Privacy Policy
Last updated September 9, 2026
This policy explains what haki.ink collects, why, and what you can do about it. We collect as little as we can: no ads, no advertising trackers, no sale of data.
What we collect
- Your email address, from Google sign-in. It identifies your account and is the only personal identifier we store.
- Game data: the games you play against the AI (decks, seed, every decision, the battle log, the result), replays, and your preferences (language, art settings).
- Feedback you send from the play page, tied to the game and moment you sent it from.
- Billing state, when a paid plan is offered: your plan, its status and renewal date, and a record of your consent to automatic renewal. Card numbers and billing addresses are collected and held by our Merchant of Record (Paddle), never by us.
- Technical logs: request logs kept briefly by our hosting provider, and performance metrics without personal identifiers.
Our sim-stats pages show aggregate community statistics from third-party sources. We ingest only aggregate data from those sources, never other players' names or identifiers. Tournament results shown on the site are published event standings from the organiser named on that page.
Why we use it
- To run the Service: sign you in, save and resume your games, show your match history (performance of a contract).
- To improve the AI and the Service using aggregate, de-identified game data (legitimate interest).
- To bill you and keep the consent records the law requires, when you buy a paid plan (contract and legal obligation).
- To answer your feedback (legitimate interest).
Who processes it for us
| Provider | Purpose | Data |
|---|---|---|
| Vercel, Inc. | Hosting and serverless compute | Request logs, the session cookie in transit |
| Neon, Inc. | Database | Your email, saved games, decisions, feedback, preferences |
| Google LLC | Sign-in (OAuth) | Your Google account email and its verified status |
| Paddle.com Market Ltd | Payments and billing (Merchant of Record), when a paid plan is offered | Billing details, held by Paddle; we receive the subscription state and your email |
All of these providers process data under written data-processing terms. Data may be stored in the United States. For users in the EU, UK, and Switzerland, transfers rely on the providers' standard contractual clauses or Data Privacy Framework certification.
How long we keep it
- Full game records (every decision and log line) are swept after about 90 days; the game's outcome row is kept for your match history.
- Your email and preferences are kept while your account exists.
- Consent records for automatic renewal are kept for 3 years, as required by law, in pseudonymised form after account deletion.
Your rights
You can export your data and delete your account from your Account page. Deletion removes your email, games, feedback, and preferences. You may also have rights to access, correct, restrict, or object to processing, and to complain to a supervisory authority; contact us to exercise them.
Cookies
We set one strictly necessary cookie: your signed session, so the site knows who you are. Short-lived cookies carry the sign-in round-trip. There are no advertising or analytics cookies, so there is no cookie banner.
Children
The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.
Changes and contact
We will post changes here and update the date above. Questions or requests: the feedback button on the play page.