Privacy Policy

Last updated October 17, 2026

aislop is run by ByteLink (“we”, “us”). This policy explains what we collect when you use aislop at https://aislop.world, why, and what you can do about it. We collect as little as we can: there are no ads, no advertising or analytics trackers, and we never sell your data.

1. Just looking around

You can explore without an account. Your browser remembers the last place you visited and which notices you closed (in local storage, on your device only). Like every website, our hosting provider Cloudflare sees your IP address and basic request details to deliver the site and protect it from abuse; these are kept in short-lived logs.

2. When you sign in with Google

We get your Google account ID, name, email address and profile picture from Google. We use them to create your account, show your first name next to ideas you share and on places you rent, show your picture to you in the game, and send your email address to Stripe when you buy credits. A cookie keeps you signed in for up to 30 days; it's only used for signing in, and signing out removes it.

Google user data. We only use the basic profile information listed above, only for these purposes, and never for advertising. We don't sell it or share it with anyone except the providers listed below, and people only look at it for support, security or legal reasons. aislop's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

3. Ideas, votes and changes

Ideas you share are public, with your first name. Votes are stored with your account but not shown to others. When an idea is built, or you change a place you rent, the text of the request becomes part of that place's public history (without your name) and may appear on its own web page and in search engines. We keep your own list of changes (“My changes”) so you can find them again.

To build changes and check them against our rules, the request text and a description of the place are sent to AI providers (see section 5). Don't put personal information in your ideas.

4. When you buy credits

Purchases are sold through Stripe, which acts as the reseller (merchant of record). Stripe collects your card details, name and billing address directly, to take payment and calculate tax; we never see your full card number. We receive and keep a record of each purchase: what you bought, the amount, the fee, the date, and that you accepted the Terms of Service at checkout.

5. Who processes your data

• Cloudflare: hosting, storage, logs, and running the AI through Workers AI.
• Anthropic (Claude models, reached through Cloudflare Workers AI): request text and place descriptions, to build changes and write place descriptions.
• TypeSafe (moderation): request text, to check it against our rules before it's built.
• Stripe (payments, as reseller of credits): your email address, name, billing address and payment details.
• Google (sign-in): Google tells us who you are when you sign in.

These providers process data on our behalf under their own terms and security commitments. Some are in the United States, so your data may be processed outside your country; where the law requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses. We may also disclose data if the law requires it, or to protect players and the service from abuse.

6. Why we use it (legal bases)

To provide the service you asked for (your account, ideas, votes, rentals and purchases); for our legitimate interests in keeping the world safe, preventing abuse and fixing problems; and to meet legal obligations such as keeping tax and accounting records.

7. How long we keep it

• Ideas that aren't built disappear after 24 hours, with their votes.
• Your account and “My changes” are kept until you ask us to delete your account.
• Requests that were built stay in the place's public history without your name, as part of the shared world.
• Purchase records are kept as long as tax and accounting law requires, even after your account is deleted.
• Server logs are kept for a short time (days) for security and debugging.

8. Your rights

You can ask us for a copy of your data, to correct it, or to delete your account, by emailing privacy@aislop.world from the email address of your Google account. Depending on where you live (for example in the EU, UK or California), you may also have the right to object to or restrict how we use your data, to data portability, and to complain to your data protection authority. We'll answer within 30 days. You can also remove aislop's access in your Google account settings at any time.

9. Children

You must be at least 13 to sign in (or older, if your country requires it). We don't knowingly collect data from younger children; if you believe a child has signed in, email us and we'll delete the account.

10. Security

Data is sent over HTTPS, the sign-in cookie can't be read by scripts, and access to our systems is limited. No service is perfectly secure, but we'll tell affected players and the authorities about a breach as the law requires.

11. Changes

We'll update the date at the top when this policy changes, and tell signed-in players in the game about important changes before they apply.

12. Contact

Privacy questions and requests: privacy@aislop.world. See also the Terms of Service.