Privacy policy

What other visitors can see

Snowman builders may add a nickname to their nameplate. The plaza shows both builders’ names when they build together. The server clears the names from memory when the snowman melts.

Private is checked by default. Private cards hang on the tree, and only you and anyone with the link can read the wish and signature. If you uncheck it before hanging your wish, all plaza visitors can read the card on the tree and in Public wishes. A forwarded link also opens the card. Message previews show only the envelope. An empty signature appears as “Secret Santa.”

Nearby visitors can see your avatar, the items you carry, your movements in the plaza, and your emotes. Only the operator can see feedback and previously submitted card reports.

What the operator records and for how long

• Wish cards. We store the text, signature, posting time, card number and request number with your guest ID. Each private card gets a random sharing link. When you send it through a messaging service, that service receives the link too. If the operator hides a card, its sharing link stops opening it. Its original text stays on the server. You can request deletion using the contact details below.
• Game progress. To restore your wardrobe and items on return visits and track your star balance, we store your guest ID, avatar, equipped items, rewards, and the items you bought in the game, including prices, purchase dates, and request numbers. Progress records do not expire automatically.
• Feedback and past reports. We store your guest ID with the text, submission time, and request number of your feedback so we can review it and follow up. Previously submitted card reports contain the card number and the sender’s guest ID. These records have no automatic expiration date.
• Connections and movement. The game server uses IP addresses or network ranges to limit connections and prevent excessive requests. Rate-limit records are cleared from memory about two to three minutes after the last activity. Your position, direction, seat, and emotes are used to show nearby avatars while you are connected. We do not store a movement history. The official website’s access logs may include IP addresses, access times, requested URLs, and browser information. We keep these logs for up to three months.

The operator deletes personal information from server storage when it is no longer needed or when fulfilling a verified deletion request. If the service closes, we also delete personal information that no longer serves its original purpose.

Cookies and temporary storage

The plaza issues a wish_guest cookie containing a random guest ID so we can recognize visitors using the same browser. It expires one year after it is issued. You can block or delete it in your browser’s site data settings. Blocking it may prevent you from entering the plaza; deleting it means you will start as a new guest on your next visit. Deleting the cookie does not delete wishes you have posted or records already stored on the server.

When you submit a wish, the tab temporarily stores its text, sender’s name, request number, and the version of the guidelines you accepted so it can resend the wish if the connection drops. The temporary copy is cleared when the server confirms the post or rejects it permanently.

Who processes the information

BREYES uses The Constant Company, LLC (Vultr, Seoul, South Korea) to host the official service’s servers and storage. We show public wishes and avatars to other visitors as described above. We share other personal information with third parties only when required by law.

The official plaza uses encrypted connections, and the operator must authenticate to access administrative records. If you contact us by email, Cloudflare forwards your address and message, and Google’s Gmail stores them. This may involve transfers to the United States or other countries. We keep correspondence for one year after answering your inquiry. You can also contact us through Feedback in the plaza without sending an email. See the BREYES privacy policy for details about service providers and international transfers.

Access, corrections, deletion, and questions

In the browser where you wrote the wish, open My cards, select the card and choose “Delete my wish.” This erases its text and signature from the stored card and disables its sharing link. We keep the card number and request record so resending an earlier request cannot recreate it.

You or your legal representative may request access to, correction of, deletion of, or a halt to the processing of your personal information, or withdraw consent. Use Feedback in the browser where you posted your wish, or email the BREYES operator responsible for privacy. The name on the card and its approximate posting time can help us find it. Please do not send your cookie value.

contact@breyes.net

The operator will verify the requester and the records concerned before taking action. If we learn that personal information about a child under 14 has been posted or stored, we will delete it without delay.

If this policy changes, we will post the changes and their effective date on this page.