Privacy Policy

Who we are

Eggverse is operated by anbu corp, doing business as Eggverse, based in Ontario, Canada (“Eggverse,” “we,” “us”). This policy explains how we handle personal information when you use eggverse.co and the Eggverse games and account features that link to this policy.

For privacy questions or requests, contact waseemkhalo@gmail.com. Please include your Eggverse username if you have one, but never send passwords or sign-in codes.

Information we handle

• Player profiles: a player ID, chosen name or username, egg costume, account creation time, and connected sign-in providers. Guest multiplayer also creates a server-side player identity.
• Sign-in: the provider name and unique identifier supplied by Google or Apple, plus temporary security information needed to complete sign-in.
• Games and social features: room membership, readiness, game inputs, game state, scores, results, and messages you send in game chat where chat is available. Virtual balance and game-history records may be associated with your player ID.
• On your device: local practice scores, play counts, character choices, sound and display preferences, and cached game files. These help the arcade remember your settings and support repeat or offline play.
• Connection and security information: IP addresses, request URLs, browser or device information, timestamps, and request-limit information needed to deliver and protect the service. Eggverse uses a hash of the IP address for temporary request limits; hashing does not make this information anonymous.
• Messages to us: your email address and any information you choose to include when asking for help or exercising a privacy right.

Google and Apple sign-in

Signing in is optional for solo practice. If you choose Google or Apple, that provider authenticates you and returns a sign-in response. We use its unique account identifier to recognize or link your Eggverse account. We do not receive your provider password.

The current sign-in flow does not request access to your inbox, contacts, files, or calendar, or request your name and email as additional sign-in permissions. The account database stores the provider name and identifier, not your Google or Apple email address, profile name, or access tokens. Extra profile details included in a sign-in response are not retained in your Eggverse account.

Your chosen Eggverse username is separate from your provider identity. Your Google or Apple identifier is not displayed to other players. The provider also processes information under its own privacy policy.

Why we use information

We use information to create and recognize accounts, save your choices, connect you to rooms, operate games and chat, calculate and display results, maintain game records, protect accounts, prevent cheating and abuse, troubleshoot problems, and answer requests.

Where privacy law requires a legal basis, these activities may rely on providing the service you request, our legitimate interests in operating a safe service where permitted, compliance with legal duties, or your consent where required. We obtain additional consent when required before using information for a new purpose. Using the website does not replace consent that applicable law requires us to obtain separately.

What others can see and who helps us

Other players: your chosen name, costume, presence, game actions, scores, and results may be visible in rooms, shared game spaces, or leaderboards. Chat is visible to the audience for that game or channel. A room code or invite link can be forwarded; it is not a guarantee that only your intended friends can join. Avoid putting sensitive information in a username or chat message.

Service providers: Cloudflare provides hosting, account-database and multiplayer infrastructure. Google or Apple provides authentication when you choose it. Arcade pages load fonts from Google Fonts, which receives connection information when your browser requests those files. On eggverse.co, Cloudflare Web Analytics counts page visits and measures page speed without cookies; it receives the page address, referring page and browser details. It does not run in the iOS app. PostHog provides product analytics on eggverse.co and in the iOS app. It records pages you open and game events such as starting or finishing a game, creating or joining a room and sharing an invite, with device and browser details and an approximate location derived from your IP address. PostHog stores a random identifier in local storage; if you sign in, events are linked to your Eggverse account ID. We do not send your username, email address or chat messages to PostHog. See Cloudflare’s privacy policy, Google’s privacy policy, Apple’s privacy policy, and PostHog’s privacy policy.

We may disclose information when legally required, to respond to lawful requests, or when reasonably necessary to protect people, investigate abuse, or enforce our terms. If the service changes ownership, relevant information may transfer with it, subject to applicable privacy requirements and notice.

We do not sell personal information or share it for cross-context behavioural advertising. The current arcade does not include advertising trackers or use Google or Apple sign-in data for advertising. Payments and prize redemption are disabled in the current free-play release; it does not collect payment-card details.

Cookies, local storage and caching

We use essential session cookies to recognize your player session and temporary cookies to protect sign-in. Session cookies last up to 30 days; temporary sign-in cookies expire after 10 minutes. Signing out revokes the current session. The server stores session tokens as hashes.

Local storage remembers practice records, preferences and a random analytics identifier. A service worker may cache game files to make repeat visits faster and support previously loaded offline content. You can clear cookies, local storage, and cached site data through your browser or device settings. This may sign you out or remove local progress. Blocking essential cookies can prevent sign-in or online rooms from working.

Clearing device data or disconnecting Eggverse in your Google or Apple settings does not delete records already stored on Eggverse’s servers.

How long information stays

Account profiles, linked provider identifiers, and any persistent game records remain between visits while needed to provide the account, maintain results, or meet legitimate security, dispute-resolution, or legal needs. There is currently no automatic deletion of an account merely because it is inactive.

Temporary sign-in records expire after 10 minutes, and sessions expire after their set period or are revoked at sign-out. Expired records are cleaned up as the relevant service runs. Temporary room state and room chat are removed when the room’s expiry cleanup runs; persistent result or account records are separate. Browser records remain until you clear them or your browser removes them.

When handling a deletion request, we may need to retain limited records required by law or needed for security, disputes, or record integrity. We will explain any applicable exception. Signing out is not an account-deletion request.

Your choices and privacy rights

You can choose guest practice, edit your username and costume in your player profile, sign out, clear local site data, and manage connected access in your Google or Apple settings.

Depending on applicable law, you may have rights to access or correct personal information, request deletion or a copy, withdraw consent, or object to or restrict certain processing. Send requests to waseemkhalo@gmail.com. We may ask for information needed to verify that you control the account and will respond within the period required by applicable law. Please do not send identity documents unless we explain why they are necessary.

Some information is necessary to provide an account or online play; a request to remove it may mean those features can no longer be provided. You may also raise a concern with the privacy regulator where you live. You will not be penalized for exercising a privacy right.

Security and international processing

We use measures including HTTPS on the public service, protected session cookies, hashed session credentials, verification of sign-in responses, and request limits. No system or transmission can be guaranteed completely secure.

Our service providers may process information in countries other than the one where you live, where privacy laws and government-access rules may differ. Where required, we use appropriate contractual or other safeguards for transfers. You can contact us for information about the safeguards relevant to your data.

Children and younger players

Eggverse is intended for people aged 13 or older, or the higher minimum age required where they live. A parent or guardian should review the service with any player who is still a minor. Eggverse does not currently offer a verified parental-consent process for accounts belonging to children under 13.

If you believe a child has provided personal information contrary to these requirements, contact waseemkhalo@gmail.com so we can investigate and handle removal as required. An age statement alone does not replace protections or parental consent required by law.

Updates to this policy

We may update this policy when the service or its data practices change. The date at the top identifies the latest version. For material changes, we will provide an appropriate notice and obtain additional consent where required before applying a new use of information.

Questions about this policy can be sent to waseemkhalo@gmail.com. The Terms of Use explain the rules for using Eggverse.