Privacy Policy

Last Updated: October 14, 2026

1. Who We Are

This Privacy Policy explains how BOBERIUM LTD Company number 15022818, a company incorporated in England and Wales (“Company”, “we”, “us”, or “our”), collects, uses, stores, and discloses information when you use AiAtlant.

AiAtlant is a trading name of BOBERIUM LTD.

The Service is an 18+ interactive AI-powered text adventure game.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories of information.

Account Information

When you create or use an account, we may collect:

  • first and last name;

  • email address;

  • username;

  • account identifier;

  • authentication information;

  • information received from third-party authentication providers such as Google, Discord, or other providers you choose to use.

Game and AI Content

When you use the Service, we may collect and process:

  • prompts;

  • messages;

  • conversations;

  • game choices;

  • game history;

  • characters;

  • adventure information;

  • generated content;

  • AI-generated analysis;

  • game statistics;

  • rankings or tournament-related information;

  • sharing settings, share links, and information about content you have chosen to share;

  • information necessary to maintain game context and memory.

This information is necessary for core AI gameplay functionality.

Payment Information

If you purchase paid features, we may receive information relating to the transaction, such as:

  • transaction identifier;

  • purchase;

  • subscription;

  • amount;

  • currency;

  • payment status.

Payment card information may be processed directly by our payment processor rather than being stored by us.

Analytics and Technical Information

We may collect information about use of the Service, including:

  • IP address;

  • browser and device information;

  • operating system;

  • approximate location derived from technical information;

  • pages and features used;

  • dates and times of use;

  • session information;

  • technical logs;

  • error information;

  • performance information;

  • identifiers used by analytics services, including your account identifier when you are logged in.

Communications

If you contact us or receive communications from us, we may process:

  • your email address;

  • the contents of your communication;

  • information necessary to respond to your request.

Marketing Information

If you subscribe to marketing communications, we may process your email address and information about your marketing preferences.

You may unsubscribe from marketing emails at any time using the unsubscribe mechanism provided in the email.

3. How We Use Information

We use information to:

  • create and maintain accounts;

  • authenticate users;

  • provide the Service;

  • provide AI-generated gameplay;

  • maintain game sessions and game context;

  • generate requested analysis and statistics;

  • provide rankings and tournament-related features;

  • make available content that you choose to share;

  • verify results and maintain the integrity of rankings, qualification, and tournament features;

  • process purchases;

  • provide customer support;

  • diagnose and fix technical problems;

  • check the quality of the Service;

  • send service notifications;

  • send marketing communications where permitted;

  • understand how the Service is used;

  • monitor performance;

  • detect and prevent fraud and abuse;

  • maintain security;

  • investigate violations of our Terms;

  • comply with legal obligations;

  • respond to lawful requests from governmental authorities;

  • enforce our rights;

  • operate and improve the Service.

Your prompts, messages, conversations, and other game content are stored on our systems in a form that allows them to be read, which is necessary to maintain your games and game context and to generate the analysis and statistics you request. They are not anonymised.

Access to this content by our personnel is limited to what is necessary for the purposes described in this Privacy Policy — for example investigating a report, responding to a support request, diagnosing a technical problem, checking quality, verifying a result submitted to rankings or qualification, maintaining security, or complying with law.

4. AI Processing

The Service uses third-party AI providers through APIs.

Requests may be sent to AI providers directly or through intermediary services that route them to a provider.

Depending on the feature, we may send prompts, messages, game context, and other information necessary to generate the requested AI response.

AI providers may process this information under their own terms, privacy policies, and applicable API conditions.

We do not send your account password or full payment card information to AI providers for AI generation.

Different AI providers may be used for different features.

We may change AI providers or AI models used by the Service.

We do not make representations about the internal data retention or processing practices of third-party AI providers beyond the terms applicable to the services we use.

5. Service Providers

We may disclose information to third parties that provide services necessary to operate the Service.

