Privacy Policy

Effective version: 2026-09-08

Information collected

Inkwell processes account identity and session data, creator profile information, game metadata and uploaded files, developer-key metadata, consent records, usage events, and security logs. Raw developer keys are shown once and are not stored.

How information is used

Information is used to operate accounts, publish games, authenticate API requests, enforce limits, prevent abuse, troubleshoot the service, and meet legal obligations.

Service providers

Inkwell uses WorkOS for authentication, Cloudflare for compute and object storage, Neon for database hosting, Vercel for current domain routing, and GitHub for source control. These providers process data under their own terms and security programs.

Public information

Usernames, avatars, published game pages, descriptions, tags, screenshots, and game files are public. The name and email address collected for your account are private and are not shown on profiles, games, social features, or presence. Do not publish personal or confidential information you do not want others to access.

Play analytics and presence

Inkwell records pseudonymous play sessions, loading readiness, completion, active time, small creator-defined game events, and opt-in aggregate performance samples such as frame rate, frame timing, long tasks, and approximate heap use. Raw performance traces, resource URLs, IP addresses, and advertising identifiers are not stored for analytics. Aggregate analytics are visible only to the game creator. Current play counts are public. While you play, your public username and avatar may be shown to other players and supplied to that game through Inkwell’s presence API. Your private name, email, and account ID are never supplied to games. Games receive only an opaque, short-lived play-session identifier rather than your account ID.

Friends and direct messages

Favourites, follows, friend requests, accepted friendships, notifications, reviews, and direct messages are stored to provide social features. Direct messages are available only between accepted friends, but service operators may process them when needed for security, abuse prevention, support, or legal compliance. Blocking removes the friendship and prevents new direct messages.

Reports and moderation

Reports include the reporting account, selected reason, optional details, and the reported content identifier. Authorised moderators can review reports and relevant content, suspend accounts, remove content, and keep an audit record of moderation decisions.

Retention and security

Data is retained while needed to operate the service, meet legal requirements, resolve disputes, and prevent abuse. Play-session summaries are retained to preserve accumulated playtime and play history across game updates. Detailed game events, performance samples, and read notifications are ordinarily removed after 90 days; deleted or moderator-removed messages are ordinarily removed after 30 days. Some records may be kept longer when required for safety or law. Inkwell uses access controls, encrypted transport, secret hashing, isolated game origins, and rate limits, but no system can guarantee absolute security.

Your choices

You may update profile and game information, change or remove your avatar, revoke developer keys, remove games, reviews, and messages, unblock accounts, download a JSON copy of your account data, and delete your account through Account settings. Theme preference is stored only in your browser.

Changes

Material changes will use a new version and creators may be asked to review and accept it before publishing again.