Your data, plainly.

In short — today: an email address. At launch: an account.

Join the waitlist and we store your email address and which form you used. That's the complete pre-launch list — no names, no profiles, no device fingerprints.

With an account we hold the email you signed up with, your library, and the session stats that make the platform work. Accepting an agreement also records which version, when, the IP address it came from and your browser string — that record is the evidence the agreement was accepted, so it is kept with the account. Authors who enable payouts additionally provide verification, tax and payout details — those come from section 07 of the terms, and only from authors.

In short — to run the shelf, not to follow you around.

Your waitlist email gets used for one thing: telling you when your wave opens. At launch, account data operates the features you can see — your library, your saves, your author dashboard — and payout data pays authors.

We also use what we hold to keep the platform honest: fraudulent plays and botted sessions get caught with session data, because payouts depend on real ones.

In short — no selling, no ad tracking, no training on your data.

We don't sell personal data. We don't hand it to ad networks. We don't run cross-site trackers. And we don't train AI models on your personal data — the games here are made with AI; you aren't the training material.

In short — the public site sets none today.

The public pages set no cookies, which is why there is no consent banner on them. Signing in sets one session cookie so you stay signed in; it is covered in the cookie policy.

In short — processors that run the machine, nobody who buys attention.

A small set of processors runs the machine under contract: the infrastructure that hosts our database, the email service that delivers wave invitations when they go out, and — at launch — the payment provider that processes author payouts. Each gets the minimum it needs to do its job, and they'll be named here once live.

Beyond that, personal data leaves only when the law genuinely compels it, and then as narrowly as the request allows.

In short — as long as needed, gone on request.

Waitlist emails live until the launch invitations are done or you ask us to delete yours — whichever comes first. Early-access account data may be reset before general availability, as the terms say, with an email warning first. Once accounts are permanent, data lives as long as the account does.

In short — see it, fix it, delete it — one email.

Write to legal@unispawn.io and we'll show you what we hold about you, correct it, or delete it. Where the law where you live grants formal rights — GDPR, CCPA and friends — we honor them without making you cite them. If you think we have handled your data badly you can complain to a data protection authority: ours is the Dutch Autoriteit Persoonsgegevens, and you can also go to the authority where you live.

In short — under 13, not here.

Unispawn is for people 13 and older — or the age of digital consent where you live, if that is higher. In the Netherlands it is 16. We don't knowingly collect data from anyone younger — if that happened anyway, tell us and it gets deleted.

This policy grows with the platform. Material changes get an email and at least 15 days' notice before they apply — the same rhythm as the terms.

Questions about your data: legal@unispawn.io. We read it.