Last updated: October 17, 2026
Privacy Policy
Centuriation is operated by Ferniotic LLC, a Massachusetts limited liability company ("we", "us"). This policy explains what personal information we collect, how we use and share it, how long we keep it, and your choices.
What We Collect
Account information
Email address, display name, optional bio, profile picture and time zone, a securely hashed password (if you use email sign-up), and the date you accepted our Terms. If you sign in with Google or GitHub we receive your name, email and profile picture from that provider; we do not store their access tokens.
What you type or upload
Topics you enter, files you upload and the text we extract from them, game design documents and edits, gallery titles and descriptions, and notes on variant requests.
Learning and game data
Play history, scores, per-question responses, topic and concept mastery, identified misconceptions, and adventure progress.
Badges and daily challenge results
When you are signed in, we record the badges you earn (which badge, when, and the run that earned it) and your ranked daily challenge attempt (score, accuracy and time). Your daily challenge result appears on a public daily leaderboard under a shortened form of your name (first name and last initial, or the first characters of your email address). Both are included in your data export and deleted with your account.
Shared replays
For some game types, the game records how you played a run — the moves you made and when (taps, swipes, key presses, pauses) — so the run can be replayed. This recording stays in your browser and is discarded unless you choose "Share replay" on the results screen. If you do, we store it (with the run's score) and anyone with the link can watch the run played back, with your first name and last initial. You can withdraw a replay link at any time; replays are included in your data export and deleted with your account, or when the run or game is deleted.
Billing information
Your subscription plan and status, and Stripe customer and subscription identifiers. Card details are collected and stored by Stripe; we never see or store your card number.
Technical data
Server logs include a shortened form of your IP address (the last part removed), the pages and API endpoints requested, and timestamps. Error reports include browser details, the page URL and your account ID (not your email).
How We Use It
- to provide the Service — generate games, track your progress, run your account and billing;
- to keep the Service safe — rate limiting, abuse prevention, security and fraud monitoring;
- to fix and improve the Service — debugging, usage statistics and quality monitoring;
- to send transactional email — verification, password resets, billing receipts and renewal reminders, and status updates about things you requested. We do not send marketing email.
We do not sell your personal information and we do not use it for targeted advertising.
What Others Can See
If you submit a score to a leaderboard, publish a game to the gallery or create a share link, other people can see your first name and last initial (or a shortened form of your email if you have no name), your score, and the game's topic, title and description. Your email address and picture are never shown publicly. You can avoid this by not publishing or sharing; you can unpublish a gallery game at any time.
When you publish a forged game you can also choose to let others remix its design. This is off unless you tick it. If you do, once the game is approved, Enterprise users can read the design document that game was built from and save their own copy to edit, credited to your first name and last initial. You can stop sharing at any time; copies other people already saved are theirs and stay with them.
Service Providers
We share personal information only with providers that process it for us to run the Service:
- Google Gemini API — topics, uploaded-file text, design documents and prompts are sent to Google to generate content. We use Google's paid API service, under which Google does not use your inputs or outputs to train its models; Google may retain them for a limited period to detect abuse.
- Other AI model providers — when you ask the game forge to build a custom game, your design document may be processed by a coding model from Google or, as a fallback, Anthropic or OpenAI, under their API terms.
- Stripe — payments and subscriptions.
- Google and GitHub — sign-in, if you choose them.
- Mailgun — sending email.
- DigitalOcean — hosting, databases and file storage (United States).
- Cloudflare — content delivery, security and determining your country.
- Sentry and Grafana Cloud — error tracking and server logs.
We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets.
Cookies and Local Storage
We use cookies only to keep you signed in and to protect sign-in (session and security cookies set by our authentication system). We also store a few items in your browser's local and session storage: sound and vibration preferences, game options, unsent game results while you are offline, and unsaved drafts. We do not use advertising, analytics or third-party tracking cookies. Our Service does not respond to browser "Do Not Track" signals, because we do not track you across other sites.
How Long We Keep It
- Account, game and learning data: while your account exists.
- Generation logs: 90 days. Cached AI results: 90 days. Completed adventure runs: 30 days.
- Game pacing records (which stage of a game you reached, and your accuracy at each stage): 90 days.
- Billing event records: 2 years. IP addresses in our admin audit log: 1 year.
- Server logs and error reports: according to our providers' retention settings, generally no more than 90 days.
Deleting Your Account
You can delete your account from your profile page or by emailing [email protected]. Deletion cancels any subscription, deletes your Stripe customer record, and removes your profile, progress, mastery and misconception data, uploads, designs, games only you played, generation logs, API keys and webhooks.
Some data is kept without any link to you: games that other people have already played, shared or published (with their topic and content, because others rely on them), copies of a design you let others remix (saved by them, with the credit to you removed), topic outlines (with the text you typed replaced by "[deleted]"), and completed adventure content. Copies in server logs, error reports and backups expire on the schedules above, and information already processed by an AI provider is subject to that provider's retention.
You can download a copy of your data at any time from your profile page (Export).
Security
We use encryption in transit, hashed passwords, access controls, and isolated sandboxes for generated games. No system is perfectly secure; we will notify you and the authorities if a breach affects you as required by law.
Age Requirement
Centuriation is only for people aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact [email protected] and we will delete it.
Where We Operate
We are based in, and store data in, the United States. The Service is not offered in the European Economic Area, the United Kingdom or Switzerland.
Your Choices and Rights
You can view and correct your profile, export your data, and delete your account at any time. Depending on where you live you may have additional rights to access, correct or delete your information; contact [email protected] and we will respond as required by law. See also our Terms of Service.
Changes to This Policy
We will post any changes here with a new "Last updated" date. For material changes we will ask you to review and accept the updated policy before you continue using your account.
Contact
Ferniotic LLC — [email protected]