Document
Last updated: 2 October 2026
This Privacy Policy explains what information VoidBox Cyberverse ("VoidBox Cyberverse", "the Game", "we", "us") collects, how it is used, and who it is shared with. We keep data collection to the minimum needed to run the game.
1. Who we are
VoidBox Cyberverse is an online multiplayer party game (Blitz, Cyber Speed, Meme Battles, and Hacker) playable in a web browser and linked from Discord. The operator is VoidBox Labs™. You can reach us at scurf-truffle9l@icloud.com or on our Discord: https://discord.gg/UjEQW8uQeU.
2. The short version
- No account, email, or password is required to play.
- Your save is tied to a random anonymous token generated on your device.
- We store your display name and gameplay stats on our server so
progress persists and leaderboards work.
- If you sign in with Discord, we receive your Discord email — this is used
only to check whether it matches the operator's own account (to enable developer/owner tools for that one account); see §3(b) and §5.
- We do not sell your data and we do not run advertising. We do use basic
website analytics (the Whop Pixel: device type, country, pages visited and how often checkout is opened and left) and Google Search Console totals; see §5.
- Payments are handled entirely by Whop — we never see or store your card
details.
- Our AI features run under Zero Data Retention (ZDR) — see §5.
3. What we collect
a) Stored on your device only (browser localStorage)
- Anonymous device token — a random string that identifies your save. It is
not linked to your real identity.
- Device preferences — sound/music volume, graphics quality, device type,
and tips/flicker toggles. These never leave your device.
b) Stored on our server (a database keyed by your anonymous token)
- Display name you choose (shown to other players and on leaderboards).
- Gameplay progression — trophies, XP, level, BoomBucks (in-game currency),
tickets, wins, games played, podiums, crates opened, best trophies.
- Purchase entitlements — whether a Pro pass is active and which cosmetic
packs you own (a reference to your Whop membership/receipt, not payment details).
- Per-match history — game type, placement, player count, and rewards for
each finished game.
- Timestamps — when your save was created and last updated.
- If you sign in with Discord: your Discord username, avatar, avatar
decoration, Discord user ID, and email address. The email is used solely to check whether it matches the operator's own Discord account — this is what unlocks the owner-only developer tools for that one account. It is not used for marketing, contact, profiling, or shared with any third party, and no other player can ever see it.
Aside from the Discord sign-in case above, we do not collect your email, phone number, address, IP-based location for profiling, contacts, or any government identifier.
4. How we use it
- To save and restore your progress across sessions.
- To run multiplayer matches and show other players your name and results.
- To build the Top-100 leaderboards (trophies, BoomBucks, wins).
- To grant items you purchase and keep in-game currency balances correct.
- To operate, secure, and debug the game.
We do not use your data for advertising profiles or sell it to third parties.
5. Third-party services
We rely on a few processors to provide specific features. Each receives only what that feature needs.
| Service | Purpose | What is sent | Notes |
|---|---|---|---|
| Whop | Payments & checkout | Handled on Whop's own checkout; we receive a membership/receipt reference | We never see card numbers. See Whop's privacy policy. |
| OpenRouter | AI meme prompts & GIF judging | The generated meme prompt text and candidate GIF titles | Runs under Zero Data Retention — providers do not retain the request. No personal data is sent. |
| Klipy | GIF search for Meme Battles | The (AI-generated) search query text | Returns GIF results. No personal data is sent. |
| Whop Pixel | Website analytics | Device type, country, page names you visit, how often you open and leave checkout | No card or payment details, no messages, no saves. See below. |
| Google Search Console | How people find us in Google | Nothing from your browser: Google reports search totals to us | Runs no code on our pages. |
| Discord | Sign-in / distribution | Username, avatar, avatar decoration, Discord user ID, and email address, once you choose to sign in | The email is checked only to detect the operator's own account (for developer tools) and is not used for anything else. The game does not read your Discord messages or contacts. |
We are transparent about these on purpose: the game degrades gracefully if any of them is unavailable, and none of them receives your identity from us.
Website analytics (Whop Pixel)
The website (the game, the bot pages, the dashboard and checkout) loads the Whop Pixel, an analytics script from our payment provider Whop. It tells us:
- your device type (for example phone or computer),
- your country,
- which pages you visit, recorded by page name only (for example "Plans"),
- how often you open checkout and leave it without paying.
It does not give us your card details, payment information, messages, game saves or anything you type. Whop may store a small identifier in your browser to count visits; we don't use any of this to show you ads. Whop's own handling of it is covered by Whop's privacy policy.
Google Search Console
We use Google Search Console to see how people find voidbox.games in Google search: which search terms showed the site and how many people clicked. Google gives us these as totals only; it runs no code on our pages and tells us nothing about who you are.
Zero Data Retention (ZDR) for AI
AI requests (used only to write short meme prompts and to rate GIFs) are routed with a Zero Data Retention requirement. That means the AI provider processes the request to generate a response and does not store the prompt or output afterward, and does not use it to train models. The content sent is game text only — never your personal information.
6. Cookies & local storage
We use localStorage to hold your anonymous token and device preferences. We do not use advertising cookies. The Whop Pixel (§5) may store a small identifier in your browser so Whop can count visits. Clearing your browser storage will detach this device from your save.
7. Data retention & deletion
- Your server-side save persists so you don't lose progress.
- Because saves are keyed to an anonymous token (not an email), **clearing your
browser storage orphans the save** on that device.
- To request deletion of a stored save, contact
scurf-truffle9l@icloud.comwith the
token or display name and we will remove the associated record.
8. Children
VoidBox Cyberverse is not directed to children under 13 (or the minimum digital age in your country, e.g. 16 in parts of the EU). Do not use the game or make purchases if you are under that age without a parent or guardian's consent.
9. Security
Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Payment card data is never transmitted to or stored by us — it is handled by Whop. No system is perfectly secure, but we take reasonable measures to protect your data.
10. International transfers
Our servers and processors may operate in countries other than yours. Our servers are hosted in Kazakhstan, and this Policy is governed by the laws of Ukraine. By using the game you consent to your data being processed in Kazakhstan and by the processors listed in §5.
11. Your rights
Depending on your region (e.g. GDPR/UK GDPR, CCPA), you may have the right to access, correct, export, or delete your data, and to object to processing. Contact scurf-truffle9l@icloud.com to exercise these rights.
12. Changes
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, announced in-game or on our site.
13. Contact
VoidBox Labs™
- Email: scurf-truffle9l@icloud.com
- Discord: https://discord.gg/UjEQW8uQeU