Privacy Policy
Effective date: September 4, 2026
1. Who We Are
Gnimri is operated by Familiaris Games ("we", "us", "our"). For privacy inquiries, contact us at privacy@familiaris.games.
2. Data We Collect
Account data
When you sign up we collect your email address and create a unique user ID. Authentication is handled by Supabase.
Game state
Your character information, inventory, map position, NPC relationships, quest progress, and other gameplay data are stored so you can resume your adventure.
Player profile
Your subscription type, UI preferences, and language model preferences. If you choose the "bring your own key" (BYOK) tier, your Anthropic API key is encrypted at rest (AES-256-GCM) and only ever displayed in masked form. You can remove it at any time from your account settings.
Billing data
If you subscribe, Stripe sells the subscription as merchant of record, processes your payment, and holds your card details and billing address; we never see them. We store your Stripe customer and subscription identifiers, subscription status, and billing period dates so we can link your payment to your account and enforce your plan's token budget.
Gameplay telemetry
We record anonymized gameplay events (action types, biomes visited, combat outcomes, causes of death) to improve game balance. Telemetry is automatically deleted after 90 days.
Token usage
We track the number of AI tokens consumed per model and per role (e.g. scene description, NPC dialogue) to manage service costs.
Player communications
- Whispers (private messages to other players): stored for 24 hours, then automatically deleted.
- Universe events (public activity feed entries): stored for 1 hour, then automatically deleted.
Mute and block preferences
If you mute or block another player, we store that preference so it can be enforced.
Cookies
We use only strictly necessary cookies for authentication and session management (Supabase session cookies). We do not use analytics, advertising, or third-party tracking cookies. See our Cookie Policy for details.
3. How We Use Your Data
- Account data: to authenticate you and manage your session.
- Game state: to provide the core game experience and save your progress.
- Telemetry: to analyze game balance and detect bugs (admin-only access).
- Communications: to enable multiplayer features (whispers, universe events).
- Billing data: to manage your subscription, apply your token budget, and meet tax and accounting obligations.
- AI processing: your text commands and surrounding game context are sent to Anthropic's Claude API so the AI can generate narration, NPC dialogue, combat descriptions, and content moderation. Anthropic does not use API inputs to train its models.
4. Third-Party Processors
| Provider | Purpose |
|---|---|
| Supabase | Database hosting and authentication |
| Anthropic | AI content generation and moderation |
| Vercel | Application hosting |
| Stripe | Merchant of record for subscriptions: payment, tax, receipts, disputes |
| Sentry | Error monitoring (technical error reports with your user ID; never game text or API keys) |
Each processor maintains its own data protection agreements. These providers are US-based; your data may be transferred to and processed in the United States.
5. BYOK (Bring Your Own Key)
If you provide your own Anthropic API key, your game data is sent to Anthropic under your own API agreement with them. Your key is stored server-side and masked when displayed. You can remove it at any time. Familiaris Games is not responsible for charges incurred on your Anthropic account.
6. Data Retention
| Data | Retention |
|---|---|
| Account and game state | Until you delete your account or reset your world |
| Gameplay telemetry | 90 days (automatic deletion) |
| Whispers | 24 hours (automatic deletion) |
| Universe events | 1 hour (automatic deletion) |
| Token usage logs | Until account deletion |
| Stripe customer and subscription identifiers | Until account deletion. Stripe retains payment records under its own policy and applicable tax law. |
7. Your Rights
Under GDPR (EU/EEA/UK residents)
You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and lodge a complaint with your local supervisory authority.
Under CCPA (California residents)
You have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell your personal data.
You can delete your account yourself at any time: open the Account page and choose "Delete Account". This cancels any active subscription and permanently removes all associated personal data (game state, profile, telemetry, token usage, communications). To exercise any other right, including access to or a copy of your data, email privacy@familiaris.games from the address on your account; we respond within one month.
8. International Transfers
Our service providers are based in the United States. If you are located outside the US, your data will be transferred to the US for processing. We rely on standard contractual clauses and equivalent safeguards where required by law.
9. Children
Gnimri is not directed at children under 13 (or under 16 in EU/EEA jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@familiaris.games and we will delete it.
10. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. The "Effective date" at the top of this page indicates when it was last revised.
© 2026 Familiaris Games