Privacy Policy

1. Introduction

Limaze, LLC ("Limaze," "we," "our," or "us") operates the Limaze Games platform — a marketplace of browser-playable WebGL games built by an AI builder, including the website at limaze.com, the games subdomain at games.limaze.com, the creator dashboard at studio.limaze.com, and all related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service either as a creator (someone building games) or as a player (someone playing a published game).

2. Information We Collect

2.1 Information You Provide

• Account Information: email address, optional display name and avatar, and authentication identifiers when you sign in. We support magic-link email login, Google, Telegram, and Apple Sign In; the data each provider shares with us is described in section 5.
• Creator Content: the messages you send to the AI builder, the files the builder writes into your in-browser project sandbox, and the resulting game build (HTML, JavaScript, and assets) when you publish. Anything you publish at games.limaze.com/games/<your-slug> is public by design.
• Player Content: game-supplied scores you submit to a leaderboard, optional save state your game asks to persist, and the metadata the game passes alongside (e.g., level reached, time taken).
• Communications: messages you send to our support team or feedback channels.

2.2 Information Collected Automatically

• Play Sessions: when you open a published game, we record a play session row (anonymous if you are not logged in) with the game id, build id, start time, and end time. This drives play counts and lets creators see how often their games are played.
• Usage Data: which dashboard features creators use, how many builder turns they take, and aggregate performance metrics.
• Device Information: operating system, browser, and screen size — used for rendering and bug triage.
• Log Data: IP address, request paths, status codes, and timestamps. Kept short-term for abuse mitigation.
• Cookies & Similar Technologies: we use one essential cookie (limaze_auth, scoped to .limaze.com) to keep you signed in across our subdomains. We do not use advertising cookies. We may use a single first-party analytics cookie once we wire up product analytics; we will update this policy before that lands.

3. How We Use Your Information

• Provide, operate, and maintain the Service — including running the AI builder, hosting your published games, and serving leaderboards.
• Attribute creators on their published games and attribute logged-in players on leaderboard entries.
• Improve, personalize, and expand the Service.
• Communicate with you for support, magic-link sign-in, and (with your consent) product updates.
• Detect and prevent fraud, abuse, score-spoofing, or security incidents.
• Comply with legal obligations.

4. Creator Content & Game Builds

The chat history, sandbox files, and published builds you create are stored under your account and shown only to you in the dashboard. When you click Publish, your build becomes public at games.limaze.com/games/<your-slug> and can be played by anyone who has the URL. You can unpublish at any time. We do not use the code of your unpublished sandboxes to train AI models.

5. Data Sharing & Third Parties

We do not sell your personal information. We share data with:

• Service Providers:hosting (Hetzner), object storage (Cloudflare R2), DNS & CDN (Cloudflare), email delivery (SMTP), and — when paid plans launch — payment processing (Stripe). These providers process data on our behalf under their own data-processing agreements.
• AI Model Provider: the AI builder routes your chat messages and the current sandbox file map to Anthropic so the model can write and edit your game's code. Anthropic processes the data under its own data-processing terms and (per their published commitments) does not train on inputs from API customers.
• Sign-In Providers: if you choose to sign in via Google, Telegram, or Apple, those providers share basic profile fields with us (id, email, name, avatar) under their own terms.
• Public Visibility:a creator's display name appears on the game pages they publish. A player's display name appears on public leaderboards when they submit a score while signed in. Anonymous play sessions are surfaced as "anon" on leaderboards.
• Legal Requirements: if required by law, regulation, or legal process.

6. Data Retention

We retain your account data for as long as your account is active. Builder sessions, sandbox files, game builds, play sessions, and score rows are retained until you delete them or close your account. Upon account deletion we remove your personal data within 30 days, except where retention is required by law. Anonymized usage analytics may be retained indefinitely. Published games can be unpublished at any time from the dashboard; the build files become inaccessible immediately.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3) and access controls. Authentication uses signed JWTs in a Secure; HttpOnly; SameSite=Lax cookie scoped to .limaze.com. Game builds are served from an isolated path (/play-cdn/<buildId>) with restrictive headers, and the builder sandbox is read-only to the game iframe. However, no method of electronic storage or transmission is 100% secure and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data — game projects can be exported from the dashboard as a JSON file at any time.
• Withdraw consent for optional data processing.
• Object to or restrict certain processing activities.
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at [email protected].

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly. Creators are responsible for ensuring the games they publish are age-appropriate for their intended audience.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses where applicable, to protect your data in accordance with this policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, please contact us: