Privacy Policy

We store what's needed to run a persistent gaming platform: your account, your content, your worlds and what happens in them. We don't sell data, we don't run advertising trackers, and our product analytics don't store IP addresses or browser fingerprints. Payment details live with PayPal, not us.

• Account: email address, handle, display name, a hash of your password (never the password), profile text, and session records (a hashed session token, creation/expiry times and a truncated browser user-agent so you can see and revoke sessions).
• Content: worlds and their versions, agents you create, posts, replies, reactions, follows, invitations, parties, and achievements.
• World activity: an event log of what happens in worlds (movements, speech, quests, trades), conversations with agents, and agent memories — which may include things you said to an agent. Treat conversations with agents as stored, persistent and, in public worlds, potentially visible to other players via world events.
• Membership: your membership tier and status, PayPal subscription and plan identifiers, payment records (amount, currency, status, PayPal transaction id) and webhook events from PayPal. We never receive your card or bank details.
• Product analytics: event names (for example "world_created", "share", "checkout_completed"), your user id when signed in, an anonymous truncated hash for signed-out landing-page events, and a few non-sensitive properties (like a tier name). No IP addresses, no full user agents, no free-text content.
• Operational: rate-limit counters keyed by a hash of your IP or account for abuse protection (short-lived), and server error logs with reference ids.

To run the platform you asked for (contract): accounts, worlds, agents, multiplayer, billing. To keep it safe (legitimate interest): rate limiting, abuse detection, security logs. To improve the product (legitimate interest): aggregate analytics. To send you service messages (contract), such as billing notices. We don't use your data for advertising.

Agent cognition and world composition may be performed by a third-party model provider we configure (for example Anthropic, or an OpenAI-compatible provider). What's sent is a curated context: the agent's identity, a handful of relevant memories, the current scene, and your in-world message. Providers process this to return a response and, under our agreements, do not use it to train models. When no provider is configured or available, agents run on GamerNew's own instinct engine and nothing leaves our servers.

• Other players: your handle, display name, sigil, public profile, public worlds, public agents, public posts, and world events in worlds you take part in.
• PayPal: handles payment; sees your email and the subscription. PayPal's privacy policy applies to that processing.
• Infrastructure: our hosting (Vercel) and database (Turso) providers process data on our behalf under their terms.
• Model providers: as described above.
• Authorities: if legally required.

Account and content data persist while your account exists. Short-term agent memories expire within hours; episodic and event memories decay over weeks unless reinforced; core and player memories persist. Rate-limit counters are purged daily. Sessions expire after 30 days of inactivity. On account deletion we delete your account, sessions, subscriptions records' personal linkage, posts, agents and private worlds, and anonymise your authorship on public worlds that others have remixed.

You can access and update your profile in the app. You can request a copy of your data, correction, or deletion of your account by emailing privacy@gamernew.com from your account email. Depending on where you live you may have further rights (including to object or to lodge a complaint with a supervisory authority); we honour them.

We use one essential cookie: gn_session, which keeps you signed in. It is HttpOnly, SameSite=Lax and Secure in production. We set no advertising or third-party tracking cookies. Local browser storage may hold interface preferences.

GamerNew isn't directed at children under 13 (or the applicable minimum age). If you believe a child has created an account, contact us and we'll remove it.

Passwords are hashed with scrypt. Sessions are server-side and revocable. All traffic is encrypted in transit. Secrets are held in environment configuration, never in code. Payment status is verified with PayPal server-side and via signed webhooks. AI actions are validated before execution. No system is perfectly secure; if you find a vulnerability, please tell us at security@gamernew.com.

We'll announce material changes in the app or by email before they take effect. The date at the top tells you when this policy last changed.

privacy@gamernew.com