Privacy Policy

1. Scope

DEEPWELL is a product released by ZeroClickDev. This policy explains how ZeroClickDev (“ZeroClickDev,” “we,” “us,” or “our”) handles personal information when you visit this website, request Early Access, purchase Web Direct or a LUMINOSITY pack, play a connected DEEPWELL build, or send feedback. It does not control the independent practices of Steam, Apple, Stripe, or other services you choose to use.

2. Information we collect

Information you provide

• Your email address when you request access, purchase, sign in, or contact us.
• Feedback, bug reports, attachments, and messages you choose to send.
• Account and profile information you provide through DEEPWELL authentication.
• Party safety reports contain the reporting and reported account identifiers, room and participant identifiers, room revision, displayed name, selected reason, and any optional details you submit. Reports go to a private Supabase moderation queue for DEEPWELL’s support owner, not to other players, GitHub, or an AI service. Account blocks store the account pair and time, and moderation records may restrict names or participation. Linked safety reports, blocks, and restrictions are deleted with the relevant account; information another player already received cannot be recalled.
• Your LUMINOSITY questionnaire choices and optional text, plus the card specifications and art records generated for your account. A candidate card may be reviewed for originality, balance, safety, and fit before any shared-game inclusion decision.

Purchases and delivery

• Stripe processes payment details. We receive limited transaction information such as payment status, customer and Checkout Session identifiers, amount, currency, and the email attached to the purchase. We do not receive your full card number or security code.
• Apple processes LUMINOSITY payment details. We receive and verify limited signed purchase, refund, and reversal information, including product and transaction identifiers, price, currency, storefront environment, purchase and revocation times, and an app-account token that binds the Apple transaction to the purchasing DEEPWELL account. We do not receive your full payment-card number from Apple.
• We keep entitlement, delivery, and download records so we can grant access, prevent duplicate charges or rewards, enforce the three-pack lifetime maximum, recover an interrupted purchase, deliver the game, and support your order.
• Collector finish purchases are verified on the device. Local saves retain granted packs, cosmetic unlocks, and transaction markers to prevent duplicate delivery. Explicit cloud backups include this save data and the player name; ordinary local play does not automatically back it up. See the in-game backup controls before changing devices or resetting a save.

Game and technical information

• Connected builds may store account entitlements, cloud saves, run history, settings, and diagnostic or performance information. Optional gameplay analytics are off by default. If you turn them on in Settings, we collect bounded gameplay events with account, random installation, and analytics-session identifiers to understand and improve the game. Analytics permission is separate from saves, purchases, and support.
• Connected builds use account, random installation, analytics-session, and purchase-intent identifiers to authenticate access, link account-owned state, prevent duplicate fulfillment, diagnose support reports, and measure product interaction. We do not use these identifiers to track you across other companies’ apps or websites.
• The website, game, and infrastructure may process IP address, request time, browser or device type, operating system, referring page, crash details, and security logs.
• DEEPWELL uses browser local or session storage for necessary features such as saves, preferences, access state, and short-lived gameplay sessions. The marketing site does not use third-party advertising cookies.

3. How we use information

• Send a private purchase link and access or delivery instructions.
• Process payments, fulfill orders, authenticate accounts, and provide support.
• Verify Apple transactions and refund status, enforce purchase ownership and the lifetime limit, recover interrupted fulfillment, and prevent duplicate charges or cards.
• Save progress and operate connected game features.
• Diagnose bugs, balance and improve the game, and protect service reliability.
• Prevent abuse, fraud, duplicate fulfillment, and unauthorized downloads.
• Comply with tax, accounting, legal, and dispute-resolution obligations.

Where a legal basis is required, we process information to perform our contract with you, pursue legitimate interests in operating and securing DEEPWELL, comply with law, or act with your consent. You may withdraw consent where consent is the basis, without affecting earlier processing.

