large Language Models (LLMs): we may provide gameplay telemetry to an LLM to
generate narrative summaries or insights that personalize your experience and
guide live performers. By using Fairyland, you consent to this processing. We
do not use LLMs to generate content that could be considered personal data under
GDPR or similar laws, as we do not provide any identifiable information to the LLMs.
• In-venue safety: we may use audio/video streams to monitor for safety or
compliance issues during live events. This data is stored for up to 30 days
unless flagged for further review. We do not use this data for profiling or
targeted advertising.

--------------------------------------------------------------------
4. COOKIES & SIMILAR TECHNOLOGIES
--------------------------------------------------------------------
4.1 Types We Use
• Essential - sign-in sessions, queue-management cookies (expire at log-out).
• Functional - volume, subtitle, or color-theme preferences (1 year).
• Performance - aggregate analytics such as FPS or page-load metrics
(14 months).
• Marketing - trailer retargeting pixels; placed only with explicit consent
(90 days).

4.2 Consent Management
Visitors from the European Economic Area or the U.K. see a cookie banner
offering “Accept all,” “Reject all,” or granular controls. We store your
choice for one year. U.S. users may signal “Do Not Sell My Data” via the
banner.

4.3 Controlling Cookies
You can block or delete cookies in your browser or through our banner's
“Manage Preferences” link. Blocking certain cookies may impair gameplay
sync, log-ins, or ticket purchases.

--------------------------------------------------------------------
5. DATA SHARING
--------------------------------------------------------------------
We do NOT sell your personal information. We share it only with:
• Service providers (cloud hosting, analytics, moderation, payments) under
strict confidentiality agreements.
• LLM or AI providers that process telemetry solely to generate in-game
summaries.
• Other players, but only when you post UGC or appear in live-streamed events.
• Authorities or legal counsel if required to comply with law, enforce our
Terms, or protect life, safety, or property.
• Successors in a merger, acquisition, or bankruptcy, subject to notice.

--------------------------------------------------------------------
6. DATA RETENTION
--------------------------------------------------------------------
• Gameplay logs: kept only as long as needed for the active narrative arc, then
anonymized or deleted. We do not retain detailed telemetry longer than 6 months.
• User accounts: retained as long as you maintain an account; deleted upon
request or inactivity for 2 years.
• UGC: retained indefinitely unless you request deletion.
• Payment records: retained seven (7) years for tax and audit.
• Cookie identifiers: expire as listed in Section 4.
• Voice/video: stored up to 30 days unless flagged for safety review.

--------------------------------------------------------------------
7. SECURITY MEASURES
--------------------------------------------------------------------
• TLS 1.3 encryption in transit; AES-256 at rest.
• Secrets stored in a dedicated key vault with role-based access controls.
• Regular penetration tests and security-patch management.
• Data-minimization principle: collect the least data necessary and delete it
when no longer required.

--------------------------------------------------------------------
8. YOUR RIGHTS
--------------------------------------------------------------------
Depending on your jurisdiction, you may have the right to:
• Access or export your personal data.
• Correct inaccurate data.
• Delete or anonymize data (“Right to Erasure”).
• Opt-out of “sale” or targeted advertising (CCPA/CPRA).
• Object to or restrict certain processing.
• Withdraw consent at any time without affecting prior lawful processing.
Submit requests via privacy@fairylandshow.com. We respond within 30 days.

--------------------------------------------------------------------
9. CHILDREN
--------------------------------------------------------------------
We do not knowingly collect data from children under 13 without verifiable
parental consent as required by COPPA. Parents may review or delete their
child's information at any time.

--------------------------------------------------------------------
10. AUTOMATED DECISIONS & PROFILING
--------------------------------------------------------------------
LLMs and other algorithms may tailor narrative branches or content
recommendations. No automated decision produces legal or similarly significant
effects without human oversight.

--------------------------------------------------------------------
11. COPYRIGHT & INTELLECTUAL PROPERTY
--------------------------------------------------------------------
All content in Fairyland is protected by copyright and other IP laws. You may
not copy, reproduce, or exploit any part of Fairyland without our express
written permission.

--------------------------------------------------------------------
12. CHANGES TO THIS POLICY
--------------------------------------------------------------------
We may update this Policy periodically. Material changes will be announced via
email or in-product notice at least 10 days before they take effect. Continued
use after the “Last updated” date constitutes acceptance.

--------------------------------------------------------------------
13. CONTACT
--------------------------------------------------------------------
StoryverseNYC Inc., Attn: Privacy
484 W 43rd Street, New York, NY 10002 USA
Email: privacy@fairylandshow.com

---

Thank you for trusting us with your experience and data.