These may include:

  • AI service providers;

  • hosting and infrastructure providers;

  • authentication providers;

  • analytics providers;

  • payment processors;

  • email delivery providers;

  • customer-support providers;

  • security and fraud-prevention providers.

These providers may process information on our behalf or in connection with the services they provide.

For example, the Service is delivered through Cloudflare, which protects it from attacks and abuse and helps it load faster. Traffic between your browser and our servers, including your IP address and the information you send, passes through Cloudflare's network.

6. Authentication Providers

If you choose to register or authenticate using Google, Discord, or another third-party authentication provider, that provider may provide us with information associated with your authentication request.

The information we receive depends on the provider and the permissions associated with the authentication method you use.

Your use of those services is also governed by their own privacy policies and terms.

7. Analytics

We use Google Analytics, provided by Google, to understand how the Service is used, measure performance, and identify errors.

Google Analytics runs only if you accept analytics cookies in the cookie banner. Until you choose, and if you decline, it is not loaded and nothing is sent to it. You can change your choice at any time through the "Cookies" link at the bottom of the page. If you change it to decline, we stop sending data to Google Analytics; cookies it has already set stay in your browser until they expire or you delete them.

If you accept, Google Analytics sets the cookies _ga and _ga_GWX1R8Z0T2 (Google's default lifetime is up to two years; your browser may shorten it) and receives:

  • the pages you open, without the query part of the address except campaign tags such as utm_source;

  • what you do in the Service — for example signing up and the sign-in method you used, starting and finishing a game (the game's name and identifier, whether you won or lost, and the number of moves), purchases (package, amount, currency, and transaction identifier), how far you scroll, and errors;

  • your account identifier, when you are logged in;

  • technical information about your browser and device, and the approximate location Google derives from it.

Google Analytics does not receive the text of your messages, the AI's replies, or your analysis.

For how Google uses this information, see "How Google uses information from sites or apps that use our services" at https://www.google.com/policies/privacy/partners/.

We do not use analytics data for targeted advertising.

Separately from analytics, the Service stores in your browser what it needs to work — for example, that you are logged in, your language, your cookie choice, the state of a payment in progress, and an identifier for the free demo game on the home page (a cookie kept for 30 days and an entry in your browser’s local storage), so the demo can continue and, if you then log in, be linked to your account.

Cloudflare, which protects the Service, may also set its own security cookies, such as __cf_bm or cf_clearance, to tell people from bots and to block attacks. Cloudflare describes these cookies as strictly necessary.

8. Payments

Payments may be processed through third-party payment processors.

Purchases on the Service are processed through Stripe Managed Payments. For these purchases Sold through Link, LLC, an affiliate of Stripe, is the merchant of record: it takes your payment, calculates and collects applicable taxes, prevents fraud, and sends your receipts. To do this it processes your payment details, billing address, and email address under Link’s privacy policy, which is linked at checkout (https://link.com/privacy) and shares order details with us.

We may receive transaction information necessary to identify purchases, subscriptions, refunds, and payment status.

Payment processors may independently process payment information under their own privacy policies and terms.

9. Email and Communications

We may use third-party email and communications providers to send:

  • account-related emails;

  • authentication messages;

  • security notifications;

  • password/account notifications;

  • transaction messages;

  • marketing emails.

Marketing communications include an unsubscribe mechanism.

Service and security communications may continue after you unsubscribe from marketing communications.

10. Shared Content

The Service may allow you to share game sessions and selected content from them, including conversations, game results, analysis, statistics, rankings, or other content, where it makes sharing available. This section applies to any such sharing.

Sharing is optional. Game content remains private to your account unless you choose to share it.

Depending on the sharing options made available by the Service, shared content may be accessible to other users, to any person holding a link to it, or to the general public, and may be indexed by search engines.

Content shared from a session may include the messages you submitted in that session, the content generated in response to them, and any personal information contained in them, including information relating to other people.

Shared content may be copied, saved, indexed, linked to, or redistributed by others. Copies made by others are outside our control and cannot be recalled.

