Privacy Policy

1. Information We Collect

1.1 Registered Users

When you sign in with Google, we receive your email address, display name, and profile identifier via Supabase Auth. Game configurations, conversation content, and game state you create are stored for syncing and restoring games across devices.

1.2 Guest Users (Anonymous)

You can join multiplayer games without creating an account. When you do, we generate a random guest identifier and store it in your browser's local storage along with your chosen nickname. No email, real name, or device fingerprint is collected from guest users.

1.3 Payment Data

If you subscribe or purchase credits, payment is processed entirely by Stripe. We receive only a transaction confirmation and subscription status — we never see or store your card number, CVV, or billing address.

1.4 Usage Analytics

We collect anonymous, aggregated usage data (page views, feature interactions) via Vercel Analytics. This data contains no personal identifiers and cannot be traced back to individual users.

2. Local Storage & Cookies

We use your browser's local storage (not cookies) for functional purposes only:

• Authentication session tokens
• Guest identity (random ID + nickname) per game room
• User preferences (AI model, voice language)

We use Google Analytics 4 (GA4) to collect anonymous usage statistics such as page views, session duration, and general device/browser information. GA4 may set cookies on your device for this purpose. For visitors in the European Economic Area (EEA) and the United Kingdom, we display a cookie consent banner and only load GA4 after you explicitly grant consent. Visitors outside the EEA/UK are covered by GA4's standard data processing terms. You may decline analytics cookies at any time; declining does not affect your ability to use the service. We do not use advertising cookies or third-party tracking pixels.

3. How We Use Your Information

• Provide, maintain, and improve the service
• Sync your account and game data across devices
• Process payments and manage subscriptions
• Generate AI game content (text, voice, images) on your behalf
• Analyze aggregated usage patterns to improve the product

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

4. AI-Generated Content

Game narratives, character dialogue, voice audio, and images are generated by AI models (OpenAI, Inworld). Your game inputs (rules, messages) are sent to these providers for processing and are subject to their respective data policies. AI-generated outputs may be inaccurate, fictional, or unexpected — they do not represent the views of TextGame.ai.

5. Multiplayer & Data Visibility

In multiplayer game rooms, messages you send are visible to all participants in that room, including the game host, other players, and anonymous guests who join via invite link. Your chosen display name (or nickname for guests) is shown to other players. Please do not share sensitive personal information in game chat.

6. Third-Party Services

We rely on the following third-party services, each governed by their own privacy policy:

• Supabase — authentication, database, and real-time communication
• OpenAI — AI text generation and image creation
• Inworld — AI voice synthesis (text-to-speech)
• Stripe — payment processing and subscription management
• Vercel — hosting, edge delivery, and anonymous usage analytics
• Google — OAuth sign-in provider
• Meta (Facebook) — OAuth sign-in provider

7. Data Storage & International Transfers

Your data is processed and stored on servers located in the United States through our service providers (Supabase, Vercel, OpenAI). If you are located outside the United States, including in the European Economic Area (EEA), your data will be transferred to and processed in the United States. We rely on standard contractual clauses and our providers' compliance frameworks to ensure adequate protection of your data during such transfers.

8. Data Retention

We retain your account data and game content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g. payment records). Guest data (random IDs) stored in our database is retained for the lifetime of the game session and may be purged when the game is deleted by its owner.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication via OAuth 2.0, row-level security policies on our database, and server-side access controls. However, no system is 100% secure. If you discover a vulnerability, please contact us immediately.

10. Your Rights

10.1 All Users

You have the right to access, correct, or delete your personal information at any time. You can delete your account from the Settings page, or contact us to request data export or deletion.

10.2 European Economic Area (GDPR)

If you are in the EEA, you have additional rights under the General Data Protection Regulation, including:

• Right to access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to lodge a complaint — file a complaint with your local data protection authority

Our legal basis for processing your data is: (a) performance of a contract (providing the service you signed up for), (b) legitimate interest (improving the service, preventing abuse), and (c) your consent (where applicable).

10.3 California (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information
• Non-discrimination for exercising your privacy rights

We do not sell your personal information. We do not share personal information with third parties for their own marketing purposes. To exercise any of these rights, contact us at the email below.

11. Children's Privacy

TextGame.ai is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

12. Policy Updates

We may update this privacy policy from time to time. Material changes will be noted by updating the “Last updated” date at the top. Continued use of the service after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Facebook Data Deletion

If you have used Facebook to sign in to TextGame.ai and wish to have your data deleted, you can do so in either of the following ways:

1. Delete via Settings — Sign in to TextGame.ai and go to Settings → Account → Delete account. This will permanently delete all data associated with your account within 30 days.
2. Request by email — Send a deletion request to info@cvnio.com with the subject line "Facebook Data Deletion Request". Include the email address or Facebook name associated with your account. We will process the request within 30 days and send a confirmation.

Upon deletion we remove your account profile, game history, and all associated personal data from our systems. Anonymous analytics data (which contains no personal identifiers) may be retained.

14. Contact Us

For privacy-related questions, data access/deletion requests, or concerns, contact us at info@cvnio.com.