Privacy policy

Last updated: 24 September 2026

What we collect

Google sign-in. We request only the "openid" scope. We receive a stable account identifier from Google and store only a keyed hash (HMAC) of it. We never receive your email, name or profile photo.

Guests. Playing as a guest needs no sign-in and no personal details.

Age band. You self-declare an age band, 13 to 17 or 18 and over. If you are under 13, you cannot play and no account is created.

Game data. Depending on how you play, we store:

• a random handle, which you can change
• your avatar look
• your status line
• your premises, items and coins ledger
• adopted agents and their names and settings
• short notes an agent keeps about you from cloud AI chats, see "AI agents" below
• friends and blocks
• guestbook entries you write
• visit counts
• your inbox: who visited your places while you were out, signed your guestbook, sent you a friend request or knocked when nobody answered, and when. Kept for 30 days, at most 200 entries
• daily task progress
• reports you file, which store the reported text snippet so moderators can act
• purchase records: the Stripe Checkout session id, product, amount and time. Card details go straight to Stripe; we never see or store them

Chat. Room chat is relayed live to people in the room and is not stored, except when someone reports it. In that case, the reported snippet is stored for moderation.

AI agents. Agents in rooms answer chat with scripted lines or, where your device supports it, with a small AI model that runs on your own device. What you type to that model stays on your device, but its model files download from Hugging Face, which sees your IP address as with any download.

On the Plus and Pro plans, players aged 18 and over can switch on cloud AI replies (it is off until they do). When they chat with an agent, we send an AI provider what the agent needs to answer:

• the line you typed, after our chat filter, and your earlier chats with agents in that room
• your handle and the handles of people in the room
• the room's name and the items in it

Z.ai (Zhipu AI) writes the reply. If Z.ai does not answer, Alibaba Cloud writes it instead. Nothing from players under 18 is ever sent to an AI provider. We do not log what you type to an agent or what the model answers; we keep only token counts and cost per reply. An agent may keep up to 5 short notes about you (80 characters each, such as "likes the red lamp") so it remembers you next time. We delete them after 30 days, when the agent is removed, or when you delete your account.

IP addresses. We use your IP address in memory only, as a keyed hash, to apply rate limits. We do not store it.

Hosting. Our hosting provider, Cloudflare, processes connection data to deliver the service.

Cookies. We use:

• one essential session cookie, lasting 30 days and renewed each time you use it
• a temporary sign-in cookie, lasting 10 minutes, only during Google sign-in

We do not use advertising or analytics cookies, and there are no advertising trackers. We count page visits with Cloudflare Web Analytics, which Cloudflare says uses no cookies or device storage and does not fingerprint visitors by IP address or browser.

Device storage. Settings such as sound, motion and your referral code are kept in your browser's localStorage or sessionStorage, on your device.

How we use it, and who processes it

We use your data to run the game, prevent abuse, handle payments and moderate the community. We do not sell your data, and we do not use it for ad targeting.

Sponsored items. Some limited items may be sponsored by brands. In-game agents may mention a live sponsored drop, marked "Ad". Players under 18 never see these ad lines or sponsored drops. Sponsors receive only aggregate counts, for example how many people claimed or viewed an item, never personal data.

We use these processors:

• Cloudflare, for hosting, database and storage
• Google, for sign-in only
• Stripe, for payments
• Z.ai (Zhipu AI), for cloud AI agent replies on the Plus and Pro plans
• Alibaba Cloud, as the fallback for the same cloud AI replies

Your data may be processed outside Singapore by these providers.

Retention

• Guest accounts are deleted after 30 days without activity.
• Sessions expire after 30 days of inactivity.
• You can delete your account any time in Settings. This removes your profile, premises, items, agents, friends and guestbook entries immediately.
• Payment records are kept for 5 years for accounting and tax, as required in Singapore, linked to a deleted-account marker rather than your profile.

Your rights

• Download your data any time: Settings > Download my data.
• Correct your data in the game.
• Delete your account in Settings.
• Withdraw consent by deleting your account.
• Email us for anything else; we respond within 30 days.

Young players

• Players aged 13 to 17 can only use friends-only or invite-only rooms.
• Their chat is filtered.
• They cannot make purchases.
• Their rooms cannot be shared as public links, only as images.

Security

• Session tokens are stored hashed.
• Transport is HTTPS only.
• Writes are protected against CSRF.
• We design for least data: we collect only what the game needs to run.