You may stop sharing at any time using the controls provided by the Service. We will remove or disable access to the shared version within a reasonable period. Copies previously made by others are not affected.

Private game conversations are not automatically made public merely because you use the Service.

11. Legal Requests

We may disclose information where reasonably necessary to:

  • comply with applicable law;

  • respond to valid legal process;

  • respond to governmental or law-enforcement requests;

  • protect the rights, safety, or property of the Company, users, or others;

  • investigate fraud, abuse, or security incidents;

  • enforce our Terms.

We will handle lawful requests in accordance with applicable law.

12. Business Transfers

If the Company is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

13. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain accounts and game history, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

Retention periods may differ depending on the type of information and the purpose for which it is used. We decide how long to keep information by considering what we need it for, how sensitive it is, the risk of harm from unauthorized use or disclosure, and any legal, tax, accounting, or security requirement that applies to it.

We store your prompts, messages, conversations, game history, characters, and other game content for as long as your account remains active, so that your games, game context, and game memory can be maintained and continued. We do not delete this content automatically after a fixed period.

Where you share content, the shared version remains available for as long as you keep it shared. When you stop sharing it or delete it, we remove or disable access to the shared version within a reasonable period; copies made by others while it was shared are outside our control.

You may delete your account at any time using the Delete account control in your profile, or ask us to delete specific game content by writing to privacy@aiatlant.com. When you do, we delete or de-identify the associated information within a reasonable period, except where we are legally required or otherwise permitted to retain it, including for security, fraud prevention, legal claims, tax, or accounting purposes.

Residual copies may remain in backups or logs for a limited period before being overwritten in the ordinary course of operations.

Deleting your account does not necessarily result in immediate deletion of all information where retention is legally required or otherwise permitted.

14. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission or storage is completely secure.

15. Your Privacy Choices

Depending on applicable law and your location, you may have rights relating to your personal information.

Here is how to use them:

  • Correct your data — edit your name and change your email address in your profile.

  • Delete your data — delete your account with the Delete account control in your profile, or send a request from your account email address to privacy@aiatlant.com or support@aiatlant.com. We act on a deletion request within a reasonable period; section 13 describes what happens to the information.

  • Access and download your data — your finished games, with their conversations and results, are listed under Game history in your profile. For a copy of your personal information, including your game content, in a commonly used electronic format, write to privacy@aiatlant.com from your account email address.

  • Analytics cookies — they are used only if you accept them; you can change your choice at any time through the "Cookies" link at the bottom of the page. Section 7 explains what Google Analytics receives.

  • Sale, sharing, and targeted advertising — we do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising, so there is nothing to opt out of. If this changes, we will update this Privacy Policy and provide an opt-out before it takes effect.

  • Any other right — write to privacy@aiatlant.com.

To protect your account, we may ask you to confirm a request from the email address on your account before we act on it.

The availability and scope of particular rights may depend on applicable law.

16. California Residents

California residents may have rights under the California Consumer Privacy Act, as amended (“CCPA”), where the CCPA applies to our business.

These rights may include rights to:

  • know/access personal information;

  • delete personal information;

  • correct inaccurate personal information;

  • opt out of sale or sharing of personal information;

  • opt out of certain targeted advertising activities;

  • limit certain uses of sensitive personal information where applicable;

  • receive equal treatment for exercising applicable privacy rights.

The CCPA’s applicability depends on the statutory requirements applicable to the business.

To submit a request, use the controls in your profile described in section 15 or write to privacy@aiatlant.com from your account email address. You may also use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm the request directly.

We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit its use.

We will not discriminate against you for exercising your privacy rights.

17. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on the applicable law, these rights may include:

  • access;

  • correction;

  • deletion;

  • portability;

  • objection or opt-out rights;

  • rights concerning targeted advertising;

  • rights concerning sale of personal information;

  • rights concerning certain profiling or automated decision-making activities.

Where such rights apply to our processing, we will provide the rights required by applicable law.

