Privacy Policy
Effective September 13, 2026 · MattyJacks LLC, New Hampshire, USA
Loading policy…
Includes 25% platform cut; never added on topGet coins →
Effective September 13, 2026 · MattyJacks LLC, New Hampshire, USA
Loading policy…
Includes 25% platform cut; never added on topGet coins →
| Data category | Purpose | Retention | Control |
|---|---|---|---|
| Account & profile | Run accounts, Clans, saves | While active | §1–2 |
| Gameplay & telemetry | Progress, leaderboards, matchmaking | While active | §2 |
| Coins & transactions | Billing, tips, campaigns | Tax & records law | §7 |
| Technical & safety | Security, fraud, moderation | As needed + legal holds | §8 |
| Cookies & prefs | Sign-in, settings, consented analytics | 7-day banner renewal | §4 |
| VocRehab rehearsals | Practice transcripts you save | §7 schedule; deletes with account | §2A |
This policy describes how MattyJacks LLC (“MattyJacks,” “we,” “us,” or “our”) handles information across the 4weird Games websites, games, persistent-world/MMORPG modes, server rentals, stock media, accounts, Clans social features, bot platform, agent rentals, Vibe Coins economy, Teams/enterprise workspaces, VibeCodeWorker surfaces, exhibits, APIs, the Vocational Rehabilitation (VocRehab) practice module (Section 2A), and related services (collectively, the “Service”). It applies whenever you visit or use the Service, on 4weird.com or any domain where the Service is served.
MattyJacks LLC, New Hampshire, USA, is the controller (or “business”) for information collected through the Service. Contact: matt@mattyjacks.com. Exercise your privacy rights yourself anytime at /my/rights/; special cases (including family requests for a deceased user, with proof of authority) are handled by email; see Section 11.
Account and identity. Email address, password-authentication records, display name, public handle, permanent human ID (bot users), and account timestamps.
Profiles and preferences. Display name, handle, account settings (friend requests, playtime visibility, marketing email, Kids Mode flag), accessibility controls, and creator submissions.
Games. Cloud-save content (game, slot 0-3, versioned data ≤1 MiB, including any permanent cheat-mode mark; slot 0 can never be marked), gameplay telemetry (kills, actions, active seconds, deaths), matchmaking/lobby/presence records, and leaderboard aggregates (handles + totals only).
Clans and user content. Clans, memberships, posts, comments, uploaded images (≤1 MB; PNG/JPEG/WebP/GIF; hash + storage path), and moderation reports (anonymous reports allowed; CSAM reports trigger immediate quarantine and evidence preservation for authority referral).
Bots. Bot usernames, human-ID links, and API-key hashes (key secrets are shown once and never stored).
Vibe Coins and transactions. Coin ledger and grant entries, daily-claim streaks, referral codes and referral links, signup-trial records (privacy-preserving IP hash), checkout sessions and order reconciliation by email, voluntary Support transfers (tips, subscriptions) and gift-based launch-Campaign backing. Campaign pages publicly show the campaign story, goal, raised totals, and backer counts; individual contribution amounts are visible only to you and the campaign creator. Card and payment details are processed by our checkout provider (Shopify and/or its payment processors); we do not store full payment-card numbers.
Agent rentals and Teams compute. Listings, bookings, escrow and metered-usage records, provider references, org/team/project/room memberships and roles, cloud provisions and usage, wallet ledgers, and audit entries.
Multiplayer snapshots + presence. In persistent-world/MMORPG modes we relay your handle, server ID, age band, position (x/y), hp, gold, kills, floor/sector, progress, heartbeat timestamps, and join/leave events to peers in the same shard so shared rooms stay in sync; demo and solo modes send nothing.
Server rentals + hosting. When you rent or join a hosted shard we store server configs (mmorpg_servers) and session rows (mmorpg_sessions: join/leave times and minutes billed) to run and bill the rental; rental quotes touch no ledger until you confirm.
Pexels searches. Stock-media searches send the query text (2-100 chars), paging, and orientation/size/color/locale filters to Pexels; your IP is visible to Pexels when it serves the request.
