1. Scope and purposes
Luluka Archive processes information needed for content and comments, authentication, email, social features, game saves, user requests and security. You do not need to submit inputs for optional features you do not use.
2. Information processed
Account and mail: ID, selected domain, email address, password and app-password authentication data, sessions and expiry, preferences, contacts, signatures, rules, sender and recipient addresses, subjects, bodies, attachments, folders, read status, queued mail and delivery results.
Social and comments: account links, profile names, handles, bios, avatars and banners, posts, replies, quotes, images, descriptions, spoiler settings, follows, likes, reposts, bookmarks, blocks, mutes, notifications, private messages, reports, moderation records and comment names, text and timestamps.
Game and access: account or guest identifiers, saves, currency, items, investigations, progress, access and save times, community inputs and language, display and sound preferences. Servers and infrastructure providers may process IP addresses, browser details, request times and paths, errors and security records.
3. Visibility and messages
Public comments, posts, profiles, images and interactions may be visible without an account. Public social profile responses do not include login email addresses. Bookmarks, blocks, mutes and account settings are handled separately from public profiles.
Email is delivered to designated recipients and relevant mail providers; private messages are shown to conversation participants. Email and private messaging are not end-to-end encrypted services. Operational access is limited to authorized personnel as necessary for incidents, security, reports and legal requests.
4. Storage and providers
Cloudflare handles site and API delivery and security; Turso processes databases for sessions, social data, comments, visit counts, mail preferences and games. Mail bodies and folders reside on an Ubuntu mail server on Oracle Cloud, using SMTP, IMAP and POP3. When Resend handles outgoing delivery, addresses, message content, attachments and delivery data are transmitted to it.
External mail recipients and linked sites or videos also have their own privacy policies. External infrastructure may involve processing abroad. Processing countries, provider contacts, transfer grounds and detailed retention conditions require separate disclosure based on actual contracts and configuration.
5. Cookies, browser storage and automatic login
Authentication cookies and browser storage support automatic login, account state, language, display and spoiler preferences, guest game identifiers and saves, and drafts. Server login sessions normally last 30 days. Logout, revocation or expiry makes that authentication unusable.
You can delete or block cookies and site storage in your browser, but this may end login or remove preferences, drafts and access to guest saves. Clearing browser storage does not delete server accounts, mail or posts. Visit counts and enabled Cloudflare analytics and security features may also process access information.
6. Retention, deletion and protection
Account and service data are retained while necessary to provide features and handle requests. Post deletion removes bodies and images from the service, but some relationship or report records may remain. Moving mail to trash is not permanent deletion. Data subject to legal retention duties is separated and retained for the required period.
Specific log and backup retention and deletion schedules require a separate operational notice. This policy does not promise unverified periods or immediate backup deletion. Authentication uses password-verification data and encrypted mail-access sessions, with separated access permissions and secret keys.
7. Your rights and policy changes
You may request access, correction, deletion, restriction of processing or account closure. Use available editing and deletion controls, or contact the operator for unsupported requests. Identity checks may be needed; limitations due to others’ rights or legal retention duties will be explained.
Where a guardian’s consent is required for minors’ data, the relevant procedure must be explained first. Check operator notices for the operating entity, privacy contact and additional processing conditions. Policy changes and their application date will be announced on this page.