Privacy
gactant has no accounts, no ads and no tracking cookies. Here is what it keeps, who can see it, and where it goes.
You, and your devices
There are no passwords or email. When you first play, you give a name, and this device makes a key that never leaves it. The server keeps who you are: an id, your name, and for each device you add its public key (which can only check that a device is yours), a label like "Firefox on Linux", when you added it, and the day it last signed in. It also keeps a scrambled form of your recovery code, enough to check one, not to show it. It never keeps your devices' private keys or the recovery code itself, and the passes your devices sign in with aren't kept: they're checked by their signature, and last a day.
Your name goes with what you do: your chat messages, a ludant's list of who has sat with it, and anything you publish ("published by …"). Use a nickname, not your full name.
Ludants
A ludant (its game, its memory, its chat, its sketches, what its game saves, and its art) is kept on gactant's server, hosted by Cloudflare, for as long as it's kept:
- Its chat, sketches and saved game are only for its owner, on any of their devices. Anyone else with its link sees only its game and art, and can take a copy of their own, which starts with an empty chat.
- A publication is public: anyone can play it and take a copy. It carries the ludant's game and art as they were, but not its chat or sketches.
- Abandoning a ludant deletes it, its versions and its art; a short note that it was abandoned, and by whom, stays at its link. Ludants nobody comes back to are cleared away after a while.
Thinking (OpenRouter)
Ludants think with AI models through OpenRouter, on the account of whoever connects it. Your OpenRouter key stays in your browser and never reaches gactant's server: your browser talks to OpenRouter directly. What a ludant thinks about (its game, its memory, the chat, pictures of its game and sketches) goes to OpenRouter and the model's provider, under their terms. gactant's server keeps no record of those conversations.
Before a publication goes public, its words and pictures are checked by Cloudflare's AI models for content the rules forbid.
How the site is doing
Pages tell gactant's server when something goes wrong (an error, a game that can't draw) and, now and then, how smoothly games run: the kind of browser, whether it's a phone, the error's message, frame rates, and which ludant. Never your name, the chat, what a ludant thinks, its code or any key. Counts are kept for 30 days; errors are grouped, and the oldest kinds drop off as new ones come in.
If you run the device check, what it finds (what your browser and controllers can do, and the device name you give it) is kept so the people building gactant can read it.
Cloudflare, which hosts the site, keeps logs of requests to it, including the address they came from, for a few days. gactant itself uses your address only to count daily limits, in memory, and never stores it.
Reports
If you report something (⚑), the report keeps your name, the reason, your note, which ludant, and a picture of its game as it was, until it has been dealt with and for 90 days after.
In your browser
gactant stores, in your browser only: this device's key (the private half can't be read out, even by gactant's own pages), its current pass, your name, the ludants you've sat with, your OpenRouter key if you connect, and a few display preferences. Clearing your browser's site data for gactant.com removes them: that device stops being you, and your ludants stay yours on your other devices, or come back with your recovery code.
Children
Families play gactant together. It doesn't ask anyone's age or for personal information; please don't put any in names or chat.