Privacy & device storage

English source notice · version 2026-09-27-account-storage. Interface translations are convenience translations, not reviewed legal translations. Mandatory local rights are preserved.

The operator business identity and commercial terms are being finalized. Verified-email accounts and saved creator listing drafts are available. Education-license issuance, store publishing, purchases and creator payouts remain closed. These notices describe the current preview; they are not a claim of worldwide legal clearance.

Local projects and imported media

Guest edits remain in memory. Saving and exporting require sign-in, but signing in does not upload the browser world project. Saved browser drafts and preferences use local storage; imported Gaussian assets and selected audio use IndexedDB on this device. Local project ZIPs, desktop project files, installed tools and downloaded library files remain on your device. A local save or export is separate from public publishing.

Local files and browser site data are not a private cloud vault. Other people who can use the same operating-system account or browser profile may be able to read them. Keep your own backups and do not assume that signing out deletes project files or separates every local asset by account.

Accounts and sign-in

Account creation sends your email address, chosen password and requested username to the configured Supabase authentication service. The authentication provider processes passwords and verification codes and sends verification email through its configured delivery service. Username sign-in passes your username and password through Guassia's account service to that provider over HTTPS. Guassia's account database stores the verified account ID, normalized username, verified email address, verification time, account creation time and suspension state. The account database does not store your password or session tokens. A username does not publish your email address or automatically create a public profile page.

These records support sign-in, account ownership, access checks and abuse prevention. Verification-email delivery processes the destination email address and verification message. Request limits use keyed, hashed account or network identifiers and counters; this is not a promise of anonymous processing.

Remembered sessions on your device

The browser keeps an access token, account ID, username, email and expiry in this tab's session storage for at most one hour. It verifies a restored session with the account service. The browser does not persist your password or a refresh token. Sign out removes the remembered browser session; it does not delete the server account, saved drafts or downloaded files.

The desktop app may remember account details, access and refresh tokens and a library snapshot using the operating system's protected storage. If protected storage is unavailable, it does not fall back to a plaintext account file. This protection applies to the remembered account record, not every downloaded project or asset. Sign out removes the remembered desktop account when the device permits that operation; a removal failure is shown so you can retry.

Creator listing drafts and agreements

Choosing Save creator draft in the desktop app sends listing metadata to Guassia: your account ID, draft ID, game or asset type, title, description, intended price, license notes, timestamps, revision and draft status. These server-side drafts are not the world files, Gaussian assets or audio in your editor. Saving a draft does not upload an artifact, charge a publishing fee, make a public listing or grant a buyer license. Save on this device keeps a separate local listing draft.

When you explicitly accept the creator policy, Guassia records your account ID, the exact policy version and text hash, the acceptance request ID and time. Ordinary signup does not accept that creator policy automatically. Archived creator drafts remain server records; archiving changes their status and is not permanent deletion.

Hosting, providers and traffic measurement

Cloudflare delivers and protects this site and provides the account-service application and database. Supabase provides authentication. Network requests involve IP addresses and request information handled by these providers. Cloudflare Web Analytics reports visits and performance without an analytics cookie or a persistent visitor identifier. The editor does not send project contents to that analytics service. Hosting/security processing, account records and traffic analytics are different activities.

Read Cloudflare's privacy notice and its analytics data description. Provider retention and international processing depend on the service configuration and provider terms. No fixed retention period or particular data-residency country is promised here.

Purchases and other submissions

Store purchases, credit top-ups, paid game publishing and creator payouts are closed. The site does not currently accept payment details, seller identity documents or investor-form submissions. Signed-in bug reports, ideas, accessibility reports and translation reports become available only when the submission service and verification challenge are connected. Do not send payment or identity documents through listing descriptions. No advertising network, behavioral-advertising pixel or education-verification form is installed in this release. Imported project files are not used for advertising or to train an AI model.

Private reports and verification

When you choose Send report, Guassia stores your verified account ID, a random submission reference, report type, title, description, submission time, review status and review notes. The description includes the product, version and technical details you explicitly enter. Reports are used to reproduce problems, plan improvements and prevent duplicate submissions. The review service restricts access to the authorized owner account; reports are not public posts and their content is not sent to a translation service. No reply or implementation date is guaranteed.

Cloudflare Turnstile checks submissions for abuse. The verification token is checked by the service and is not part of the saved report. Preparing a report or downloading a local copy does not submit it. For retry protection, this browser tab may retain a random submission reference and a hash of the report, without storing the report text in session storage. No automatic collection of local files, passwords or diagnostic logs is included.

Retention and deletion choices

Account records, listing drafts, submitted reports, review notes and policy acceptance records are stored on the service; there is not yet a self-service account-deletion control or a published automatic erasure schedule. A deletion request is different from signing out, clearing browser data or archiving a listing draft. Any retention needed for applicable obligations must be explained when the request is handled; these notices do not turn indefinite retention into permission.

Save a backup with Save → Download website ZIP before clearing site data. Your browser's site-data settings can remove Guassia local storage, session storage and IndexedDB, including local drafts, assets, audio, sessions and preferences. Downloaded files are separate and remain wherever you saved them. Starting a new world changes the active draft; it does not erase every library asset. Removing an installed library item removes its local download rather than transferring or deleting account ownership.

Privacy rights and contact

Depending on applicable law, you may have rights to access, correct, delete or export personal data, restrict or object to processing, withdraw consent and complain to a relevant supervisory authority. Rights and exceptions vary. Guassia cannot retrieve device-only projects from its server, but it does hold the account, listing and submitted-report records described above.

Contact [email protected] with a privacy request. Identify the account or record involved without including a password or verification code. We will verify only what is proportionate to the request and apply the applicable response deadline. Do not send a government ID unless a suitable verification process has first been agreed.

Students and young people

Education verification and education-license issuance are closed. No student records should be submitted here. An ordinary account or school email address does not establish age, current enrollment or parental permission. A guardian/school-consent process and final account eligibility rules must be established before any child-facing account program opens.

Changes

This notice must be updated when data practices change. A language selector changes presentation; it does not imply a different hosting location or alter your legal rights. The commercial creator-policy text and acceptance version are separate from this updated privacy notice.