Privacy Policy

1. Overview & Scope

The Invisible Puppeteer is a simulated executive intelligence and strategy game currently operating as a Private Alpha for Chapter One: The Apex Operation.

This Privacy Policy describes what information is collected, how it is used to operate the simulation, and how player records are stored. We collect information necessary to authenticate player accounts, persist gameplay progression across sessions, and maintain operational stability.

2. Age Requirement (13+)

The service is intended exclusively for individuals who are at least 13 years of age. We do not knowingly collect or maintain personal information from individuals under the age of 13. If you are under 13, you may not register for an account or play The Invisible Puppeteer.

3. Information We Collect & Process

We collect and process the following operational information to authenticate your access and maintain your persistent campaign:

• Account Authentication: When you register with email and password, the password is submitted through the game to Supabase Auth, which manages credential storage and authentication. The game does not persist plaintext passwords in its database or intentionally write them to application logs. When you choose to sign in with Google OAuth, we receive your account email address, verified email status, and basic profile information (such as your display name and avatar URL if provided by Google) to establish your player profile.
• No Unrelated Google Permissions: When using Google Sign-In, we request only basic open identity verification (openid, email, profile). We do not request, access, read, or store data from Google Drive, Gmail, Google Contacts, Google Calendar, or any other Google application.
• Account Identifiers: We assign and store a unique internal account identifier to isolate your campaign progress and enforce access controls across game records.
• Deterministic Gameplay & Campaign State: To enable persistent play, we record player actions and simulated state in the database, including company portfolio balances, stock trades, intelligence dossiers, Handler choices, consequence resolution logs, Story Beat Ledger chronicles, and World Clock timeline milestones.
• Local Presentation Preferences: The application may store non-sensitive interface preferences, active UI tabs, and per-player notification acknowledgment states locally in your browser storage or cookies.
• Operational & Security Telemetry: We record essential security and operational logs (such as sanitized error identifiers, rate-limiting counters, and server request status codes) to detect abuse, protect server infrastructure, and ensure system stability.

4. No Payments, No Sale of Data, No Targeted Advertising

5. Service Providers

We rely on external service providers to host and operate the game:

• Supabase: Managed database storage, row-level access security, and authentication services.
• Vercel: Application hosting, edge routing, and serverless runtime execution.
• Google OAuth: Optional identity verification when chosen directly by the player.

6. Data Retention, Security Limitations & Account Deletion

Data Retention: Account and campaign information is retained while the account is active or as reasonably necessary to operate the alpha, protect the service, and satisfy legitimate recordkeeping needs.

Account Reset & Deletion: Campaign reset is currently available directly inside the account screen, allowing you to restart your progress while retaining your login. Permanent authentication-account deletion requires contacting the operator at support@theinvisiblepuppeteer.com, as automated account deletion is not yet self-service.

Security Limitations: We employ standard protective measures including HTTPS encryption in transit, PKCE auth verification, and row-level database security. However, no internet transmission or electronic storage method is completely infallible, and absolute security cannot be guaranteed.

7. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in authentication options or game infrastructure. Any revisions will be posted directly to this page with an updated effective date.

8. Contact

Contact the operator at support@theinvisiblepuppeteer.com.