1. GOOGLE OAUTH AUTHENTICATION & MINIMAL DATA COLLECTION

When signing in via Google NextAuth, GULPO3D.io requests only essential public account information: your display name, email address, and avatar image URL. We never request, view, process, or store your Google account password or personal private files. Guest pilots may play immediately without providing any personal data.

2. ENCRYPTED CLUSTER DATABASE STORAGE

Player telemetry, seasonal match experience, high score leaderboards, coin balances, and unlocked snake inventory items are stored in secure, enterprise-grade encrypted database clusters managed via Aiven Cloud MySQL. Connection strings and credentials use TLS 1.3 encryption. We strictly do not sell, license, or monetize player records to advertising brokers.

3. BROWSER STORAGE & CLIENT PERFORMANCE COOKIES

We use browser local storage and essential session tokens exclusively for core game functionality: preserving your graphics quality tier, volume settings, server region preferences, and equipped loadout. We do not deploy intrusive third-party cross-site tracking cookies.

4. GDPR / CCPA USER RIGHTS & DATA ERASURE

Under international privacy regulations (including GDPR and CCPA), players hold the right to access, export, or request the permanent deletion of their account profile and game data records. You can request immediate profile erasure by contacting our compliance team or disconnecting your Google authorization.