4. When we share information

We share information only as needed with service providers that help us operate:

• Stripe for checkout, payment processing, fraud prevention, receipts, and disputes.
• Apple for App Store payment processing, transaction verification, refund handling, and server notifications. Apple receives information under its own privacy policy.
• Supabase for authentication, databases, storage, and server-side functions.
• OpenAI or Microsoft Azure OpenAI, according to the configured generation provider, to propose and illustrate LUMINOSITY cards and check generated content for safety. We send bounded preference answers, an optional wish, prior-card and mechanics context, request and uniqueness identifiers, the generated art prompt, and a keyed owner fingerprint used for abuse prevention and attribution. We do not send payment-card details or the account email for card generation. OpenAI also receives proposed card text, art prompts, and generated image bytes for safety checks, including when Microsoft Azure OpenAI is the generation provider.
• Resend for transactional access, purchase, and delivery email.
• Resend and our support mailbox receive Feedback Mode reports and limited app/device diagnostics. An attached capture is made available through an expiring private link. Nothing is sent until you choose Send. Only if you check the separate, optional AI permission for that report is it also filed in a private GitHub repository, where GitHub Copilot AI may process the report, diagnostics, and attached capture. Leaving it unchecked still lets you send a support report. This permission is not remembered for your next report.
• Hosting, content-delivery, security, and source-control providers used to run DEEPWELL.
• Professional advisers or authorities when reasonably necessary to comply with law or protect rights and safety.

We may transfer information as part of a merger, financing, acquisition, bankruptcy, or sale of assets, subject to appropriate notice and safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

5. Retention and security

We keep information only as long as reasonably necessary for the purposes above, including maintaining access and purchase records, resolving disputes, enforcing agreements, and meeting legal obligations. Retention varies by record. We use access controls, signed and expiring purchase links, private delivery checks, encryption in transit, and other reasonable safeguards. No system can guarantee absolute security.

A LUMINOSITY account deletion erases active card content and ordinary account records where required, but a privacy-minimized lifetime ledger may remain so deleting or recreating an account cannot bypass the three-pack maximum and an exact unfinished Apple transaction can be closed safely without restoring erased rewards. That retained record uses a keyed digest of the verified account identity and limited records such as transaction, product, environment, status, timing, refund reason, and privacy-minimized internal identifiers for an intent, client request, save slot, checkout, or reset. Verification and evidence digests may also remain so the same transaction can be recognized without retaining its raw signed payload. The ledger does not retain the deleted email address, deleted authentication UUID, raw signed Apple payload, questionnaire answers, or card content.

6. Your choices and rights

You can turn optional gameplay analytics off at any time in Settings → Privacy, terms & contact. This stops new analytics submissions from that device; it does not erase records already received. Privacy, terms, and contact information remain available in Settings without signing in, including an on-device summary when offline. Contact us to request deletion of previously submitted analytics or feedback, including support and GitHub copies, or to withdraw permission for further AI processing of a report. Include the report reference when available; withdrawal does not undo processing already completed.

Depending on where you live, you may have rights to know, access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. We do not discriminate for exercising applicable privacy rights. Send a request from the email tied to your account so we can verify it. Some records may be retained where required by law or necessary for security, fraud prevention, enforcing a disclosed lifetime purchase limit, or completing a transaction you requested.

DEEPWELL does not track you across unrelated websites for advertising, so it does not respond differently to browser “Do Not Track” signals. Because we do not sell or share personal information for behavioral advertising, Global Privacy Control does not change that practice.

7. Children

DEEPWELL is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 provided information, contact us so we can review and delete it as appropriate.

8. International processing

DEEPWELL and its providers may process information in the United States and other countries where privacy laws differ from those where you live. Where required, we use appropriate safeguards for international transfers.

9. Changes and contact

We may update this policy as DEEPWELL changes. We will post the revised policy here, update the effective date, and provide additional notice when required. Questions or privacy requests can be sent to trent@zeroclickdev.ai.