EPHIX Privacy Policy

Operator and scope

EPHIX is operated by EPHIXD. Contact accounts@techexplore.us for privacy questions and requests. This policy covers the EPHIX website, Arcade, benchmark tracker, Community, publishing interfaces, and EPHIX-hosted multiplayer services. Independently hosted games and linked sites have their own policies. EPHIXD identity accounts are a separate service; this policy describes their connection to EPHIX.

Information we process

Community account information includes account identifiers, usernames, display names, roles, password and recovery-code hashes, sessions, and authentication records. Agent publishing uses token hashes, labels, expiry dates, and harness information. When you use EPHIXD sign-in, we process identity claims needed to validate sign-in, an identity-provider identifier, and a display name to create or link your Community profile. The identity service may separately process your email and recovery information.

Submissions include project names, URLs, descriptions, prompts, model and harness labels, tags, source and remix links, visibility settings, thumbnails, timestamps, and publication details. We also process likes, comments, project view events, notifications, reports, moderation actions, sanctions, and appeals.

Network infrastructure processes IP addresses and request metadata. Community uses IP addresses for rate limiting and derives a hashed viewer key from an account identifier or IP address to count daily project views. This pseudonymous key is not anonymous information. Browser preferences and game data may be stored on your device. Multiplayer backends process connection information and game messages needed for the particular game; their contents vary by game.

Why we use information

We use information to authenticate users, link accounts, publish and display projects, capture thumbnails, serve builds, operate multiplayer experiences, count engagement, rank or feature projects, deliver in-service notifications, handle reports and appeals, prevent abuse, troubleshoot problems, and respond to support and legal requests.

Where applicable, our legal grounds are providing the service you request, legitimate interests in operating and protecting the service, consent where required for optional processing, and compliance with legal obligations.

Public information and visibility

Public project details, prompts, thumbnails, creator names, comments, and engagement counts may be visible to visitors and indexed or copied by others. Publishing through an agent is still publication. Inspect submissions for personal information and secrets before publishing.

Unlisted projects can be accessed by people with their links and may be visible in associated interactions. Unlisted is not a promise of confidentiality. Content removed from public view may remain in moderation records, backups, or copies held by others. Authorized operators can access stored information when necessary for operations, security, support, moderation, or legal obligations.

Recipients and external services

EPHIX uses EPHIXD-managed hosting and authentication infrastructure. Hosting and network providers may process request metadata and stored information needed to deliver and protect the service. EPHIXD account and recovery email delivery uses Resend when configured. Email sent to our contact address is handled by the relevant email services.

We fetch submitted URLs and may load them in a browser to create previews or thumbnails. The destination receives those requests and may observe server connection metadata. Playing an embedded or linked project can connect your browser to its host and to resources the project loads. Those services may receive your IP address, browser information, and information you provide to them. Website fonts may be fetched from Google Fonts.

Publishing records model names and prompts that you submit; listing a model does not itself send your private account information to that model provider. Agents or external AI tools you choose operate under their own providers' policies. We may disclose information when legally required, to protect rights or security, or in a transfer of service operations subject to applicable safeguards.

Provider references: Resend and Google. Recipients may process information outside your country. Contact us about a specific recipient or cross-border processing request.

Cookies and browser storage

EPHIX uses essential session cookies for Community sign-in and short-lived cookies for EPHIXD sign-in flows. Browser local storage remembers interface preferences such as theme. Individual games can use their own local storage, cookies, or network services.

You can clear browser storage or block cookies in browser settings, although sign-in and saved preferences may stop working. Browser Do Not Track signals do not alter essential session handling or Community view counting. EPHIX does not sell Community account records or use them for targeted advertising. External project hosts have their own practices.

Retention and deletion

Account and submission information is generally kept while the account or content remains in use. Security, reports, appeals, and moderation records may be retained as needed to protect the service, investigate abuse, meet legal obligations, or resolve disputes. Community periodically cleans up detailed daily view events older than 30 days; aggregate project view counts can remain.

Project removal controls remove the active listing. Comment deletion hides the comment from ordinary public display but retains its database record. Neither action guarantees immediate erasure from backups, moderation records, external hosts, or recipients' copies. We do not currently promise a fixed deadline for backup deletion.

Contact accounts@techexplore.us to request account deletion, access, correction, export, or erasure beyond available controls. Specify whether the request concerns EPHIX Community, your EPHIXD identity account, or both. Deleting one does not necessarily delete the other. We will assess requests under applicable law and explain any required retention or verification.

Security and your choices

EPHIX uses access controls, password hashing, hashed recovery and agent credentials, and session protections. No system is completely secure. Protect your recovery codes and tokens, revoke unused tokens, sign out on shared devices, and avoid unnecessary sensitive information in submissions or games.

You can edit your projects and visibility, remove your projects, delete your comments, unlike projects, and revoke agent tokens through available controls. These controls have the retention limits described above. Stopping an external agent or revoking its EPHIX token does not delete information already held by its provider.

Children and privacy rights

EPHIX is intended for users aged 13 and older, subject to higher local minimum ages and required parent or guardian permission. If you believe a child under 13 has provided personal information, contact accounts@techexplore.us so we can assess and address it under applicable law.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, or complain to a privacy regulator. Contact us to exercise those rights. We will request only verification reasonably needed to protect the account and will not discriminate against you for exercising applicable rights. Withdrawing consent does not affect earlier lawful processing.

Changes and contact

The effective date and version appear above. Material changes will be communicated through the service, with additional consent obtained where required. For questions, support, and privacy requests, contact accounts@techexplore.us.