Privacy Policy

Welcome to Omoggle, operated by Omoggle LLC. This Privacy Policy explains how we handle account, guest-session, gameplay, payment, analytics, moderation, Discord integration, and camera-check information for the Omoggle 1v1 Arena, Lab reports, leaderboard, private rooms, and related community features.

References to "Omoggle," "we," "us," or "our" in this Privacy Policy refer to Omoggle LLC and its authorized agents.

Omoggle uses MediaPipe WebAssembly for facial landmark tracking and facial analysis. Our approach is designed so the camera challenge and facial analysis run locally on your device rather than serving as a permanent identity record:

• Client-Side Processing: Facial scanning, landmark detection, and biometric analysis run locally on your device. Saved Lab reports are the limited exception described below.
• Session Gate Only: The Omoggle camera challenge is used as a short-lived anti-abuse and access gate. It is not a government ID check or durable proof of identity.
• No Server Storage of Faceprints: We do not store, sell, lease, trade, or otherwise profit from facial meshes, faceprints, or face templates.
• Ephemeral Processing: Once a match or analysis session ends, the local biometric mapping is immediately discarded from your device's active memory.
• What We Do Store: Only a boolean "verified" status plus a timestamp (not an image, mesh, or template) is persisted on our servers so that the 24-hour gate works. This record contains no biometric content.
• Saved Lab Reports: When you save a Lab report, Omoggle may store one private final scan snapshot plus sparse normalized overlay points for that report so paid/Pro users can reopen feature overlays later. We do not store raw video, continuous camera feeds, dense landmark arrays, faceprints, or face templates.

If you are a resident of Illinois, Texas, or Washington, please also see Section 7 ("Biometric Information Privacy Act") below for state-specific disclosures.

The 1v1 Arena connects users globally using live video feeds. It is imperative that our users understand how this media is handled during gameplay:

• Real-Time Routing: Camera feeds are routed in real-time via secure WebRTC/SFU connections (LiveKit). They are strictly live.
• Promotional and Editorial Use: By participating in live matches, you authorize Omoggle to capture and use match-related content, including clips, screenshots, gameplay visuals, audio, usernames, display names, profile images, rankings, and match results, for promotional, editorial, advertising, and platform-marketing purposes on Omoggle properties and Omoggle-operated social media channels, subject to applicable law.
• Peer-to-Peer Foundation: The connections are optimized for low-latency live interaction and immediately terminate once an arena match concludes.

Where Omoggle elects to create or publish promotional assets from match content, we may retain those assets for as long as reasonably necessary for brand, marketing, archival, legal, or business record purposes, unless a shorter period is required by law.

To operate Omoggle, calculate your Elo rating, and maintain the Global Leaderboard, we store minimal account-level information including:

• Authentication descriptors provided during login (managed by Supabase).
• Guest session identifiers for anonymous play before an account is claimed.
• Your username and selected display preferences.
• Match outcomes (win/loss/draw) and your current Elo rating.
• A short-lived verification session record (session id + boolean outcome + expiry).
• Payment metadata returned by Stripe (we never see card numbers).
• Optional Discord link metadata if you connect your Discord account (Discord user id, username, avatar hash) used to sync community roles.
• Basic analytics events (page views, button clicks) — no biometric content.

This non-biometric data is securely stored in our databases to provide you with the persistent ranking and progression features of the Omoggle platform.

Omoggle lets you enter as a guest so you can try the Arena without first creating a permanent account. A guest profile may have a temporary display name, rank, Elo, match history, private room activity, verification status, device/session identifiers, and anti-abuse logs associated with it.

Guest access is intended to be temporary. If you claim your rank with Google or another supported sign-in method, we link the guest profile data that is reasonably available in your current browser session to the claimed account. If you clear browser storage, use a different device, or wait too long, guest profile data may become unavailable and may not be recoverable.

Guest accounts are still subject to this Privacy Policy, the Terms of Service, and our safety systems. We may limit, suspend, or delete guest sessions to prevent abuse, enforce age and safety requirements, or keep the Service reliable.

We keep each category of data only as long as needed for the purpose it was collected. Verification and Arena face imagery are not written to our servers. Saved Lab reports may store one private final scan snapshot for report overlays, as described above.

