Privacy Policy

Last updated 2026-11-04

This policy explains what personal data Mokizen ("we") handles when you use mokizen.com, the embed widget and the Mokizen Telegram mini app, and the choices you have. We try to collect as little as possible: most of the app runs entirely in your browser.

1. What we collect

• Account (only if you sign in): with Google, your Google account ID, email address, display name and profile-picture link; with email, your email address, the name you give and your password, stored only as a salted one-way hash (PBKDF2) so we can never read it; plus when you first and last signed in and how many times. We never see your Google password.
• Things you create and save: the worlds (scene data, name, thumbnail, category) you save to your account, and anything you choose to publish — public worlds and your creator profile show your display name to everyone, and anyone you send a share link to can open that world.
• Community activity (only if you use it): the comments you post (with your first name, time and moderation status), who you follow, reports you send, challenge entries, and photos of your real tank that you upload. Comment text is checked by an AI safety model on Cloudflare Workers AI and is not used to train it. Photos are stored in Cloudflare R2, reviewed by our team before they are shown publicly, and shown next to your published world; do not upload photos that show people, addresses or other personal information.
• Feedback you send: the message, an optional category and an optional email address you type, basic context (page and app version) and your account ID if you are signed in.
• Usage statistics: anonymous daily counters of named events such as "page.explore" or "editor.add". They contain no account ID, no content and no cookie, and can be switched off (see section 7).
• Abuse-prevention counters: to enforce daily limits (AI requests, feedback, statistics, loading shared worlds) we keep per-day counters keyed by your IP address. They expire after about two days.
• AI features: the text prompt you type (and, for the AI review, a snapshot image of your scene) is sent to Cloudflare Workers AI to produce the result. We do not keep prompts or snapshots after the response.
• On your device only: the editor autosave, your preferences (theme, language, region, graphics quality, panel sizes), your ad-consent choice and your statistics opt-out are stored in your browser's local storage and never sent to us.
• Telegram mini app: your Telegram user ID, first/last name and language code (provided by Telegram), your in-game progress and records of Telegram Stars purchases.
• Payments: if you buy a paid plan (such as Pro), the payment is handled by the payment provider or app store. We receive the purchase status, not your card details. In Vietnam, Pro is sold by hand: if you message us on Zalo, we receive what you send in that chat (such as your Zalo display name, your phone number if your profile shows it, and the email of your Mokizen account) and use it only to activate Pro and reply to you. Zalo's own privacy policy applies to the chat itself.

2. Cookies and similar technologies

• fk_sess — keeps you signed in (signed, HTTP-only, up to 30 days). fk_oauth — protects the Google sign-in step (about 10 minutes).
• Advertising (free users only): Google AdSense / Google Ad Manager may use cookies or device identifiers to show and measure ads. Nothing loads until you choose "personalised" or "non-personalised" ads in the consent notice; non-personalised ads still use cookies for frequency capping, fraud prevention and measurement.
• Store links: when you click a Shopee or Amazon link, that store may set its own cookies and receives an anonymous tag telling it the visit came from Mokizen.

3. Why we use it

• To provide the service: sign you in, save and share your worlds, run AI features (performing our contract with you).
• To keep it safe and affordable: rate limits, abuse and fraud prevention (our legitimate interest).
• To improve Mokizen from aggregate usage statistics (legitimate interest; you can opt out).
• To fund the free version with ads and store commissions (personalised ads only with your consent).
• To comply with the law and respond to lawful requests.

4. Who we share it with

We do not sell your personal data. We use service providers that process data on our behalf: Cloudflare (hosting, database, AI inference, security), Google (sign-in; ads for free users), Resend (sends the sign-in codes for email accounts: it receives your email address), Telegram (the mini app and Stars payments), the payment providers you choose to pay Pro with (Polar for cards, and payOS for VietQR / bank transfer where that option is offered — they receive your email and the payment details you enter with them), Zalo (if you message us there to buy Pro in Vietnam; it carries that conversation under its own policy) and, when you click them, the stores behind affiliate links. We may disclose data when required by law or to protect users and the service.

5. Where data is processed

Our providers run global infrastructure, so your data may be processed outside Vietnam or the European Economic Area. We rely on the providers' contractual safeguards (such as standard contractual clauses) for these transfers.

6. How long we keep it

• Account and saved worlds: until you delete them or ask us to delete your account.
• Published worlds: until you unpublish or delete them. Copies other people remixed into their own worlds are theirs.
• Feedback: until it has been handled, and no longer than 24 months.
• Comments, follows, challenge entries and real-tank photos: until you delete them (or the world they belong to), or we remove them for breaking the rules. Reports: up to 12 months after they are handled.
• IP-keyed rate-limit counters: about two days. Anonymous usage counters: kept as aggregate statistics.

7. Your choices and rights

You can: see and export your worlds (Copy scene JSON), delete saved worlds, unpublish shares, change your ad choice (clear this site's data in your browser to be asked again), and switch off usage statistics by opening mokizen.com/?telemetry=off once.

Depending on where you live — including under Vietnam's Law on Personal Data Protection (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP, and the EU/UK GDPR — you may have the right to be informed, to access, correct or delete your data, to restrict or object to processing, to data portability, to withdraw consent at any time (without affecting earlier processing) and to complain to a data-protection authority (in Vietnam, the Ministry of Public Security; in the EU, your local authority).

To use these rights, contact us through the in-app feedback form or at privacy@mokizen.com. We may need to confirm it is really you, and we answer within the time the law requires.

7a. The Mokizen iOS app

• Sign-in: Sign in with Apple, Google or email. With Apple you may hide your email; we then receive an Apple private-relay address. Your session is stored in the iOS Keychain on your device.
• Camera: used only on your device for AR placement and for photos you choose to take; camera frames are not uploaded. A photo you use for "From a photo" is sent to our server once to be read and is not kept.
• Photos: the app only adds the captures and videos you save; it does not read your library.
• Notifications: if you allow them we store your device's push token and the topics you picked (plants grew, new worlds weekly, likes & comments) to send those notifications. Turn topics off in Profile or notifications off in iOS Settings.
• Purchases: Mokizen Pro in the app is sold through Apple In-App Purchase. Apple processes the payment; RevenueCat (our subscription processor) receives the purchase receipt and an account identifier so Pro is unlocked on your account, on the web too. We never receive your card details.
• Offline worlds are stored on your device and removed when you delete them or the app.
• Delete your account any time in Profile › Delete account: this removes your account, cloud worlds, likes, comments and push registrations. An App Store subscription must be cancelled separately in iOS Settings.

8. Children

Mokizen is not directed at children under 13. Users under 16 need the consent of a parent or guardian to create an account. If you believe a child has given us personal data without that consent, contact us and we will delete it.

9. Security

Traffic is encrypted (HTTPS), sessions are signed, and we store only what the features need. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.

10. Changes

We will update this page when our practices change and show the new date at the top. Significant changes will also be announced in the app.

11. Contact

Mokizen — use the in-app feedback form (menu ⚙ → Send feedback) or email privacy@mokizen.com.

Explore living worlds · Species care guides · Aquascaping guides · What 591 real aquascapes use · 3D aquarium live wallpaper · Open the 3D editor