Privacy Policy
This Privacy Policy explains how Veritas ("we," "us") collects, uses, and shares information when you use veritascase.com.
Data Controller: Yanxiaobing (individual/sole trader)
Contact: support@veritascase.com
1. Information We Collect
Account information: email address, username, password (hashed), and any profile details you provide (e.g., Detective Profile display name).
Gameplay data: case progress, interrogation transcripts, accusation history, XP, style-tag classifications, and other data generated as you play.
Payment information: We do not directly collect or store your payment card details. Payments are processed by Paddle.com Market Ltd, our Merchant of Record. Paddle collects and processes billing information (name, billing address, card details, transaction history) under its own privacy policy, available at paddle.com/legal/privacy. We receive limited transaction metadata from Paddle (e.g., customer ID, subscription status, purchase confirmation) needed to grant access to purchased content.
Technical data: IP address, browser type, device information, and usage logs (e.g., session duration, API usage) collected automatically for security, abuse prevention, and cost-monitoring purposes.
2. How We Use Information
We use collected information to:
- Provide and operate the Service (deliver cases, track progress, enforce usage limits);
- Process purchases and subscriptions via Paddle;
- Detect and prevent abuse (e.g., excessive free-tier usage, automated scraping);
- Improve the Service, including case-generation quality;
- Communicate with you about your account, purchases, or policy changes;
- Comply with legal obligations.
3. Third-Party Service Providers
We share information with the following categories of service providers, solely to operate the Service:
- Paddle — payment processing and subscription billing (Merchant of Record)
- Anthropic — AI model provider used to generate case content and power AI suspect interrogations; gameplay text you submit during interrogations is sent to Anthropic's API for processing
- Railway — cloud hosting and infrastructure for our application and database
We do not sell your personal information to third parties, and we do not share gameplay or account data with advertisers.
4. Data Retention
We retain account and gameplay data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required for legal, tax, or fraud-prevention purposes (e.g., transaction records related to Paddle payments).
5. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, contact support@veritascase.com.
California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose;
- Request deletion of your personal information;
- Correct inaccurate personal information;
- Opt out of the "sale" or "sharing" of personal information (we do not sell personal information);
- Not be discriminated against for exercising these rights.
To submit a CCPA request, email support@veritascase.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within the timeframe required by law.
6. Cookies
We use essential cookies/local storage to maintain your login session and gameplay state. We do not currently use third-party advertising or tracking cookies.
7. Children's Privacy
The Service is not directed at children under 18 and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.
8. International Data Transfers
Our infrastructure and service providers (Anthropic, Railway, Paddle) may process data in countries outside your own, including the United States and the United Kingdom/EU. By using the Service, you consent to this transfer.
9. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be posted here with an updated "Last Updated" date.
10. Contact
Questions or requests regarding this Privacy Policy: support@veritascase.com
This document is a general-purpose template intended to meet Paddle's marketplace requirements and applicable disclosure norms (including CCPA) and is not a substitute for independent legal advice. As the Service scales or expands to other jurisdictions (e.g., GDPR-covered regions), we recommend having this policy reviewed by a licensed attorney.