Privacy Policy

Last updated: October 2, 2026

SiGameGen is an SI game generator at sigamegen.com: you describe a game in a sentence, a code model writes it as a single HTML5 file, and you can play it, change it by chat, share it or download it. SI is short for super intelligence, which was formerly called AI. This privacy policy explains which personal data that process touches, which companies help us run it, and when the data is erased. Each part of this privacy policy names the real systems involved.

Scope of this privacy policy

This privacy policy covers sigamegen.com, the game workspace, the share pages where other people play your games, the gift center and our emails. Google and Stripe show their own pages during sign-in and checkout, and their own notices apply there. Here “we” is the SiGameGen team and “you” is any visitor or user.

Information we collect

• Your account. An email address. If you continue with Google, Google also shares your name, profile picture and Google account ID.
• Game prompts and code. Each idea you type (up to 2,000 characters), each change request, the tier you picked and the HTML file the model writes for every version, plus that file’s title, size and the token counts the model reports. There is no upload feature, so everything we hold about a game began as text you typed.
• Credits and orders. Your balance and a ledger of each movement in it: purchases, gifts, credits held for builds and automatic refunds. Each order is saved with its pack, price, currency, date, status and Stripe’s confirmation, which can list the name, email and billing country you typed at checkout. Card numbers are typed on Stripe’s page; we never see them.
• Ratings and invites. Stars and comments you leave in the gift center, with the page you were on; your invite code and the accounts that joined through it.
• Technical data. The IP address and browser of each sign-in session, the country you signed up from (as Cloudflare reports it) and your latest activity time. We also use IP addresses to throttle repeated sign-in attempts, and Cloudflare keeps short-lived request logs for debugging.

What happens when you build or change a game

1. A moderation model (Llama Guard) on Cloudflare reads the text you typed. If it blocks the request, nothing else happens and no credits are taken.
2. The credits for the build are held and the job joins a queue.
3. A coding model on Cloudflare Workers AI writes the game: DeepSeek V4 Flash for Fast, Kimi K2.7 Code for Pro. For a change, the model also receives the full code of the version being changed. Cloudflare hosts both models; we send nothing to DeepSeek, Moonshot AI or any other model company.
4. The finished file is saved in our Cloudflare R2 storage, labelled with the build ID and your account ID.
5. We keep a record of the build (your text, tier, credit cost, timing, token counts and any error) to refund failures and answer support questions.

Games run in a sandbox

Nothing inside a game can add to the data this privacy policy describes. Every game, in the workspace or on a share page, is served with a strict sandbox policy: it runs in an isolated origin, so it cannot read your login cookie or call our API as you, and it cannot load anything from the internet, send network requests, submit forms or store data in the browser. That is also why high scores reset when the page reloads.

Shared games are visible to anyone with the link

Share copies a link of the form sigamegen.com/g/… for the version you are playing. Anyone who opens it can play that version, see its code in their browser, and read its title and the text behind it: your original idea for a first build, or your change request for a later one. Game IDs are long and random, never listed, and share pages ask search engines not to index them, but a link posted in public is public. This privacy policy cannot recall a link you posted, so keep personal details out of prompts you plan to share.

How we use your information

• to run your account and keep it secure;
• to build, store and serve your games, including on share pages;
• to take payments, add credits, refund failed builds and reply to support emails;
• to prevent fraud and misuse, and to enforce our Terms of Service;
• to see which features people use.

We never sell personal data or use it for ads, we do not train models on your prompts or games, and there is no public gallery: a game appears only where you share its link.

Companies that process data for us

• Cloudflare hosts our servers, database and storage, sends sign-in emails, and runs the moderation model and both coding models.
• Stripe processes card payments via our in-house payment hub.
• Google confirms who you are when you choose Continue with Google.

No other company receives your prompts or game code. These providers may handle data in the US or elsewhere under their own transfer safeguards. Beyond what this privacy policy describes, or what the law compels, we share your personal data with no one.

Cookies and browser storage

Our only cookie is sid, an essential sign-in cookie that lasts up to 60 days, renews while you use the site and is cleared at sign-out. We set no advertising or tracking cookies, though Google and Stripe set their own in their sign-in window and checkout page. A friend’s invite code is kept in local storage for up to 30 days, and a closed offer banner stays hidden until the end of your visit. Games cannot set cookies or use storage at all.

Analytics

Statistics come from Umami, open-source analytics software that we run ourselves on our own domain. It counts page views and a few actions, such as building, sharing, downloading or deleting a game, opening checkout and claiming a gift, along with referrer, browser, device, language and a rough location estimated from your IP address. It sets no cookies, keeps no readable IP addresses, and its events never contain your prompts or code.

How long we keep your data

• Account information: while your account exists.
• Games: each version stays until you delete it. Deleting a version erases its HTML file, and its share link stops working for new visitors, though a browser that already loaded it may keep a cached copy for up to ten minutes. The build record (text, tier and cost) stays for billing. To remove a whole game, delete each of its versions.
• Sessions: up to 60 days. A sign-in link expires after 20 minutes, and its record is deleted a day after that.
• Orders and credit history: as long as tax and bookkeeping law requires, even after your account is closed.

An hourly cleanup job removes expired sessions and old sign-in links, so the limits set in this privacy policy apply automatically.

Deleting your account

Email support@sigamegen.com from your registered address. In the following 30 days we erase every game file you built, which breaks your share links; sign out all your sessions; wipe the prompts and change requests saved with your builds; swap your email for an anonymous placeholder; and clear your name, photo, Google ID and country. Tax rules make us keep order records and credit history, and any ratings you sent stay without your email.

Security

Connections are encrypted with HTTPS. We keep session tokens and sign-in links only as one-way hashes, which means a stolen database copy would not let anyone log in as you. The back office is open to a handful of admins with long random keys, and game IDs are too long to guess.

Emails

We send only the sign-in links you request, replies to your messages and the occasional important notice about the service or this privacy policy. Stripe may email a receipt. There is no marketing email.

Your privacy rights

Whatever country you live in, you can ask for a copy of your personal data, a correction, or the deletion of your account. Residents of the EEA, the UK, California and other regions with data protection laws may also object to or restrict processing, receive your data in a portable format and complain to a data protection authority. We do not sell or share personal information as California law defines it, and using a right never changes the service you get. To use any right in this privacy policy, email support@sigamegen.com from your registered address.

Under EEA and UK law we rely on the contract between us (account, builds and purchases), legitimate interests (security, abuse prevention and statistics), legal obligation (tax records) and, where it is legally required, consent.

Children

SiGameGen is for adults aged 18 and over, even though many of its games suit all ages. We do not knowingly keep data about minors; tell us about a child’s account and we will delete it.

Changes to this privacy policy

When our data practices change, we revise this privacy policy and the date at the top, and announce significant changes on the site or by email. Questions about this privacy policy go to support@sigamegen.com.