You may request earlier deletion at any time via the Account settings or by emailing privacy@omoggle.com.

If you reside in Illinois (BIPA, 740 ILCS 14), Texas (CUBI, Bus. & Com. Code §503.001), or Washington (HB 1493, RCW 19.375), the following applies to you:

• What we process: ephemeral facial landmark coordinates generated in-browser by MediaPipe for the purposes of (a) confirming a live person is present, (b) powering real-time gameplay visuals, and (c) deriving saved Lab report metrics and sparse overlay points.
• What we do not do: We do not create, collect, capture, purchase, receive through trade, sell, lease, trade, or otherwise profit from a biometric identifier or biometric information as those terms are defined under BIPA. We do not retain faceprints.
• Retention schedule: Verification and Arena landmark values are destroyed at the end of the session/match. Saved Lab report snapshots and sparse overlay points are retained only with the saved report and are deleted during account/report deletion.
• Consent: By clicking through the camera check, you acknowledge you have read this policy and the Terms of Service and provide informed written consent (via electronic signature) to the processing and saved Lab report storage described here.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of inaccurate or unnecessary data.
• Object to or restrict processing, including withdrawing consent at any time.
• Receive your data in a portable, machine-readable format.
• Lodge a complaint with your local supervisory authority.

Our legal bases for processing are (a) your consent (camera check, marketing emails), (b) performance of a contract (gameplay, leaderboard, subscriptions), and (c) legitimate interests (fraud prevention, rate limiting). Contact privacy@omoggle.com to exercise any of these rights.

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to limit the use of sensitive personal information, and to opt out of the "sale" or "sharing" of personal information. Omoggle does not sell or share personal information as those terms are defined under the CCPA/CPRA. We do not use or disclose sensitive personal information (including biometric data) for purposes other than those permitted by §7027(m) of the CCPA regulations. To exercise your rights, email privacy@omoggle.com. You will not receive discriminatory treatment for exercising any CCPA right.

Omoggle operates globally. Non-biometric data (account info, match metadata) may be processed on servers located outside your country, including the United States. Where EU/UK data is transferred, we rely on Standard Contractual Clauses with our sub-processors (Supabase, Stripe, Resend, LiveKit, Discord, Redis, Vercel).

Omoggle is an 18+ service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly. Parents or guardians who believe their child has submitted information to Omoggle should contact us at privacy@omoggle.com.

We may update this Privacy Policy from time to time. Material changes will be announced via the app or by email. The "Last Updated" date at the top of this page reflects the most recent revision.

Omoggle LLC expressly prohibits the use of the Service — including its platform, API endpoints, match infrastructure, video feeds, avatar system, leaderboard data, Lab report engine, MediaPipe integration, and any associated content or output — for purposes that infringe upon the intellectual property rights of any third party. Without limiting the foregoing, the following are strictly prohibited:

• Unauthorized Reproduction: Scraping, copying, mirroring, or reproducing Omoggle's proprietary content, scoring algorithms, facial-analysis pipeline outputs, leaderboard data, or match replay data without express written permission from Omoggle LLC.
• Commercial Exploitation: Using any output, data, or content generated by the Service to train competing AI or machine-learning models, to build derivative products, or for any commercial purpose not explicitly authorized in writing by Omoggle LLC.
• Brand Impersonation: Using the Omoggle name, logos, trade dress, or any confusingly similar mark in a manner that is likely to cause confusion as to the source, sponsorship, affiliation, or endorsement of any product or service.
• Third-Party IP Violations: Using the Service to upload, transmit, display, or distribute any content that infringes upon the copyright, trademark, trade secret, patent, or other intellectual property rights of any third party.

Enterprise, business, or automated access to the Service for any of the above purposes is prohibited without a separate written agreement with Omoggle LLC. Violations may result in immediate account termination, IP-level blocking, and/or legal action.

Questions, concerns, or requests regarding this Privacy Policy or our data handling practices can be sent to privacy@omoggle.com. We respond to verifiable requests within 30 days (or 45 days for CCPA requests, as permitted by statute).