Privacy Policy

Effective 2 August 2026

This policy explains how ProjectGame.Online collects and uses personal data across the browser game, account system, community integrations, advertising measurement, and future subscription billing.

Controller. LLC SmartFrames, company identification number 404803968, registered at Georgia, Tbilisi, Mtatsminda district, Pavle Ingorokva St., N17/5, Block “B”, Apartment N15, 0110. Privacy requests: tech@gameproject.online.

1. Data we process

Account and profile data

email address, account identifier, authentication status, and account timestamps;
display name and account status; and
security and session information needed to authenticate you.

Passwords are submitted to our authentication provider and are not stored in readable form by ProjectGame.Online.

Gameplay and service data

player identifier, display name, position, appearance, resources, progress, achievements, and interactions;
connection events, referral and acquisition attribution, feature use, quest progress, and aggregate activity counters; and
technical logs, errors, diagnostics, IP-derived network information, browser or device information, and security events.

Community integration data

Our Reddit integration processes app version, community installation identifier and name, queued post text, public post identifiers and links, publication timestamps, scores, comment counts, and delivery errors. It does not request private messages, private browsing history, or comment contents.

Advertising measurement

Only after you choose “Allow,” the site may send advertising measurement events such as a page visit or completed registration to Reddit. Your choice is stored in your browser under projectgame-ad-measurement-consent. You can withdraw consent by clearing site storage or contacting us.

Billing data

If paid plans become available, Paddle will process checkout and payment details as merchant of record. We expect to receive transaction, subscription, product, price, payment status, customer, country, and tax information needed to provide access and keep financial records. We do not receive full payment card numbers.

2. Why we use data

to create accounts, authenticate users, and provide persistent gameplay;
to operate the authoritative game server and synchronize online play;
to prevent abuse, protect accounts, diagnose failures, and maintain availability;
to understand engagement and allow the autonomous studio to test and improve the game;
to publish and measure public project updates;
to administer future subscriptions, entitlements, cancellations, refunds, accounting, and tax obligations; and
to comply with law and enforce our Terms.

3. Legal bases

Depending on the activity and your location, processing is based on performance of our contract with you, steps requested before entering a contract, our legitimate interests in operating and securing the service, your consent for optional advertising measurement, and compliance with legal obligations. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

4. Autonomous development

The autonomous studio receives bounded operational observations and aggregate or pseudonymous gameplay evidence to propose and implement game changes. Authentication credentials and financial credentials are kept out of the coding-agent environment. The studio may make automated decisions about game design, content, resource allocation, and pricing; we do not use it to make decisions producing legal or similarly significant effects about an individual player.

5. Service providers and disclosures

We do not sell personal data. We may disclose limited data to:

Supabase for authentication, account profiles, and database services;
Hetzner for application hosting, networking, and server storage;
OpenAI for bounded autonomous development and generated content, without account or financial credentials;
Reddit for Devvit community publishing and, with consent, advertising measurement;
Paddle, if paid plans launch, for checkout, merchant-of-record billing, tax, fraud prevention, subscription management, and buyer support;
professional advisers and authorities when reasonably necessary to comply with law, protect rights, investigate fraud, or respond to a lawful request; and
a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice requirements.

6. International processing

Providers may process data outside Georgia or your country. Where required, we rely on applicable adequacy findings, contractual safeguards, consent, or another lawful transfer mechanism.

7. Retention

Account and gameplay data are generally kept while your account is active and for a reasonable period afterward to provide continuity, resolve disputes, and prevent abuse. Operational logs are kept only as long as reasonably needed for security and diagnosis. Community queue records are kept while operationally useful. Billing and transaction records are kept for the period required by tax, accounting, anti-fraud, and other laws. Deletion requests are honored unless retention is required or permitted by law.

8. Your rights

Subject to applicable law, you may request access to your data and information about its processing, correction, deletion, restriction, blocking, portability, or objection. You may withdraw consent and may ask us to review a decision. Send requests to tech@gameproject.online. We may need to verify your identity before acting.

You may also submit a complaint to the competent data protection authority. In Georgia, data protection supervision is exercised by the State Audit Office under the current Law of Georgia on Personal Data Protection.

9. Security

We use access controls, encrypted transport, credential separation, and operational monitoring intended to protect data. No online system can be guaranteed completely secure. Notify us promptly if you believe your account or data has been compromised.

10. Age restriction

ProjectGame.Online is not directed to anyone under 18, and we do not knowingly collect personal data from children. Contact us if you believe a child has provided data.

11. Changes

We may update this policy as the service and its providers change. The revised date will appear above, and we will provide additional notice where required by law.