Privacy Policy

Last updated: August 24, 2026. This is a template — have a lawyer review it before you rely on it.

This policy explains what happens to your data when you use Milkyplace ("we", "us"). We built the site to work with as little data collection as possible, but it does connect to several third-party services, and you should know exactly what each one does.

Data we collect directly

• Local preferences. Things like your selected AI provider and chosen theme are stored in your browser's localStorage, on your device only. We do not receive a copy of this.
• Gameplay activity. We do not currently log which games you play on any server we control.
• No account required. You can use the games and AI assistant without creating a Milkyplace account.
• Access code. Milkyplace is currently invite-only. When you enter an access code, our server records that the code was used, how many times, and when, and sets a session cookie in your browser so you don't have to re-enter it on every visit. We do not collect your name, email, or other identifying information as part of this — a code is not tied to a personal profile unless you choose to tell us who holds it (for our own reference when issuing codes).

AI features

The AI Assistant is "bring your own key": you enter an API key for a third-party AI provider (for example OpenAI or Anthropic), and it is stored only in your browser's local storage. When you send a message, it is transmitted directly from your browser to that AI provider — not to a Milkyplace server — using your key. We do not store, log, or have access to your conversations or your API key. Your use of the AI feature is also subject to the terms and privacy policy of whichever AI provider you connect.

The assistant is configured with safety instructions that direct it not to provide self-harm or suicide-related methods or encouragement, and to instead respond with crisis-support resources if you express thoughts of self-harm. This is a best-effort safeguard, not a substitute for professional help — see the crisis resources shown in the assistant if you or someone you know is struggling.

Games

Games on this site are supplied by third-party game platforms/networks and loaded in embedded frames. When you load or play a game, the game provider (and potentially their own advertising or analytics partners) may collect data about that session directly — such as your IP address, device type, and gameplay interactions — under their own privacy policy, separately from Milkyplace. We do not control what these third-party providers collect.

Music integrations

If you connect Spotify, you authenticate directly with Spotify using their own login flow. We receive only a temporary access token needed to control playback and display basic profile info (such as your display name); we do not receive your password. Your music listening data is governed by Spotify's own privacy policy.

Third-party data collectors

Using Milkyplace means interacting with several third parties beyond us, each of which may independently collect data under their own policies:

• The game platform(s) supplying embedded games
• Spotify, if you connect it
• Your chosen AI provider (e.g. OpenAI, Anthropic, or another provider you configure), if you use the AI Assistant

We encourage you to review each provider's own privacy policy.

Cookies and local storage

We use browser local storage (not tracking cookies) to remember settings like your AI provider choice and saved API key, and session tokens for music login. Third-party embeds (games, Spotify, Apple Music) may set their own cookies as part of their own service.

Children's privacy

Milkyplace is not directed at children under 13, and we do not knowingly collect personal information from them.

Your choices

You can clear your saved AI key and disconnect music accounts at any time from within the site. Clearing your browser's local storage removes all Milkyplace-related data stored on your device.

Changes to this policy

We may update this policy as the site changes. Continued use after an update means you accept the revised policy.

Contact

Questions about this policy: [email protected]