Privacy policy

• We never store your IP address, only a salted, one-way fingerprint of it, used for rate limits and to stop abuse.
• Your watcher identity is a random number kept in a browser cookie. Your watcher number and the stars you bless or smite are public.
• We run no ads and no third-party analytics or trackers, and we never sell data.
• Once sign-in launches, we keep your email for your account and notifications. Marketing email is sent only if you opt in, and you can unsubscribe at any time.

Network fingerprint. When you become a watcher, bless or smite, share, submit, use the link helper, post a bullet comment or light up a star, the server hashes your IP address with a secret salt (SHA-256) and keeps only the first 32 hex characters. It powers rate limits and per-network daily caps; it is not used to identify you.

Watcher identity. The first time you accept the appointment or use divine power, we create a random ID, store it in a cookie named gx_w (readable only by our server, kept for 400 days), and give you a public number such as “Watcher #0427”. Linked to it: which stars you blessed or smote and when, the extra power you earned by sharing or bringing visitors, and whose link brought you here.

Referrals. When you open a shared link with ?by=<number>, we credit that watcher. The record stores your network fingerprint so each visitor counts once a day.

Submissions. The entry, relation or correction you submit; an optional credit name (shown publicly on the star); an optional contact (used only if a reviewer has a question, never shown); and your network fingerprint.

Link helper. The URL you paste and your network fingerprint, for rate limits. We fetch that page and send its text to an AI model to draft the entry.

Bullet comments. The comment (shown publicly) and your network fingerprint. An AI model checks each comment first and blocks harassment, advertising, personal data and the like.

Local storage in your browser. Your drawing style, bullet comment and sound switches, whether you have seen the intro, and which shared links you followed (so they are not counted twice). This stays on your device and is never sent to us.

Bot checks. On requests that write data, Vercel BotID runs an invisible check in your browser. It reads technical characteristics of the browser and device to tell people from scripts.

Fonts. Some fonts load from Google Fonts, so your browser connects to Google’s servers, and Google can see your IP address.

Taking part in calibration will require signing in. We offer third-party sign-in only, with Google, GitHub and X, provided through Clerk. When you sign in, we receive:

• your email address, display name, avatar, and your account ID on that platform;
• public profile details such as when the account was created and how many public repositories it has, used to set a starting reputation and stop throwaway accounts from gaming the results;
• whether you agreed to marketing email, with the time and place you agreed.

We never ask for your private data and never post on your behalf. The first time you sign in, the watcher in your current browser is linked to your account and keeps its number.

Email. Once you sign in we may send notifications, such as “your correction was accepted”. Marketing email, such as the universe weekly, is off by default and sent only if you opt in; every message has an unsubscribe link.

• To run the game: daily divine power, the Pantheon and Smitten boards, and the feed of miracles;
• To prevent abuse: rate limits, detecting scripts, and dealing with farming and cheating;
• To review and improve the graph: submissions, corrections and calibration;
• To contact you: replies about your submissions, notifications once you sign in, and marketing email you opted in to.

We do not use this data for ad targeting, and we do not use it to train AI models.

Watcher numbers, which stars each watcher blessed or smote, bullet comments, credit names on submissions, and approved submissions. Approved content becomes part of the graph and appears on star pages and in the open data endpoints (/graph.jsonld, /api/graph).

We do not sell data. These providers process data on our behalf to run the site; their servers are mainly in the United States:

• Vercel: hosting, bot checks (BotID), and the AI Gateway we use to call AI models. As our host, Vercel processes visitors’ IP addresses in its logs.
• Neon: the database.
• AI model providers (for example Anthropic), called through the Vercel AI Gateway. They receive only submissions, page text fetched by the link helper, and bullet comments.
• Google Fonts: fonts.
• Clerk (sign-in) and Resend (email): once those features launch.

Otherwise we share data with authorities only when the law requires it.

Game records and public contributions are part of the universe and are kept while the site runs, or until you ask us to delete them. The gx_w cookie lasts up to 400 days; you can clear it at any time, but a cleared watcher cannot be recovered.

You can ask to see, correct, export or delete your data, withdraw consent, or object to processing. Email privacy@godooo.ai. If you are not signed in, include your watcher number; we may ask you to prove it is yours from the browser you used. We reply within 30 days. You can also complain to your local data protection authority.

The site is not meant for children under 14, or under the higher age your local law sets. If we learn we have collected a child’s personal data, we delete it promptly.

The whole site uses HTTPS, only we hold the database credentials, and IP addresses are stored only as salted fingerprints. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

When we change this policy we update the date at the top. We announce significant changes on the site, and by email once you have signed in.

For anything about privacy, email privacy@godooo.ai. See also the terms of service.