Validation + creator tooling. Bouncer validation sends check emails to UseBouncer for deliverability screening; phone-suppression lists you upload are checked against EasyDNC.org; Blender scene files you open stay as files you supply; DPS donor hardware signals record opt-in device contributions; terminal inputs you type never leave your device; Discord IDs and messages you link are handled via Discord.
Communications. Support and rights-request messages you send us, including verification and authority documents for special-case requests.
AI and voice/camera features. Text you send the Gaming Buddy (messages, transcripts, screen text), one downscaled image per message when you share your screen or attach a camera frame, and voice replies we generate for you. Screen snapshots and camera frames are processed for that turn only; never stored, never logged. Microphone audio for interruption detection never leaves your device (only transcripts are sent). Avatar, voice, camera, purchase, and cookie choices tied to your account or device.
Age checks (never collected). Date of birth entered in a game age gate is checked on your own device, in memory, for that check only. It is never sent to our servers, never written to any database, and never stored in your browser; there is nothing to export or delete because we never receive it. The Kids Mode flag is an ordinary account/device preference, not age data.
Family accounts. Full accounts store only a self-declared band - Teen (13-17) or Adult (18+) - never a birth date. Parent accounts (Adult 18+ only) hold their children's handles (username#1234), parent-attested age bands (Kid 0-12, Teen 13-17, Adult 18+), play controls (feature allowlists, budgets, rate caps, time limits, hours), child-attributed parent coin ledger entries, and daily play totals; never passwords (scrypt hashes only, never exported) and never session tokens. Children have no birth dates on file because none are ever asked. A parent's data export includes their children's non-secret records; deleting the parent account erases the children's accounts with it.
Ghosts and timer. Org work tracking holds contracts, timer sessions with heartbeat activity counts, worker-attached proof screenshots (≤1 MB, same handling as clan images), and hypothetical Ghost records. Heartbeats prove a visible tab, never screen contents; screenshots are supplied by the worker, never captured. Ghost books are org-member-visible (scoped watchers see only their scope) and export with the org member's own data on request.
Consent and purchase records. Cookie-banner choices (7-day renewal), accepted purchase quotes, charge receipts, and idempotency records that prove what you confirmed and what we charged. We offer no gambling, lotteries, loot boxes, gacha, paid draws, prize draws, raffles, or wagers anywhere on the Service, so we collect no wagering, odds-participation, or prize records of any kind.
Automatic technical data. IP address, browser and device characteristics, request logs, pages or features used, approximate location derived from IP, security and fraud-prevention events (including rate-limit and trial-abuse signals). Games and accessibility controls may store preferences and progress in your browser (local storage).
Sources and what we do not collect. We collect directly from you, automatically from your device, from parents who create Child accounts, and from providers who confirm checkout or safety signals. We do not collect device precise GPS, phone/SMS numbers, contact lists, calendars, or biometric identifiers/voiceprints. VocRehab address lookup and Google Maps routing are paused; coordinate-based travel estimates run offline and we do not read device location. Voice is generated or transcribed per turn, microphone interruption audio never leaves your device, and screen/camera frames are processed per turn only and never stored by 4weird. We store salted IP hashes for trial-abuse and safety records; hosting, delivery, and analytics providers may independently process IP addresses and request metadata as described below. Do not enter sensitive health, disability, or case information into VocRehab reports or free-text fields; our current Supabase arrangement is not represented as HIPAA-compliant.
Ephemeral by default; text only; no audio, ever. VocRehab rehearsals live in your tab until you explicitly tap Save while signed in. Microphone input is transcribed on your device and only the text you send is transmitted — we never record, upload, or store audio, and there is no audio export because no audio exists.
What saving stores. Saving persists the text transcript plus the report card (per-turn praise/tweak/invitation and axis scores) with the job, difficulty, and mode in the session record. Saving requires the separate voice-rehearsal-save consent (in addition to session-assist, roleplay-save, data-export, and course-sync); guests cannot save. Counselors see only rehearsals you explicitly saved or shared — never in-progress or discarded practice.
Redaction + export. Saved text passes PII redaction (email, SSN, dates, phone, ID numbers) before render and storage, and blocklisted topics (legal/medical conclusions, benefits guarantees, identifier requests) are refused with a rephrase prompt. Your export includes saved transcripts under the existing roleplay-turns allowlist; raw audio is categorically excluded. Grades and report cards are an automated practice signal, not a hiring decision.
