The short version
- We store your email, your public profile, the games you make and how you use credits.
- To build games we send your prompts and game code to Anthropic, and to OpenAI for cover pictures and playtests.
- One cookie keeps you signed in. Visits are counted without cookies or personal data. No ads, no tracking.
- Ask us at [email protected] to see, fix or delete your data.
What do you collect?
Your account
- Your email address, and when you confirmed it.
- Your handle, display name and avatar. These are public. If you sign in with Google or GitHub, we get your email, name and profile picture from them, and keep the tokens they give us to link your account.
- Your sign-in sessions, so you stay signed in.
What you make
- Your prompts and the studio chat for each game, including turns you've cleared from view.
- Every version of your games: their code, title, description, tags, screenshots, covers (and the prompts for them), trailers and playtest reports.
- Comments you post and reports you send, including any details you write.
Credits
- A record of every credit added or spent, and of credit purchases. If you buy credits, Lemon Squeezy handles the payment; we never see your card details.
When you play
- Each time you start a game, which game and version, and your account (or a random guest id if you're signed out). This is how we count plays.
- Scores games submit to leaderboards, shown publicly with your handle. Signed-out players appear as a guest.
- Data a game saves for you, such as progress or settings (up to 1 MB per game). Multiplayer rooms pass messages between players live and don't keep them.
Technical data
Our servers see your IP address and browser details with every request. We use the IP address for a few minutes to limit how often sign-in emails and requests can be sent, and our server logs record requests, including IP addresses, for security and fixing problems. We don't store IP addresses or browser details in our database or link them to a profile.
Visit statistics
We count visits with Plausible Analytics, run by GetSite on its own server rather than by a third party. It sets no cookies and stores no IP addresses or other personal data: it sees which pages are visited, where visitors came from, their browser, device type and country, and a few events (signing up, starting a game, buying credits, with the pack's price). Your IP address is only used to derive a daily anonymous count that can't be tied back to you.
Why do you use it?
- To run the service you asked for: your account, building and hosting your games, credits, leaderboards. (Legal basis: our contract with you.)
- To keep PlayNerva safe: screening prompts, handling reports, preventing abuse and fixing problems. (Legitimate interests.)
- To see how PlayNerva is used: anonymous visit statistics that tell us which pages and features people use. (Legitimate interests.)
- To send you emails: sign-in links and, rarely, important notices about your account or these policies. We don't send marketing email.
- To follow the law, for example tax records of purchases or answering valid legal requests. (Legal obligation.)
We don't use your games or prompts to train AI models, and we don't make automated decisions about you that have legal or similarly significant effects. Prompt screening only decides whether we build something.
Who else sees it?
Anything you publish is public: your profile, public games and their covers, trailers and descriptions, comments and leaderboard entries. Search engines can index public pages. Beyond that, we share data only with the providers that help us run PlayNerva, and only what each needs:
- Anthropic (Claude models) builds and changes games, screens prompts, edits trailers and writes playtest reports. It receives your prompts, the studio chat, your game's code, and images of gameplay.
- OpenAI draws cover pictures from your cover prompt and plays your game during playtests from screenshots of it.
- Lemon Squeezy sells credit packs as our merchant of record, only if you buy some. It receives your email, payment and billing details and handles tax, receipts and refunds under its own privacy policy.
- Amazon Web Services (Amazon SES) delivers sign-in links and notices, so it sees your email address.
- Cloudflare stores and serves game files, covers, screenshots and trailers (R2), and runs our DNS.
- Hetzner rents us the servers that run PlayNerva, in Germany, and the server holding our database, in the United States.
Visit statistics (Plausible Analytics) run on GetSite’s own server, so no analytics company receives data about you; see visit statistics above.
Some providers are in the United States or other countries outside yours. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses. We may also disclose data if the law requires it, to protect someone's safety, or as part of a sale or merger of PlayNerva, in which case this policy keeps applying to it.
How long do you keep it?
- Your account and games: until you delete them or ask us to delete your account.
- Sign-in sessions: 30 days after you last use them, or until you sign out.
- Sign-in links: until used, and they stop working after 15 minutes.
- Credit and purchase records: as long as your account exists, and longer where tax law requires it.
When you delete a game it disappears from PlayNerva straight away. We keep the record for a while in case of mistakes, abuse reports or disputes, then remove it.
What are my rights?
You can change your handle, display name and avatar in your account, and delete or unpublish your games in the studio. You can also ask us to:
- give you a copy of the data we hold about you;
- correct data that's wrong;
- delete your account and data;
- stop or limit some uses of your data, or object to them.
Write to [email protected] from the email you sign in with, and we'll answer within 30 days. Deleting your account removes your profile and unpublishes your games; remixes others made of them stay up, still crediting your handle unless you ask us to anonymise it. If you're in the EU, UK or a similar jurisdiction and you're unhappy with our answer, you can complain to your data protection authority.
What about children?
PlayNerva isn't for children under 16, and we don't knowingly collect their data. Signed-out players aren't asked for any personal details. If you believe a child under 16 has an account, write to [email protected] and we'll delete it.
How do you protect it?
Connections are encrypted, there are no passwords to leak because sign-in uses email links, the session cookie can't be read by scripts, and games run sandboxed on a separate domain so they can't read your account. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Will this policy change?
If we change what we collect or who we share it with, we'll update this page and the date at the top, and tell you by email or on the site before a significant change applies.
Who do I contact?
GetSite, Romania. Email [email protected].
Questions about this page? Write to [email protected].