Privacy Policy

1. Information We Collect

• Account identifiers from Google Sign-In, such as your Google account identifier and basic profile data.
• Profile data you set in MindHack, such as display name and avatar seed.
• Gameplay records, including level progress, achievements, energy usage, check-ins, and shared prompts.
• Conversation input and output required to run the AI gameplay flow and rule-judging pipeline.
• Device and app data needed for fraud prevention, app stability, diagnostics, and service delivery.
• Advertising and consent-related data used by AdMob and the Google Mobile Ads SDK.

2. Why We Use the Data

• To authenticate users and restore cloud-backed progress across devices.
• To operate the core game loop, including AI chat processing, rule judgment, and progression tracking.
• To grant rewards, preserve achievements, and maintain leaderboards where available.
• To prevent abuse, automate moderation, investigate suspicious activity, and protect service integrity.
• To serve ads, manage consent, measure ad-related events, and deliver rewards where permitted by law.
• To comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services

MindHack currently relies on these service categories:

• Supabase for database, authentication, and edge function infrastructure.
• Google Sign-In for authentication.
• Google-hosted AI services for gameplay response generation and rule evaluation.
• Google AdMob and the Google Mobile Ads SDK for banner, app open, interstitial, and rewarded ads.
• Cloudflare Pages for public website delivery.
• Google Fonts and a pinned GSAP CDN asset for website typography and non-essential page animation.

These providers process data according to their own policies in addition to this policy.

4. AI Processing

MindHack is an AI gameplay product. To generate character responses and judge rule violations, gameplay messages may be transmitted to cloud services and processed in real time. We use this processing to deliver the gameplay experience, enforce rules, prevent abuse, and maintain service integrity.

5. Advertising and Consent

MindHack uses AdMob. Depending on your location, you may be asked to provide or manage ad consent before ads become available. Where supported, privacy choices can be revisited from within the app. Rewarded ads are optional gameplay actions.

6. Data Retention

• Account and progression records are kept while your account remains active.
• Deletion requests remove active account-linked profile and gameplay records after verification.
• Security, fraud-prevention, legal, and operational records may be retained where required.
• Backup copies may persist for a limited period before they expire through normal backup rotation.
• Aggregated or de-identified data that no longer identifies you may be retained for analytics and service improvement.

7. International Transfers

Your information may be processed on servers located outside your home country. By using MindHack, you understand that data may be transferred across jurisdictions where our providers operate.

8. Children

MindHack is not intended for children under 16. If you believe a child has provided personal data through the service, contact us and we will review and remove the information where appropriate.

9. Your Rights and Choices

• You may stop using the service at any time.
• You may sign out from the app.
• You may request deletion of your MindHack account and associated cloud data.
• You may contact us to request privacy assistance, access help, correction, or deletion if you cannot access the app.

10. Account Deletion

MindHack provides an in-app delete-account flow for signed-in users. We also provide an external deletion request page at https://mindhack.leshm.com/account-deletion/ for users who cannot access the app.

11. Security

We apply technical and organizational measures intended to protect account data and service integrity, but no internet-connected system can be guaranteed fully secure.

12. Changes

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

13. Contact

For privacy questions or deletion requests, contact [email protected].