Privacy Policy

Effective September 29, 2026

1. Who is responsible

NeverPlayAlone (“we”, “us”) runs neverplayalone.ai and the Console at console.play.neverplayalone.ai (the “Service”) and decides how your personal data is used for it. This policy explains what we collect, why and your choices. It applies together with our Terms of Service.

2. What we collect

Your account

• Username, email address and whether it is verified.
• Your password, stored only as a salted hash we cannot read back.
• Your plan, credit balance and the history of credits added and spent.

Payments

• For TAO payments: the public address of the wallet you verify, the signed verification message, and the transfers it sends to us (amounts, times, transaction identifiers). These are public on the blockchain anyway.
• We never receive your seed phrase, wallet password or private keys.

What you create and do

• Your servers and worlds, including their files and settings.
• Your characters: names, roles, stories, personality, voice and skins.
• The orders and messages you send to your companions, their replies, and the chat in your worlds.
• What companions do in the game: their actions, results, errors and the game state they observe (for example position, health and inventory).
• The Minecraft usernames of players who join your worlds, and what they say in chat there.

Technical data

• IP address, browser and device information and request logs, used for security, rate limits and fixing problems.
• Product events in the Console (for example opening a live view or sending an order), recorded by us to understand how the Console is used. We do not use third-party analytics or advertising trackers.

Cookies and browser storage

The Console uses one cookie to keep you signed in, and your browser’s session storage to remember the email waiting for verification. Both are necessary for the Service to work. The public website sets no cookies.

3. Why we use it

• To provide the Service (performing our contract with you): accounts, servers, companions, credits, payments and support.
• To keep it safe (legitimate interest): preventing fraud and abuse, enforcing limits and our terms, security logs and backups.
• To improve our companions (legitimate interest): studying and training on gameplay — orders, companion actions, results and in-game chat — so companions understand requests better and fail less. Your email and password are never part of this data. You can ask us to exclude your worlds (see section 7).
• To email you about your account: verification links, password resets and important service notices. We do not send marketing email without your consent.
• To meet legal obligations, for example keeping payment records.

4. Who processes it for us

We share data only with providers that help us run the Service, under agreements that limit their use to that purpose:

• Hosting: our servers and backups run on rented servers in the European Union.
• AI model providers (currently OpenAI): what a companion observes in the game, the orders it receives and its conversation are sent to generate its next actions and replies.
• Email delivery: Amazon Web Services (Simple Email Service) sends account emails.
• Blockchain: TAO transfers happen on the public Bittensor network, which we do not control.

Some providers, such as AI model providers, process data outside the European Union, including in the United States. Where required, those transfers rely on appropriate safeguards such as standard contractual clauses. We do not sell your personal data or share it for advertising. We may disclose data when the law requires it or to protect people or the Service.

Players in your worlds, and you in theirs, can see each other’s Minecraft names and chat, as in any multiplayer game.

5. How long we keep it

• Account data, worlds and characters: while your account exists.
• Companion logs and chat: while the world exists, and at most as long as needed for the purposes above.
• Backups of worlds and the database: kept for a limited time, normally up to 14 days, then deleted.
• Payment and credit records: as long as accounting and tax law requires.
• Data already used to train or evaluate a model cannot be removed from that model, but we stop using your data for new training once you ask us to.

When you delete your account, we delete your account, servers, worlds and characters. Copies in backups disappear as the backups roll over.

6. Security

We use encrypted connections (HTTPS), hashed passwords, access limited to people who need it, and isolated servers per world. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

7. Your rights and choices

Depending on where you live, including under the EU and UK GDPR, you can ask us to:

• give you a copy of your data, or send it to you in a portable format;
• correct it;
• delete it, together with your account;
• stop or limit using it, including leaving your worlds out of companion training;
• review any decision you think was unfair.

Contact us (section 10) and we will answer within one month. You can also complain to your local data protection authority.

8. Children

The Service is not meant for children under 13, and we do not knowingly collect their data. If you are under the age of digital consent where you live (16 in some countries), a parent or guardian must agree to this policy for you. If you believe a child has given us data without that consent, contact us and we will delete it.

9. Changes

We may update this policy. We will change the date above and, for important changes, tell you in the Console or by email before they apply.

10. Contact

For privacy questions or requests, email support@neverplayalone.ai. You can also reach us on our Discord. We will confirm who you are before acting on a request about an account.