Retention. Saved VocRehab work follows the Section 7 schedule and deletes with your account at /my/rights/, subject to the Section 11 exceptions. Do not enter Social Security numbers, claim numbers, case numbers, or birth dates — VocRehab never asks for them.
We use information to provide, secure, maintain, improve, troubleshoot, personalize, and administer the Service; authenticate users; preserve progress and settings; operate Clans, bots, rentals, workspaces, and leaderboards; process and reconcile transactions; communicate about the Service; prevent fraud, abuse, and security incidents; moderate content and protect safety; and comply with legal obligations. We may create aggregated or de-identified information and use it for any lawful business purpose.
Where the GDPR/UK GDPR applies, our legal bases are: contract (providing the Service you request, Art. 6(1)(b)); legitimate interests (security, fraud prevention, moderation, service improvement; balanced against your rights, Art. 6(1)(f)); consent (optional analytics/marketing email, Art. 6(1)(a), withdrawable anytime); and legal obligation (records, safety reporting, responding to lawful requests, Art. 6(1)(c)).
A cookie banner loads on every page until you choose, and asks again once every 7 days. You get real options: Accept all (which we strongly recommend; it funds free play, keeps every feature working, and lets us improve the Service for any purpose described here), Reject non-essential, or Customize by category. Categories:
Games and accessibility controls also use browser local storage for preferences and progress (including 4weird-a11y, theme/voice/avatar prefs, 4weird-kids-mode, fw-favorites-v1, swarm-pins, docs-progress, and per-game highs/mute flags; consent choice fw-cookie-consent-v1). Essential cookies include sb-* auth session, kid_session (child login), and bot_tester (bot-tester restriction). Clearing site data removes them and returns the banner; date of birth is never stored anywhere. You can change your choice anytime by clearing site data (the banner returns), with browser controls, Global Privacy Control signals (treated as a reject-non-essential request where required by law), “Do Not Track”-respecting settings where honored, or Google’s opt-out tools. Legacy static game pages and guides no longer inject Google Analytics because they do not contain the app consent manager. We send no browser push notifications; the service worker is offline game caching only, with no background tracking. Marketing email is off by default with unsubscribe in every message; we send no marketing SMS/push.
We provide your information to private third parties only as needed for the purposes above, to:
dpgame.xonotic.workers.dev, a third-party host. That operator may receive network metadata; the game may establish direct peer-to-peer connections that expose network addresses to other players. Game content and data handling there are outside 4weird's control. Do not submit personal or case information to it;VCW_SERVICE_URL, the VibeCodeWorker status/dashboard routes request its /health endpoint without forwarding the signed-in user's account data, prompts, or cookies. The configured host receives an ordinary health request and server-network metadata; other user-configured compute endpoints can receive workload inputs as described above;We do not sell personal information for money and do not share it for cross-context behavioral advertising. Providers act as processors/service-providers on our behalf under their terms (including Standard Contractual Clauses / Data Privacy Framework where they offer them) and may process it outside your state or country (see Section 6). We will post material subprocessor changes here where practical. Receipts and ledgers carry no personal details beyond your account reference.
We are based in the United States and the Service is operated from the U.S. If you use the Service from the EEA, UK, Switzerland, or elsewhere, your information is transferred to and processed in the U.S. and other provider locations. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) and retain information only under the bases in Section 3.
We retain information only as long as reasonably necessary for the purposes in Section 3: while your account is active; for records, security, dispute resolution, and legal compliance afterward; safety and CSAM evidence as required for authority referral and legal claims; and financial/transaction records as tax and payments law requires. Indicative schedule: account/profile and game saves while active; coin lots expire 1 year after receipt (90-day purchased-lot refund window); Crowns expire 1 year, unlock 30 days; child sessions expire 30 days; bot-key logs per your setting (default 90 days, up to ~5 years); public lobbies visible 30 minutes; org invites up to 2 years; transaction/tax records per tax/payments law. When you delete your account at /my/rights/, we delete or de-identify your personal data across our systems except where retention is permitted or required by law (Section 11 lists the exceptions). Backups age out on their normal cycle (weeks, not years).
