Privacy Policy

This policy explains what information Vaporworks collects, why, and your choices. Vaporworks is run by [Owner's legal name] ("we", "us").

What we collect

• Account: your email address and sign-in details, handled by our sign-in provider, Clerk.
• Billing: your subscription and purchases. Card details are entered on Stripe's checkout and stay with Stripe. We never see or store your full card number.
• Your city: everything you build and set up in the game, including agents, projects, tasks and their results.
• API keys you add: for example your Anthropic key. They're encrypted with a key unique to your account and used only to run your agents.
• Technical data: limited logs (such as errors and request times) to keep the service working and secure.

How we use it

To run the game, process payments, keep accounts secure, provide support, and send important service messages, such as billing problems or changes to these policies. We don't sell your personal information, and we don't use your city's content to train AI models.

Who we share it with

Only the service providers that run Vaporworks for us, under contract:

• Clerk (sign-in)
• Stripe (payments)
• Fly.io (hosting)
• our database host

When your agents run, your instructions and the material you give them are sent to the AI and app providers you've connected (such as Anthropic), using your own keys and under their privacy terms. We may also disclose information when the law requires it.

Cookies

We use only the cookies and storage needed to keep you signed in and remember in-game preferences. We use no advertising trackers.

How long we keep it

While your account is active. If your subscription ends, your city is deleted 90 days later. If you delete your account, your city and saved API keys are erased immediately. We keep billing records as long as tax law requires.

Your choices and rights

You can see and change your information in the game, and delete your account at any time. Depending on where you live, such as California or Canada, you may have the right to access, correct or delete your personal information, or to know how it's used. Contact us to exercise these rights. We won't treat you differently for doing so.

Security

Each city runs separately. API keys are encrypted, and connections use HTTPS. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Children

Vaporworks isn't for children, and we don't knowingly collect information from anyone under 18.

Contact

support@usevaporworks.com. We'll post changes to this policy here, and tell you about significant ones.