To exercise these rights, use the controls in your profile described in section 15 or write to privacy@aiatlant.com. If we decline to act on your request, we will explain why, and you can appeal by replying to our decision. We will respond to your appeal within the period required by applicable law. If your appeal is denied, you may contact the attorney general of your state.

18. UK Data Protection

BOBERIUM LTD is the controller of the personal information described in this Privacy Policy.

We are established in England and Wales, so UK data protection law — the UK GDPR and the Data Protection Act 2018 — applies to our processing of personal information, wherever you live.

Legal bases

We process personal information on the following legal bases:

  • performance of a contract with you — to create and maintain your account, authenticate you, provide the Service and AI-generated gameplay, maintain your games and game context, generate the analysis and statistics you request, make available content you choose to share, and process purchases;

  • our legitimate interests — to keep the Service and accounts secure, prevent fraud and abuse, verify results submitted to rankings and qualification features, diagnose and fix technical problems, check the quality of the Service, understand how the Service is used, improve the Service, and establish or defend legal claims. Where we rely on legitimate interests, we consider whether they are outweighed by your interests, rights, and freedoms;

  • your consent — for marketing communications where consent is required, and for non-essential cookies and analytics identifiers. You may withdraw consent at any time; withdrawal does not affect processing carried out before you withdrew it;

  • compliance with a legal obligation — to keep records we are required to keep and to respond to lawful requests.

Analysis and profiling

The analysis, statistics, and personality-related results the Service produces are generated from the material you submit and are provided for entertainment and gameplay. They are not used to make decisions that produce legal effects concerning you or that similarly significantly affect you.

We do not ask for, and the Service does not need, information revealing health, sexual life, racial or ethnic origin, religious or political beliefs, or other special categories of personal data. Please do not submit such information in your games. Where such information appears in material you choose to submit, we process it only as necessary to provide the Service as described in this Privacy Policy, and we do not use it to build special-category profiles of you.

Your rights

Subject to the conditions and exemptions in UK data protection law, you have the right to request access to your personal information, its rectification or erasure, restriction of its processing, and its portability; to object to processing carried out on the basis of our legitimate interests; to object to direct marketing at any time; and to withdraw consent where processing is based on consent.

You can correct your details and delete your account yourself in your profile; for any other right, write to privacy@aiatlant.com. We respond within one month of receiving a request, and may extend that period by up to two further months for complex or numerous requests, as UK law permits. We will tell you if we need the extension.

Complaints

If you are unhappy with how we handle your personal information, write to us first at privacy@aiatlant.com.

You also have the right to complain to the Information Commission (formerly the Information Commissioner's Office), the UK supervisory authority for data protection, at ico.org.uk.

Transfers out of the UK

Our service providers, including AI, hosting, analytics, payment, and communications providers, may be located outside the United Kingdom, in particular in the United States.

Where personal information is transferred out of the United Kingdom, we rely on an applicable adequacy regulation or on approved safeguards, such as the UK International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's standard contractual clauses.

19. 18+ Service

The Service is intended for adults and requires users to be at least 18 years old.

We do not knowingly permit individuals under 18 to create accounts or use the Service.

If we learn that a person under 18 has provided personal information to us, we may take reasonable steps to terminate the account and delete the information, subject to applicable law.

20. International Processing

We are a company incorporated in England and Wales and may use service providers located in different countries.

Your information may therefore be processed or stored outside the country in which you live.

Third-party service providers may process information in the countries where their infrastructure or personnel are located.

Where UK data protection law applies to such a transfer, section 18 describes the safeguards we rely on.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

We will update the “Last Updated” date when changes are made.

Where required by applicable law, we will provide additional notice of material changes.

Language

This Privacy Policy is written in English. We may also make it available in other languages for your convenience. If a translation differs from the English version, the English version controls, except where applicable law requires otherwise.

22. Contact Us

BOBERIUM LTD
Company number 15022818
27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
United Kingdom
Email: privacy@aiatlant.com