Shuverse is a library simulator published by Burrito Rumbero ("we", "us"). This policy covers the Shuverse game, its account and cloud-save services, and this website.
You can play without an account. An optional account lets you recover successfully synced progress after reinstalling or on another device. Online NPC conversations can contact our service even during guest play.
Information we collect and why
- Account information. If you create an account, we collect your email address, chosen username, an assigned account identifier, and authentication information. Amazon Web Services (AWS) Cognito handles your password and verification. We use these details to sign you in, verify your email, recover access, and keep your cloud save associated with the correct account. The game does not save your password on your device.
- Saved progress and player-created content. Your device stores your library name, librarian appearance, progress, choices, inventory, achievements, events, and related game state. When you sign in and use cloud saving, this information is sent to AWS and stored under your account so it can be restored. You can use the default library name instead of supplying a custom one.
- Online NPC interactions. Certain conversations send an NPC identifier, a scripted line, and context containing your library name to our dialogue service. These requests provide alternate, prewritten dialogue. They run automatically during the relevant interactions when a connection is available, including in guest play. The dialogue service processes the request temporarily; it does not store or log the submitted dialogue content or library name. No generative AI service receives these requests. Conversation progress may separately be retained in your save.
- Network and security information. Online services receive network information, including your IP address, to serve requests. AWS authentication and audit records can include IP addresses, account identifiers, request times, operation names, and results. We use operational and security records to maintain the service, protect accounts, and investigate failures or abuse.
- Support requests. If you email us, we receive your email address, message, and any details you choose to include. We use them to respond and resolve your request. Please do not send passwords or verification codes.
On your device and in the cloud
The game uses device storage for progress and settings. Native apps use protected device storage for persistent sign-in credentials; the web game uses browser storage. These are used for gameplay and sign-in, not advertising tracking. This privacy page does not run scripts, set cookies, or load advertising or analytics tools.
Cloud saving is available through an optional account. Signing out stops that account's cloud sync on the device; its local library remains. Without a successful cloud sync, progress may be lost if you uninstall the app, clear its storage, or lose your device. Uninstalling does not delete your account or cloud save.
Guest play does not upload your full save to an account. It can still make the online NPC requests described above. The current game has no in-app switch to disable those requests; if the service cannot be reached, the game uses local dialogue.
Service providers and disclosures
We use Amazon Web Services for hosting, content delivery, authentication, verification and recovery emails, cloud saves, and service security. AWS processes information on our behalf to operate these features. Account and save resources are hosted in the United States (Northern Virginia); content delivery and supporting service processing may involve other countries. Your information may therefore be processed outside your country.
Support correspondence is handled through our Gmail inbox, provided by Google. App stores separately handle downloads and their own account information under their privacy policies.
We do not sell your personal information, share it with advertising partners, or use advertising or behavioral analytics SDKs in the current game. We may disclose information when required by law or when necessary to protect users, investigate abuse, or respond to a valid legal request.
The current version does not offer in-app purchases. If purchases or other new data practices are introduced, we will update this policy and the relevant store disclosures before those practices begin.
Security and retention
Online communication uses HTTPS encryption. Cloud saves use encrypted storage and authenticated access tied to the signed-in account. Access to operational resources is restricted. No method of storage or transmission is completely secure.
- Accounts and live cloud saves are retained while your account exists, until you delete it. A cloud save can also be replaced when you choose a different library to sync.
- Local copies remain on a device until removed or replaced. Copies on other devices are not remotely erased immediately when an account is deleted; clear the app's data on those devices if you want to remove them.
- Deleted cloud saves may remain in recovery backups for up to seven days. These copies are not available through normal gameplay.
- A deletion security record containing your account identifier and an expiry is kept for at least 24 hours, then removed by asynchronous database cleanup. It contains no library content and prevents an old sign-in token from recreating a deleted save.
- Operational logs for the game backend have a seven-day retention setting. AWS authentication and audit history is separate: standard CloudTrail event history retains events for 90 days. Security records can remain after account deletion; relevant records may need to be retained longer for an active security investigation or legal obligation.
- Support correspondence is retained as needed to resolve and follow up on your request, or meet an applicable legal obligation. Contact us to request deletion of correspondence that is no longer needed.
Delete your account and saved library
You can start deletion inside the game or through the web without reinstalling the app:
- Open SELECT → Library account in Shuverse, or use the account-deletion link below.
- Sign in to the account you want to delete. If needed, choose Forgot password? to recover access.
- Choose Delete account and library…, enter your password, type DELETE, and select Permanently delete.
Open Shuverse account deletion
A completed deletion removes the account, live cloud library, and its associated save on the device performing deletion. It cannot be undone. If a connection or cleanup fails, the game shows a retry option; finish that step to complete deletion. The limited backup and security retention above still applies.
Contact burritorumbero@gmail.com if you cannot access the deletion process. We may ask you to verify account ownership before acting on a request.
Your choices and privacy requests
You can play without registering, choose whether to provide a custom library name, sign out of cloud saving, and delete your account. Depending on where you live, you may also have rights to access, correct, obtain a copy of, or request deletion of your personal information, and to object to or restrict certain processing. Contact us using the email below to make a request. We may verify your identity, and will handle requests subject to applicable law. You can also contact your local privacy authority.
Audience
Shuverse is intended for adults aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.
Changes to this policy
We will publish updates on this page and change the date above. If a change requires additional notice or consent, we will provide it as required before applying the new practice.
Contact Burrito Rumbero
For Shuverse privacy questions, support, or data requests, email burritorumbero@gmail.com.