Privacy at Plaiku

The short version

• No ads, no advertising ID and no tracking across websites.
• We do not sell anything about anyone.
• We do not train AI models, so children's words are never used by us for that.
• A grown-up can delete an account and everything in it at any time.

Sharing a game

Games are private until someone who made one sends it to a friend, which creates a play link. Anyone with that link can play and forward it. A guest's link ends with the guest's game, after one day; signing in keeps the game and its link. The game's title, pictures and spoken words are shared; creation requests, edit history, account details and other games stay private. Share only games you are comfortable letting others see.

A parent can update or stop sharing a link. Stopping sharing or deleting the account blocks new loads. A game already open can keep playing, and files already received cannot be recalled. A shared game is not indexed by search engines.

A parent can also share a game with the Plaiku community, where anyone can find it, play it, give it a heart or report it. Everyone sees the game, the title the parent chose, its pictures (a hero drawn from a child's drawing too) and a nickname made from a closed list of words, never a name or email. The idea's words and the hero's name are not shown. We count plays and hearts; a heart is kept as a scrambled code of the session that gave it, so it can be taken back and is deleted with the account. Three reports from different people hide a game until our team looks at it. The parent can take the game out of the community at any time; stopping its link or deleting the account takes it out too.

What we collect

• The sentence that is typed. Before it goes anywhere, we remove email addresses, phone numbers, long numbers and web addresses from it. It may still hold a first name, so please type no more than a first name.
• A spoken idea, when the microphone is tapped. The recording is turned into its sentence and then thrown away: it is never stored, by us or by the AI model that listens. Only the sentence is kept, like a typed one. The microphone is on only while its button shows it listening.
• A photo of a child's drawing, when a grown-up sends one to become a game's hero. An AI model that keeps nothing reads the drawing into a short description, and then the photo is thrown away: it is never stored, by us or by the model. The hero is drawn from the description and belongs to that family's game only. Please photograph the drawing, not a person.
• A photo added to an idea or to a change in a game, to show how something in the game looks (a car, a toy, a place). An AI model that keeps nothing reads it into a short description, and a photo with a real person in it is refused. Then the model that draws pictures cuts what the photo shows out of its background, so the game can show it as it is, and that picture is kept with the user's games, only for them, until their account or the guest's games are deleted. The drawing model's host is not one that keeps nothing.
• The games made from it, their settings (like age group and language) and every change made to a game.
• A record of what was asked and what was built, with the sentence cleaned the same way, so we can see what we could not build.
• The people who run Plaiku can open and play a game to check that it works and to fix what breaks. They see what was asked and the game, never who made it, and never show it to anyone else.
• Daily counts for shared games: opens, starts, finishes, errors, reports and visits to the maker. These counts contain no children's words, names, IP addresses or link tokens. A random identifier for one open page prevents duplicate counts; we keep only its hash for up to 48 hours, without cookies or device storage.
• Usage statistics, through PostHog: which pages are opened and how fast they load, errors, and when a game is asked for, made, changed, played, won, shared or reported, with how long it took. When a game is left, how long it was played, how many times it was tapped and how far it got, as numbers only. Which link or ad brought a visit: the tags our own links carry, the name of the website it came from (never the page or what was searched), and whether it was a click on an ad, never that click's code; it is kept only in that browser tab, until the tab is closed. They hold no children's words, names, game titles, email addresses, link tokens or IP addresses, and nothing is stored on the device. A family is counted under a scrambled code, not its account. Shared games send none.
• Session recordings of the maker, through PostHog, so we can see where the maker is hard to use. A recording shows the maker's own buttons and words. Everything a family brings is hidden on the device before anything is sent: what is typed, game titles, names and every word an AI wrote become asterisks, photos of drawings and photos added to an idea or a change are blocked, and games themselves are not recorded. Shared games are never recorded. Recordings are kept for up to 90 days.
• When someone reports a game: which game, and the reason they picked.
• For a parent who signs in: the email address from Google sign-in.
• For a parent who asks for emails about their games: that they agreed, when, and in which language, and which emails were sent. We write at most once a week, only about their own games. Every email has a link that stops them, and they can be turned off in My games.
• For a parent who buys credits: which pack, the payment's id, and the credits it added and used. Dodo Payments takes the payment; we never see card details.
• One cookie that keeps a browser signed in, or known as a guest, and a short one while signing in. No other cookies. Whether sound is on or off is kept on the device itself.
• Our hosting and network providers see technical details such as an IP address, to deliver the site and stop abuse.

Who helps us

• OVHcloudHosts the site. Germany.
• RenderHosts the fallback. Frankfurt, Germany.
• NeonHolds the database. Frankfurt, Germany.
• CloudflareNetwork and protection against abuse. Worldwide.
• OpenRouterPasses the sentence to the AI models that understand it and build the game, turns a spoken idea into its sentence, reads a photographed drawing or a photo added to an idea or a change into words, and draws the pictures, like the hero. United States.
• ElevenLabsThe spoken voice in games. It can say the hero's name. United States.
• PostHogUsage statistics, without children's words or IP addresses. United States.
• GoogleSign-in, and in the Android app, Google Play takes payment for credits. We receive the order's id and the pack bought, never card details.
• Dodo PaymentsTakes payment when a parent buys credits on the website, as the seller of record. It receives the parent's email address, never a child's words.
• ResendSends the emails a parent asked for about their games. It receives the parent's email address and the email itself: the games' titles and how often they were played. United States.

AI companies and what they keep

We do not train any AI model. The companies above have their own rules for what they keep, and those rules apply too.

The sentence, a spoken idea's recording, a drawing's photo, the reading of a photo added to an idea or a change and the game's text go through OpenRouter only to hosts that keep nothing and do not train on what they receive. Hosts linked to China are never used. Pictures are drawn from a short description of the game, under the image model's own rules.

How long we keep things

• A spoken idea's recordingNot kept
• A drawing's photoNot kept
• A photo added to an idea or a changeKept as the game's picture, cut out, until the account (or a guest's games) is deleted
• Guest games and their data1 day after they are made
• A parent's gamesUntil the parent deletes them or the account
• Records of what was asked30 days
• Shared-game counts / duplicate prevention30 days / up to 48 hours
• Reports90 days
• A community game, its hearts and play countUntil the parent takes it out, stops its link or deletes the account
• Game Cup winners (which game won a week, and its hearts)Kept, as the Cup's record; a game's own hearts go with the game
• Usage statistics1 year
• Sign-in sessionsEnd after 30 days (guests: 1 day)
• Credits and their paymentsUntil the parent deletes the account (Dodo Payments keeps its own payment records)

Parents' rights

You can see every saved game in My games. You can delete your account and everything in it at any time.

Questions or requests? Write to eliraneln@gmail.com.

Children

Children should use Plaiku with a grown-up. Signing in and deleting an account ask a grown-up to pass a small check first. Every game has a Report this game button.