Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how VKGames (the "Platform"), operated by the VKGames team, collects, uses, and protects information in connection with your use of our website and services available at vkgames.sbs and related subdomains.

By accessing or using the Platform, you acknowledge that you have read and understood this policy. If you do not agree, please refrain from using our services.

2. Information We Collect

2.1 — Using the AI models (no account)

When you interact with any AI model on the Platform without a registered account, we do not collect, store, or log your prompts or the model's responses. Requests are processed in real-time and discarded at the end of each HTTP response. No message content is written to any persistent storage layer.

2.2 — Registered accounts

If you choose to create an account, we collect:

• Username and email address — required to create and identify your account.
• Hashed password — passwords are stored using WordPress's bcrypt-based hashing. We never store plaintext passwords.
• Conversation sessions — when signed in, the structure of your sessions (title, model used, message count, timestamps) is saved so you can resume them. The actual message content is stored at your explicit request and is only accessible by you.
• Account metadata — plan type, credits balance, and account creation date.

2.3 — Technical data (automatic)

Like any web server, we receive standard HTTP request data, including:

• IP address (used for abuse prevention, not linked to conversation content).
• Browser type and version, operating system, referring URL.
• Pages visited and timestamps (server logs, rotated and deleted on a rolling 30-day basis).

We may use anonymised, aggregated analytics (e.g. Google Analytics) to understand overall platform usage. This data cannot be used to identify individual users.

3. AI Models & Your Data

We do not use any user input — prompts, messages, or conversations — for AI model training, fine-tuning, evaluation, or any other machine-learning purpose.

All models hosted on the Platform are open-source models with publicly available weights. Inference runs on servers we operate. No request is forwarded to a third-party AI API that would have rights over your input.

Model outputs are generated entirely from pre-trained weights and your in-session context. Nothing is retained beyond the active session unless you are logged in and your session autosave is active.

4. How We Use Your Information

Information we collect is used exclusively for the following purposes:

• To operate and maintain your account and conversation history.
• To authenticate you and protect account security (JWT tokens, password resets).
• To send transactional emails you explicitly triggered (e.g. password reset links).
• To prevent abuse, fraud, and violations of our Terms of Service.
• To analyse anonymous, aggregate usage patterns to improve platform performance.
• To respond to your support enquiries and messages.

We do not use your data for unsolicited marketing, profiling, or behavioural targeting.

5. Cookies & Local Storage

We use a minimal set of cookies and browser local storage:

• Authentication token — a JWT stored in localStorage to keep you signed in. It contains only your anonymised user ID and expiry date.
• Theme preference — dark or light mode choice, stored in localStorage.
• Analytics cookies — if Google Analytics is active, it places cookies to track aggregate, anonymised visit statistics. You can opt out via your browser settings or a standard cookie opt-out extension.

We do not use advertising cookies, cross-site tracking cookies, or any pixel from social media platforms.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties. Data is shared only in the following limited circumstances:

• Infrastructure providers — our hosting provider (Hostinger) processes data as a data processor under standard contractual terms.
• Email delivery — transactional emails (password resets) are sent via WordPress's built-in mail function. We do not use third-party email marketing platforms.
• Legal obligation — we may disclose data if required by law, court order, or to protect against imminent harm.

7. Data Retention & Deletion

Account data is retained for as long as your account is active. You may delete your account and all associated data at any time by contacting us at . Deletion requests are processed within 30 days.

Server logs are automatically rotated and purged on a 30-day rolling basis. Password reset tokens expire within 1 hour of generation.

8. Security Measures

• All traffic between your browser and our servers is encrypted via TLS (HTTPS).
• Passwords are hashed with bcrypt — they are never stored or transmitted in plaintext.
• Authentication uses short-lived signed JWT tokens (14-day expiry) — never persistent session cookies.
• API endpoints are protected with server-side token validation on every request.
• The WordPress admin dashboard is inaccessible to non-administrator users — standard user accounts carry no WordPress role.

9. Your Rights

Depending on your jurisdiction (including GDPR for EEA residents), you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your account and associated data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain types of processing.

To exercise any of these rights, contact us at . We will respond within 30 days.

10. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

11. Changes to this Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the Platform after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact & Data Controller

For any privacy-related enquiry, data access request, or concern, please reach out to: