Last updated: April 2026
We want you to know what data we use and why, without any runaround. WonkyTales doesn't sell your contact list or your "digital soul"; we use data to make the game work, to improve the experience when it makes sense, and to process payments.
With an account: email, username, and what the game needs to function: chosen characters, decisions, streak, usage stats, and if you purchase, the status of your purchases (Pro or characters) linked to your account.
Without an account (guest): we use minimal data to enforce free-play limits, such as your IP address and a technical device fingerprint. This fingerprint is derived from browser and hardware characteristics (including GPU rendering output, audio processing response, screen settings, and system timezone), hashed with SHA-256 before storage — it is not a name or ID, and it cannot be reversed to identify you personally. It exists solely to prevent abuse of the free play limit.
Google or other sign-ins:if you sign in with Google, we receive what that method allows (e.g. email) based on what you approve on Google's screen.
Passwords: if you create an account with email and password, we (the WonkyTales team) do not have access to your password: we can't see it, copy it, or email it to you. Only a secure technical hash exists, managed by our authentication provider — not even we can read it. If you forget it, use "forgot my password" to set a new one.
To generate stories, we send our AI provider (e.g. OpenAI) the necessary context: character, the in-game name you type before playing (not your account email or username), any friends' names you add, decisions, and scenario. This happens to create the game text, not to train personalized advertising on WonkyTales. The provider's policies apply on their side; we choose providers that follow industry-standard practices.
The internet doesn't store everything in a basement under your house: we use trusted cloud services (e.g. Supabase for accounts and database, and the AI provider mentioned above). These services may process information in data centers in different countries (including, at times, the United States or others where those companies operate).
This doesn't mean we "sell your data to some government": it means that, like almost any modern app, we rely on infrastructure from providers that follow security standards and best practices. We choose well-known tools to minimize risk, not to spy on you.
Running the game, remembering your progress, enforcing fair limits, preventing service abuse, processing payments via PayPal, and replying if you write to us. We do not sell your information to third parties to spam you. If we ever use emails for game news, it will be with your explicit consent (opt-in).
We use two tools to understand how people use WonkyTales so we can keep improving it:
Google Analytics (GA4):tells us which pages are visited and general usage patterns — things like "how many people started a story today." No personal identification.
PostHog: tracks specific in-game events (like "story completed" or "character selected") and lets us view anonymized session recordings — basically a replay of how someone navigates the game, with all text fields masked (passwords, emails, names you type are never visible to us). We use this to spot confusing moments and fix them.
Neither tool is used to show you ads or sell your data. We use them purely to make the game less broken.
Payments are processed by PayPal. We do not store your card number on our servers; PayPal handles that under their own rules and privacy policy.
We use session cookies to keep you logged in. In the browser we store preferences (text speed, voice, sound) and, if you play without an account, the guest play counter. We do not use third-party advertising cookies tracking you across the web.
You can request access, correction, or deletion of personal data associated with your account by writing to us. If anything can't be deleted due to legal or minimal technical obligations, we'll tell you honestly.
We may update this page; the date above tells you when it was last changed. Privacy questions or data requests: [email protected]. Terms of service are at terms of use.