Privacy Policy

1. Who we are (data controller)

The Service is operated by Def Launch, LLC (d/b/a G8N•AI), a Delaware limited liability company ("we", "us"). For any privacy question or to exercise your rights, contact us at support@g8n.ai.

2. What we collect

• Discord identity. When you register in Discord or log in to the portal with Discord, we receive your Discord user ID, username, global (display) name, and avatar; if you log in via OAuth we also receive your Discord account email.
• Game data. Your collection (cards and their edition numbers), in-game currency ("Spirit Stones"), XP/level, cultivation progress, trades, wishlists, and the servers in which you play.
• Product analytics. Events describing in-game actions (e.g. a roll, a claim, a daily reward) recorded with your internal account identifier and game attributes only — never usernames, emails, or avatars.
• System logs. Operational telemetry and error logs used to keep the Service running and secure.
• Premium / Patreon. If you link Patreon for premium perks, we store your subscription tier, status, and entitlements. Payments are processed by Patreon, not by us — we never see or store your card details.

3. How we use it, and our legal bases

• To provide the game and portal (accounts, collection, economy, premium perks) — legal basis: performance of a contract (our Terms of Service).
• To understand and improve the game via aggregate analytics — legal basis: our legitimate interests (and your consent where required). Analytics never include direct identifiers.
• To keep the Service secure and reliable (abuse prevention, debugging) — legal basis: legitimate interests and legal obligations.

We do not sell or share your personal data, and we do not use it for advertising.

4. Who we share it with (sub-processors)

We use a small set of service providers to run the Service. Each processes data only to provide its function:

• Discord — identity / login and bot platform.
• Patreon — payment processing and subscription data for premium.
• Supabase — database hosting (United States).
• Fly.io — application hosting (United States).

5. International data transfers

We are based in, and host the Service in, the United States. If you access the Service from the EU/UK, your data is transferred to the US under an appropriate safeguard — the EU-US Data Privacy Framework and/or Standard Contractual Clauses with our providers.

6. How long we keep it

• Account and game data — until you delete your account.
• Product analytics — up to 365 days, then deleted.
• System telemetry — up to 90 days; error logs up to 30 days.

7. Your rights and how to use them

Depending on where you live (e.g. the EU/UK under GDPR, or California under the CCPA/CPRA) you have some or all of these rights:

• Access & portability — get a copy of your data. Self-serve via /me/export in the portal (a structured JSON download). Very large histories may be capped; email us for the full copy.
• Erasure (deletion) — delete your account and personal data. Self-serve via /me/delete in the portal.
• Rectification, restriction, and objection — email support@g8n.ai and we'll handle it.
• Know / delete / correct (California) — the same mechanisms above. We do not sell or "share" personal data, so there is nothing to opt out of.

We do not make automated decisions that produce legal or similarly significant effects about you. We aim to respond to requests within a reasonable time consistent with applicable law. If you believe we've mishandled your data you may complain to your local supervisory authority.

8. Cookies and local storage

We use one strictly-necessary, first-party cookie to keep you signed in, and your browser's local storage to remember your light/dark theme preference. We use no advertising or cross-site tracking cookies and no third-party analytics, so no cookie-consent banner is required.

9. Children

The Service is intended for users aged 13 and older (consistent with Discord's minimum age, or higher where local law requires). We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, contact support@g8n.ai and we will delete it.

10. How we protect data

Session tokens are stored only as salted hashes; database tables enforce row-level security by default; access is restricted to what the Service needs to function. No system is perfectly secure, but we take reasonable measures to protect your data.

11. Changes to this policy

We may update this policy; the version and effective date above will change, and material changes will be noted in the portal. Continued use after an update means you accept the revised policy.