Privacy

Abby Metaverse lets you explore shared worlds, keep a home world, and spend time with your own Abby. This policy explains how information is handled on abbymeta.com and its supporting player services.

Who to contact

Abby Metaverse is operated by Scott Winkler. For privacy questions, access or correction requests, or help deleting account data, email scott@flashfinancials.io. Include the account or feature involved, but never send a password, sign-in token, passkey secret, or private note key. We may need to verify that a request is yours.

Google sign-in

Google sign-in is optional. If you choose it, Google sends a signed identity credential that can include your Google account identifier, name, email address, and profile information. We verify that credential to sign you in.

• Player accounts use Google's stable account identifier to recognize you. Your name may be used as your initial player display name. Display names can be visible to other players.
• The home-world service uses a derived identifier to recognize the owner of a home. It does not retain your Google name or email address.
• Our player sign-in implementation does not store your Google password, profile picture, email address, or the Google identity credential. We do not request access to Gmail, Drive, Calendar, contacts, or other Google account content.
• We use Google sign-in data to authenticate you and provide your account and home features. We do not sell it, use it for advertising, or use it to train AI models.

Google and passkey accounts are separate. Matching email addresses do not link accounts. Signing in with Google does not unlock notes belonging to a passkey account.

Player accounts and your browser

To provide your account, we store an account identifier, display name, account and session timestamps, and the settings you save for your Abby. With a passkey, the server stores the public credential needed to verify sign-in; your device controls the private credential.

Your browser stores sign-in sessions, preferences, and cached game files. Passkey-based note keys are kept on your device. Signing out ends that player session and clears its local note keys. Clearing browser storage removes local copies and preferences, but does not by itself delete your server-side account.

Shared worlds and homes

People in the same multiplayer room can receive your display name, avatar, movements, and messages you post to that room. Room chat keeps a limited recent history and is cleared when the room has been empty for an hour and the server processes its cleanup. Do not post information in shared chat that you want to keep private.

Home ownership, saved furniture, and world changes are stored so they remain available. Removing a private note does not remove things you built in a world.

Talking to Abby and keeping notes

When you talk to Abby, your recent conversation and the notes your browser opens for that conversation are sent to the service and its configured AI talker to generate a reply. Those words must be processed in readable form while answering you. The player conversation service does not save a chat transcript; notes you choose to keep are stored separately.

Saved private notes and sealed settings copies are encrypted on your device using a key derived from your passkey. The server stores the encrypted copies, not that key. Encryption of saved notes does not mean that the AI service cannot read the words sent to it during a conversation. Google sign-in alone does not provide a key for these notes.

Service providers and technical information

Google provides sign-in and cloud hosting. Cloud, network, and computing providers process the information needed to deliver and secure the service, which can include network addresses, request details, and operational diagnostics. The app uses account and game information to provide features, troubleshoot failures, and protect access. Administrative pages also record aggregate page usage.

Google handles its own sign-in cookies and account information under Google's Privacy Policy. If you visit a world run by someone else, that operator's practices apply to information you give that world.

Retention and your choices

Account settings, home data, and saved notes remain available until removed. Note controls let you move notes to trash, restore them during the selected trash period, or erase them immediately. The default trash period is 30 days; expired items are removed when cleanup runs. Sign-in challenges expire after five minutes. Player sessions expire after 90 days without renewal; using a valid session renews it periodically so active players stay signed in. Home-world passes last up to 30 days and are renewed automatically from your player session. Signing out clears both from this browser.

To request deletion of your account and associated data, contact the address above. Revoking Abby Metaverse in your Google account connections stops that authorization; it does not automatically erase data already saved with Abby Metaverse. Operational backups and provider records may persist separately from the live account.

Policy changes

Updates appear on this page. If the way Google account data is used changes beyond what you authorized, we will explain that change and obtain any required consent before using the data that way.