Privacy Policy
Zuletzt aktualisiert am 2026-09-23
This policy explains what personal data Mokizen ("we") handles when you use mokizen.com, the embed widget and the Mokizen Telegram mini app, and the choices you have. We try to collect as little as possible: most of the app runs entirely in your browser.
1. What we collect
- Account (only if you sign in with Google): your Google account ID, email address, display name and profile-picture link, plus when you first and last signed in and how many times. We never see your Google password.
- Things you create and save: the worlds (scene data, name, thumbnail, category) you save to your account, and anything you choose to publish — public worlds and your creator profile show your display name to everyone, and anyone you send a share link to can open that world.
- Feedback you send: the message, an optional category and an optional email address you type, basic context (page and app version) and your account ID if you are signed in.
- Usage statistics: anonymous daily counters of named events such as "page.explore" or "editor.add". They contain no account ID, no content and no cookie, and can be switched off (see section 7).
- Abuse-prevention counters: to enforce daily limits (AI requests, feedback, statistics, loading shared worlds) we keep per-day counters keyed by your IP address. They expire after about two days.
- AI features: the text prompt you type (and, for the AI review, a snapshot image of your scene) is sent to Cloudflare Workers AI to produce the result. We do not keep prompts or snapshots after the response.
- On your device only: the editor autosave, your preferences (theme, language, region, graphics quality, panel sizes), your ad-consent choice and your statistics opt-out are stored in your browser's local storage and never sent to us.
- Telegram mini app: your Telegram user ID, first/last name and language code (provided by Telegram), your in-game progress and records of Telegram Stars purchases.
- Payments: if you buy a paid plan (such as Pro), the payment is handled by the payment provider or app store. We receive the purchase status, not your card details.
2. Cookies and similar technologies
- fk_sess — keeps you signed in (signed, HTTP-only, up to 30 days). fk_oauth — protects the Google sign-in step (about 10 minutes).
- Advertising (free users only): Google AdSense / Google Ad Manager may use cookies or device identifiers to show and measure ads. Nothing loads until you choose "personalised" or "non-personalised" ads in the consent notice; non-personalised ads still use cookies for frequency capping, fraud prevention and measurement.
- Store links: when you click a Shopee or Amazon link, that store may set its own cookies and receives an anonymous tag telling it the visit came from Mokizen.
3. Why we use it
- To provide the service: sign you in, save and share your worlds, run AI features (performing our contract with you).
- To keep it safe and affordable: rate limits, abuse and fraud prevention (our legitimate interest).
- To improve Mokizen from aggregate usage statistics (legitimate interest; you can opt out).
- To fund the free version with ads and store commissions (personalised ads only with your consent).
- To comply with the law and respond to lawful requests.
4. Who we share it with
We do not sell your personal data. We use service providers that process data on our behalf: Cloudflare (hosting, database, AI inference, security), Google (sign-in; ads for free users), Telegram (the mini app and Stars payments) and, when you click them, the stores behind affiliate links. We may disclose data when required by law or to protect users and the service.
5. Where data is processed
Our providers run global infrastructure, so your data may be processed outside Vietnam or the European Economic Area. We rely on the providers' contractual safeguards (such as standard contractual clauses) for these transfers.
6. How long we keep it
- Account and saved worlds: until you delete them or ask us to delete your account.
- Published worlds: until you unpublish or delete them. Copies other people remixed into their own worlds are theirs.
- Feedback: until it has been handled, and no longer than 24 months.
- IP-keyed rate-limit counters: about two days. Anonymous usage counters: kept as aggregate statistics.
7. Your choices and rights
You can: see and export your worlds (Copy scene JSON), delete saved worlds, unpublish shares, change your ad choice (clear this site's data in your browser to be asked again), and switch off usage statistics by opening mokizen.com/?telemetry=off once.
Depending on where you live — including under Vietnam's Decree 13/2023/ND-CP on personal data protection and the EU/UK GDPR — you may have the right to be informed, to access, correct or delete your data, to restrict or object to processing, to data portability, to withdraw consent at any time (without affecting earlier processing) and to complain to a data-protection authority (in Vietnam, the Ministry of Public Security; in the EU, your local authority).
To use these rights, contact us through the in-app feedback form or at privacy@mokizen.com. We may need to confirm it is really you, and we answer within the time the law requires.
8. Children
Mokizen is not directed at children under 13. Users under 16 need the consent of a parent or guardian to create an account. If you believe a child has given us personal data without that consent, contact us and we will delete it.
9. Security
Traffic is encrypted (HTTPS), sessions are signed, and we store only what the features need. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.
10. Changes
We will update this page when our practices change and show the new date at the top. Significant changes will also be announced in the app.
11. Contact
Mokizen — use the in-app feedback form (menu ⚙ → Send feedback) or email privacy@mokizen.com.
Lebendige Welten entdecken · Arten-Pflegeanleitungen · Aquascaping-Ratgeber · Was 591 echte Aquascapes nutzen · 3D-Editor öffnen