Skip to main content

Last updated: October 17, 2026

Privacy Policy

Centuriation is operated by Ferniotic LLC, a Massachusetts limited liability company ("we", "us"). This policy explains what personal information we collect, how we use and share it, how long we keep it, and your choices.

What We Collect

Account information

Email address, display name, optional bio, profile picture and time zone, a securely hashed password (if you use email sign-up), and the date you accepted our Terms. If you sign in with Google or GitHub we receive your name, email and profile picture from that provider; we do not store their access tokens.

What you type or upload

Topics you enter, files you upload and the text we extract from them, game design documents and edits, gallery titles and descriptions, and notes on variant requests.

Learning and game data

Play history, scores, per-question responses, topic and concept mastery, identified misconceptions, and adventure progress.

Badges and daily challenge results

When you are signed in, we record the badges you earn (which badge, when, and the run that earned it) and your ranked daily challenge attempt (score, accuracy and time). Your daily challenge result appears on a public daily leaderboard under a shortened form of your name (first name and last initial, or the first characters of your email address). Both are included in your data export and deleted with your account.

Shared replays

For some game types, the game records how you played a run — the moves you made and when (taps, swipes, key presses, pauses) — so the run can be replayed. This recording stays in your browser and is discarded unless you choose "Share replay" on the results screen. If you do, we store it (with the run's score) and anyone with the link can watch the run played back, with your first name and last initial. You can withdraw a replay link at any time; replays are included in your data export and deleted with your account, or when the run or game is deleted.

Billing information

Your subscription plan and status, and Stripe customer and subscription identifiers. Card details are collected and stored by Stripe; we never see or store your card number.

Technical data

Server logs include a shortened form of your IP address (the last part removed), the pages and API endpoints requested, and timestamps. Error reports include browser details, the page URL and your account ID (not your email).

How We Use It

  • to provide the Service — generate games, track your progress, run your account and billing;
  • to keep the Service safe — rate limiting, abuse prevention, security and fraud monitoring;
  • to fix and improve the Service — debugging, usage statistics and quality monitoring;
  • to send transactional email — verification, password resets, billing receipts and renewal reminders, and status updates about things you requested. We do not send marketing email.

We do not sell your personal information and we do not use it for targeted advertising.

What Others Can See

If you submit a score to a leaderboard, publish a game to the gallery or create a share link, other people can see your first name and last initial (or a shortened form of your email if you have no name), your score, and the game's topic, title and description. Your email address and picture are never shown publicly. You can avoid this by not publishing or sharing; you can unpublish a gallery game at any time.

When you publish a forged game you can also choose to let others remix its design. This is off unless you tick it. If you do, once the game is approved, Enterprise users can read the design document that game was built from and save their own copy to edit, credited to your first name and last initial. You can stop sharing at any time; copies other people already saved are theirs and stay with them.

Service Providers

We share personal information only with providers that process it for us to run the Service:

  • Google Gemini API — topics, uploaded-file text, design documents and prompts are sent to Google to generate content. We use Google's paid API service, under which Google does not use your inputs or outputs to train its models; Google may retain them for a limited period to detect abuse.
  • Other AI model providers — when you ask the game forge to build a custom game, your design document may be processed by a coding model from Google or, as a fallback, Anthropic or OpenAI, under their API terms.
  • Stripe — payments and subscriptions.
  • Google and GitHub — sign-in, if you choose them.
  • Mailgun — sending email.
  • DigitalOcean — hosting, databases and file storage (United States).
  • Cloudflare — content delivery, security and determining your country.
  • Sentry and Grafana Cloud — error tracking and server logs.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets.

Cookies and Local Storage

We use cookies only to keep you signed in and to protect sign-in (session and security cookies set by our authentication system). We also store a few items in your browser's local and session storage: sound and vibration preferences, game options, unsent game results while you are offline, and unsaved drafts. We do not use advertising, analytics or third-party tracking cookies. Our Service does not respond to browser "Do Not Track" signals, because we do not track you across other sites.

How Long We Keep It

  • Account, game and learning data: while your account exists.
  • Generation logs: 90 days. Cached AI results: 90 days. Completed adventure runs: 30 days.
  • Game pacing records (which stage of a game you reached, and your accuracy at each stage): 90 days.
  • Billing event records: 2 years. IP addresses in our admin audit log: 1 year.
  • Server logs and error reports: according to our providers' retention settings, generally no more than 90 days.

Deleting Your Account

You can delete your account from your profile page or by emailing [email protected]. Deletion cancels any subscription, deletes your Stripe customer record, and removes your profile, progress, mastery and misconception data, uploads, designs, games only you played, generation logs, API keys and webhooks.

Some data is kept without any link to you: games that other people have already played, shared or published (with their topic and content, because others rely on them), copies of a design you let others remix (saved by them, with the credit to you removed), topic outlines (with the text you typed replaced by "[deleted]"), and completed adventure content. Copies in server logs, error reports and backups expire on the schedules above, and information already processed by an AI provider is subject to that provider's retention.

You can download a copy of your data at any time from your profile page (Export).

Security

We use encryption in transit, hashed passwords, access controls, and isolated sandboxes for generated games. No system is perfectly secure; we will notify you and the authorities if a breach affects you as required by law.

Age Requirement

Centuriation is only for people aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact [email protected] and we will delete it.

Where We Operate

We are based in, and store data in, the United States. The Service is not offered in the European Economic Area, the United Kingdom or Switzerland.

Your Choices and Rights

You can view and correct your profile, export your data, and delete your account at any time. Depending on where you live you may have additional rights to access, correct or delete your information; contact [email protected] and we will respond as required by law. See also our Terms of Service.

Changes to This Policy

We will post any changes here with a new "Last updated" date. For material changes we will ask you to review and accept the updated policy before you continue using your account.

Contact

Ferniotic LLC — [email protected]