Who we are
EggVerse is operated by anbu corp, doing business as EggVerse, based in Ontario, Canada (“EggVerse,” “we,” “us”). This policy explains how we handle personal information when you use eggverse.co, our plugin and embedded players in supported chat hosts, and the EggVerse games and account features that link to this policy.
For privacy questions or requests, contact waseem@eggverse.co. Please include your EggVerse username if you have one, but never send passwords or sign-in codes.
Information we handle
- Player profiles: a player ID, chosen name or username, egg costume, account creation time, and connected sign-in providers. Guest multiplayer also creates a server-side player identity.
- Sign-in: the provider name and unique account identifier supplied by Google or Apple, temporary security information needed to complete sign-in, and an email address when requested and supplied in a verified provider response. We also record its source, provider verification status, whether it is an Apple private relay address, and when it was observed. Your chosen username is separate from this private sign-in information.
- Games and social features: room membership, readiness, game inputs, game state, scores, results, and messages you send in game chat where chat is available. Virtual balance and game-history records may be associated with your player ID.
- On your device: local practice scores, play counts, character choices, sound and display preferences, and cached game files. These help the arcade remember your settings and support repeat or offline play.
- Connection and security information: IP addresses, request URLs, browser or device information, timestamps, and request-limit information needed to deliver and protect the service. EggVerse uses a hash of the IP address for temporary request limits; hashing does not make this information anonymous. Some game pages also send us error reports and, during online matches, a short performance summary (frame rate, connection timing and device type) to help us find and fix problems.
- Support and diagnostics: contact information you provide when asking for help, messages and reports you submit, a report reference, relevant account and game context, and limited technical records used to investigate sign-in, connection and game problems. These may include event times, account IDs where established, app or release versions, recognized error codes and room-instance references. Additional device and performance details attached to a support report are optional and collected only when offered and you choose to include them. Do not include passwords, sign-in codes or other sensitive information in a report.
- Wishlists: games you save to your signed-in account, when they were saved, and whether the interest came from an earlier launch list. A game can be saved without an email address. Saving it does not subscribe you to email.
- Game email choices: if you separately ask for a game’s launch or prelaunch updates, we keep the contact address you choose, its source and verification or delivery status, the game, and a record of your permission. We use it for that game’s launch and occasional prelaunch updates. Every update includes an unsubscribe option. A contact address is not an account-recovery method and does not establish account ownership. Guest email signup remains separate from a signed-in account wishlist.
Playing through ChatGPT and other chat hosts
This policy also applies to the EggVerse plugin and its embedded game player. When you ask your chat host to find or open a game, it sends us the tool inputs needed for that request, such as a game-search phrase, player count, game selection, or invitation code. Our tools do not request your full conversation history. They return public game information and the route needed to open the player. Please do not put passwords, payment information, or other sensitive information in game searches or invitations.
Online play uses a separate EggVerse guest identity. The player holds its access credential in memory, and that credential expires after two hours. It does not sign you into an existing EggVerse account. Gameplay inputs, room membership, state, and results are handled by our game service as described elsewhere in this policy. Our tool responses do not include provider email addresses, private support records or account history, your guest credential, hidden role, or live room state. Embedded play does not require Google or Apple sign-in or an email address.
PostHog analytics and session replay are disabled in the embedded chat player. Game preferences or practice records may still be saved on your device. Cloudflare provides hosting and multiplayer services. The player loads its host-connection software from jsDelivr, and game styles may load Google Fonts; those providers receive connection information when those files are requested. Your chat host separately processes your conversation, tool interactions, and use of its platform under its own privacy policy, including OpenAI’s privacy policy when you use ChatGPT or Codex.
Closing the player discards its in-memory credential but does not delete existing server records. Guest profiles and persistent game-result records are not automatically deleted when the two-hour session expires. Temporary room data is removed through the room’s expiry cleanup. To make an access or deletion request, contact waseem@eggverse.co. Include the game, approximate time, and any guest or player identifier available to you; never send session credentials. We may need additional information to verify a request, and may not be able to identify a guest record from a name alone. Disconnecting the plugin from your chat host does not by itself delete EggVerse records.
Google and Apple sign-in
Signing in is optional for solo practice. If you choose Google or Apple, the provider authenticates you. We recognize or link your EggVerse account using the provider’s unique account identifier. We do not receive your provider password.
When the sign-in flow requests the provider’s email permission, we retain an available address privately to help locate the correct account for support and verified privacy requests, together with its provider verification information. We do not request your provider profile name or access to your inbox, contacts, files or calendar. A verified sign-in response does not always establish current control of the email mailbox. Matching addresses never merge accounts or grant account access.
Apple may supply a private relay address instead of your underlying address. A relay address does not reveal that underlying mailbox. A provider may omit email, including for an existing account; you can still sign in and save games when account wishlists are available. Existing accounts may receive email metadata on a later successful provider sign-in. We cannot recreate email or username history from before collection began.
Your chosen EggVerse username is separate from your provider identity. Provider identifiers and private email metadata are not shown in public profiles, rooms, leaderboards or our chat-host tool responses. A sign-in email change does not silently replace the contact selected for game updates. Provider access and refresh credentials are used only during the relevant request and are not kept between requests. The provider also processes information under its own privacy policy.
Why we use information
We use information to create and recognize accounts, save your choices, connect you to rooms, operate games and chat, calculate and display results, maintain game records, protect accounts, prevent cheating and abuse, troubleshoot problems, and answer requests.
We use private sign-in email metadata to locate candidate accounts for support, investigate problems and handle verified privacy requests. Knowing an email address, username, player ID or report number is not sufficient proof of account ownership. Essential operational and security records serve these purposes even when optional analytics is declined; they are not a substitute for optional product analytics.
Where privacy law requires a legal basis, these activities may rely on providing the service you request, our legitimate interests in operating a safe service where permitted, compliance with legal duties, or your consent where required. We obtain additional consent when required before using information for a new purpose. Using the website does not replace consent that applicable law requires us to obtain separately.
Cookies, local storage and caching
We use essential session cookies to recognize your player session and temporary cookies to protect sign-in. Session cookies last up to 30 days; temporary sign-in cookies expire after 10 minutes. Signing out revokes the current session. The server stores session tokens as hashes.
Local storage remembers practice records, your cookie choice, dismissed major announcements and, only if accepted, an analytics identifier. Cookie choices last 180 days on this device. You can change Cookie settings any time, including rejecting both optional categories. Withdrawal stops optional tracking and removes its local identifiers; it does not delete events already received by the provider. For removal requests, use the contact below. A service worker may cache game files to make repeat visits faster and support previously loaded offline content. You can clear cookies, local storage, and cached site data through your browser or device settings. This may sign you out or remove local progress. Blocking essential cookies can prevent sign-in or online rooms from working.
Clearing device data or disconnecting EggVerse in your Google or Apple settings does not delete records already stored on EggVerse’s servers.
How long information stays
Account profiles, linked provider identifiers, and any persistent game records remain between visits while needed to provide the account, maintain results, or meet legitimate security, dispute-resolution, or legal needs. There is currently no automatic deletion of an account merely because it is inactive.
Temporary sign-in records expire after 10 minutes, and sessions expire after their set period or are revoked at sign-out. Expired records are cleaned up as the relevant service runs. Temporary room state and room chat are removed when the room’s expiry cleanup runs; persistent result or account records are separate. Browser records remain until you clear them or your browser removes them.
Current provider email metadata and selected notification contacts remain while the linked identity or contact is active and are removed on account deletion, subject to the limited legacy email records below. Account wishlist entries remain until you remove them or delete the account. Superseded email and username history expires 90 days after replacement. Routine account diagnostics expire after 30 days, security events after 90 days, and the minimal support-access audit after 12 calendar months. The access audit contains no raw addresses or email-search text. Expired private history, diagnostics and reports are excluded from support results while removal is completed.