Multiplayer + hosting retention: server configs and session rows (join/leave, minutes billed) are kept as billing records per tax law with minimal fields; live presence is ephemeral and shards follow the 30-minute lobby convention above.
We use reasonable administrative, technical, and organizational measures; including authentication, row-level database authorization, hashed bot-key storage, input validation, rate limiting, CSRF origin checks, and append-only money ledgers; designed to protect information. However, no system, transmission, or storage method is completely secure. You use the Service and submit information at your own risk, and you must keep your credentials and bot keys secret.
Depending on your jurisdiction and applicable law, you may have the rights below. We honor them as required and extend self-service access, portability, correction, and deletion to all signed-in users through /my/rights/:
New Hampshire law governs our agreement (see Terms). Where another jurisdiction grants you non-waivable rights, those rights apply in addition and nothing here limits them. California “Shine the Light” requests may be sent to matt@mattyjacks.com.
We do not make decisions producing legal or similarly significant effects about you by purely automated means. Automated systems (spam triage, cheat detection, AI-assisted moderation, fraud guards) support human review; significant actions; account termination, CSAM referral, rights-request decisions; involve human judgment, and you may ask for human review of any such decision.
Your own account; self-service only. Sign in and use /my/rights/ to download your data (access/portability) or permanently delete your data and account (erasure). Only the signed-in account holder can delete their own account - requests for anyone else’s data are refused there. To stop spam and abuse, self-service requests require sign-in, same-origin verification, per-account and per-network rate limits, a typed confirmation, and a short review window; confirmed deletions are final and immediately sign you out.
Special cases; email. If you cannot use self-service (for example, you are family or a legal representative of a deceased or incapacitated user seeking deletion, or an authorized agent with written permission), email matt@mattyjacks.com from an address we can verify, describing the request, the account (email/handle), your relationship, and attaching proof of authority (e.g., death certificate plus proof of kinship or legal appointment; agents: signed permission plus identity verification of the principal). We verify every such request, may ask for the minimum additional proof needed, and act only when satisfied the request is legitimate. We never accept third-party deletion demands without authority.
Timing and verification. We verify identity (signed-in session for self-service; documented authority for email requests) and respond within the applicable deadline; within one month for GDPR requests (extendable by two months for complexity) and within 45 days (extendable) for U.S. state-law requests. We may retain or decline to delete information where permitted or required by law, including account-security and fraud-prevention records, completed-transaction and tax records, safety/CSAM evidence under legal hold, information needed for legal claims, and content others lawfully retain; and we will explain any denial and your appeal options.
Direct accounts are 13+ only (Teen 13-17, Adult 18+) - the Service is not directed to children under 13, and we do not knowingly collect their personal information through direct signup (which requires a Teen/Adult band and rejects under-13). Under-13 children may use the Service only on a parent-created Child sub-account (COPPA verifiable parental consent: an Adult 18+ parent signs up and creates the child in Account → Family, attesting the child's Kid/Teen/Adult band). We collect no date of birth from anyone - bands only - and apply high-privacy defaults to under-18 accounts (no behavioral advertising for signed-in players, minimal data, parental limits enforced server-side, no checkout/tips/subscriptions/payouts from child sessions), consistent with COPPA, the EU GDPR consent ages (13-16 by member state), the UK Age Appropriate Design Code, the EU Digital Services Act, California's Age-Appropriate Design Code Act, and other applicable child-safety regimes. If you believe a child under 13 provided information through a direct account, contact matt@mattyjacks.com so we can delete it. Parents export and erase their children's data together with their own at /my/rights/. Account holders must be 13 or older (see Terms).
Kids-band servers are join-gated and parental controls apply in-shard; bands only, no date of birth is collected for shard access.
The Service may link to third-party websites or services; their privacy practices are governed by their own policies, not this one. We may update this policy at any time by posting an updated version and changing its effective date; material changes will be highlighted where practical. Your continued use after the effective date is subject to the updated policy.
MattyJacks LLC · New Hampshire, USA · matt@mattyjacks.com · Self-service rights: /my/rights/ · Deceased-user family and other special-case requests: email with proof of authority as described in Section 11.