Privacy Policy

Last updated: July 2026

1. Information We Collect

Account Data: When you register, we collect your username, email address, and password (stored as an Argon2 password hash). If you sign in with Google or GitHub, we also store the provider name, the provider's account identifier, and the email and verification status returned by that provider so we can recognize linked sign-in methods.

Usage Data: We collect game session data including actions taken, AI responses generated and token consumption metrics, plus shared-wallet entries for credited top-ups, grants, turn charges and balance changes. We also collect cookie-free, anonymous page-usage measurements as described below.

Browser Storage: We use a session cookie for authentication and local storage for your locale preference.

2. How We Use Your Information

  • Provide and maintain the game service
  • Verify email ownership and manage your password and third-party sign-in methods
  • Track and show your shared ink-drop ledger and this product's token usage
  • Improve AI response quality and platform experience
  • Communicate important updates about the service

3. Data Storage

Your data is stored in a PostgreSQL database. Game state and AI interactions are persisted for save/load functionality. We do not sell your personal data; we transfer limited data only to the service providers needed to operate the features described here.

4. Analytics and Third-Party Services

We use a configured LLM API provider to generate AI responses. Your game actions are sent to that provider as part of AI generation prompts. We do not intentionally add account identifiers to AI requests; text you enter is included, so do not put personal information in custom actions.

We use Google and GitHub for optional third-party sign-in and Resend to deliver email-verification, password-setup, and password-reset messages. At registration, the server checks disposable-email domains locally and queries DNS mail records for the email domain; the DNS lookup contains the domain only, not the email's local part.

We use a self-hosted Umami instance for anonymous page-usage analytics. It runs only on the production site and does not use tracking cookies. Before analytics data is sent, URLs are reduced to normalized, allowlisted routes with query strings and hashes removed. We do not send account IDs, game IDs, save IDs, or session IDs to Umami.

5. Cookies

We use one essential cookie and one local browser preference:

  • Session cookie — maintains your login state
  • Locale local-storage value — remembers your language preference (zh/en)

We do not use tracking cookies. The cookie-free analytics tool described above receives only normalized routes and anonymous measurements.

6. User-Generated Content

Game saves, comments, and interaction history are tied to your account. Comments are visible to other users. Game saves are private.

7. Your Rights

You have the right to:

  • Access your personal data
  • Delete your account and associated data
  • Export your game data

To exercise these rights, contact us at the email below.

8. Contact

For privacy-related inquiries: contact@ai-wuxiaworld.ink

9. Policy Updates

We may update this policy from time to time. Significant changes will be announced on our Updates page. Continued use of the platform constitutes acceptance of the revised policy.