Support report content expires at the earlier of 90 days after closure or 180 days after creation. A specific active case may have a documented hold with a responsible owner and an explicit expiry. Holds do not continue indefinitely by default.
We keep minimal destination/game opt-out and delivery records to honor unsubscribe requests and prevent duplicate campaign emails. Keyed address digests are not used for support identity search or to recreate a contact. During conversion of older launch-list records, an existing email address and its old unsubscribe or delivery proof may temporarily remain for these limited purposes. After account deletion, this older proof is detached from the account and cannot be used to send or count a subscription. Conversion preserves an existing opt-out’s original time; deleting one account does not create a new destination-wide opt-out for another account.
We retain a minimal account-deletion marker and reference to prevent removed records from being restored and to track completion. Analytics cleanup has a separate execution receipt and can remain pending while a provider processes it or an issue requires review. Relevant processor execution details are reduced 12 calendar months after cleanup is verified; unresolved cleanup remains recorded until resolved. These retained records are not anonymous merely because a public name or address has been removed.
Limited records may also remain where required by law or justified for security, disputes or record integrity. We explain applicable exceptions. Signing out is not an account-deletion request.
Your choices and privacy rights
You can choose guest practice, edit your username and costume in your player profile, sign out, clear local site data, and manage connected access in your Google or Apple settings.
When account wishlists are available, you can save or remove a game and manage its separate email choice. Removing a wishlist entry disables that account’s email choice for the game; adding it again does not restart email. Unsubscribing from email leaves the account wishlist saved. The destination/game stop-email option stops overlapping launch-list updates. Email already accepted for delivery may still arrive.
Use Delete account in your account controls while signed in. After confirmation, we remove searchable private identity metadata and history, wishes, contacts, subscriptions, reports and associated personal records, subject to the limited retention described above. We revoke sign-in sessions and prevent later account writes. Existing game connections are checked on a short interval and removed when invalid; stored rooms are scrubbed before they are shown again. We return a deletion reference and distinguish local account deletion from pending analytics cleanup. An email address alone does not authorize an account change.
For an account connected to Apple, we offer a fresh Apple sign-in to revoke its authorization during deletion. Cancelling that step, Apple being unavailable or a revocation failure does not prevent deletion of the authenticated EggVerse account; we provide Apple’s manual access-revocation instructions. Deleting EggVerse data and revoking Apple authorization are separate operations.
Depending on applicable law, you may have rights to access or correct personal information, request deletion or a copy, withdraw consent, or object to or restrict certain processing. Send requests to waseem@eggverse.co. We may ask for information needed to verify that you control the account and will respond within the period required by applicable law. Please do not send identity documents unless we explain why they are necessary.
Some information is necessary to provide an account or online play; a request to remove it may mean those features can no longer be provided. You may also raise a concern with the privacy regulator where you live. You will not be penalized for exercising a privacy right.
Security and international processing
We use measures including HTTPS on the public service, protected session cookies, hashed session credentials, verification of sign-in responses, and request limits. No system or transmission can be guaranteed completely secure.
Our service providers may process information in countries other than the one where you live, where privacy laws and government-access rules may differ. Where required, we use appropriate contractual or other safeguards for transfers. You can contact us for information about the safeguards relevant to your data.
Children and younger players
EggVerse is intended for people aged 13 or older, or the higher minimum age required where they live. A parent or guardian should review the service with any player who is still a minor. EggVerse does not currently offer a verified parental-consent process for accounts belonging to children under 13.
If you believe a child has provided personal information contrary to these requirements, contact waseem@eggverse.co so we can investigate and handle removal as required. An age statement alone does not replace protections or parental consent required by law.
Updates to this policy
We may update this policy when the service or its data practices change. The date at the top identifies the latest version. For material changes, we will provide an appropriate notice and obtain additional consent where required before applying a new use of information.
Questions about this policy can be sent to waseem@eggverse.co. The Terms of Use explain the rules for using EggVerse.
Keep reading Terms of Use