Privacy Policy
Last updated: 27 October 2026
This page explains what information we collect when you order an oin game, and what we do with it.
Who we are
oin is the trading brand of an individual software supplier based in Kazakhstan and is the controller of the order data described here. The digital games are created automatically by oin's generator. The order and seller roles are explained in our Terms of Service.
What we collect
We only collect what our order form asks for, and nothing more:
- Your name
- Your preferred contact method and contact details - a WhatsApp phone number, Instagram or Telegram username, or another contact
- Your email address, used to send you order notifications and your finished game
- An optional referral or promo code
- One photo of the person the character is based on
- The character's name
- Your choice of final level (currently Almaty)
- The text of two letters you write
- 5 quiz questions with your answers
- For each friend NPC: their name, the line they say, and their photo (optional)
- Your acceptance of the Terms, including your confirmation that you have permission to use the submitted content and each person's likeness, with its timestamp and the version of the Terms you accepted
We do not run user accounts, and we never collect passwords or payment card details through this website. Payment happens on a checkout hosted by Polar, our merchant of record - your card and billing details go straight to Polar, and we never see or store them.
Why we collect it
We use submitted information only to assess and fulfill the order, build and deliver the game, provide support and refunds, verify authorization for content and likenesses, prevent fraud, and comply with legal obligations.
Where applicable, processing is based on steps requested before purchase and performance of the order contract, our legitimate interests in security and dispute management, legal obligations, and your explicit confirmation for processing the submitted photo and another person's likeness.
We do not build advertising profiles or use order data for marketing or resale. We keep the minimum order record needed for fulfillment, support, refunds, and evidence of content authorization. The finished game's private link remains available in cloud storage for one year from delivery.
Where your data is stored and third parties
Your order and photo pass through a small number of outside services that help us run oin:
- DigitalOcean - hosts our order server. Your order details, including your letters, quiz answers and consent record, are stored in a database on that server.
- Cloudflare R2 - stores the photos you upload and the finished game files, and serves your game at its private link.
- OpenAI - the AI service that checks each uploaded photo for quality and safety and draws the game characters from it. Only the photos and the instructions needed to draw them are sent. Under OpenAI's API terms, this data is not used to train its models.
- Resend - sends our emails, such as the payment confirmation and the email with your game, so it processes your name, email address and order details.
- Telegram - our team receives order alerts in a private Telegram chat, including your name, email, contact details and order status.
- Polar - the Merchant of Record, contractual seller, and an independent data controller; the applicable Polar legal entity is identified at checkout and on the receipt. Polar collects payment and billing details directly under its own privacy policy. We receive only payment confirmation and the buyer name, email, and country needed to match it to the order.
- Cloudflare - hosts and delivers this website. As part of serving the page, it processes your IP address and approximate country; this is also what lets us choose the initial site language and show prices in your local currency.
- PostHog - our site analytics service, hosted in the EU. It receives which pages you open, what you tap, how far you get in the order form, and a recording of how the site is used in which everything you type is hidden. It never receives the contents of your order: names, letters, quiz answers, contact details or photos.
- Your chosen messaging provider (for example, Meta for Instagram or WhatsApp, or Telegram) - if we contact you there about your order, that conversation is covered by the provider's own privacy policy.
Cookies and browser storage
This site does not use advertising or tracking cookies. It keeps a few small items in your browser's local storage: your chosen interface language (oin-lang) and pricing region (oin-region), which version of the order form you see (oin-form-variant, oin-form-variant-pinned) so it stays the same between visits, and a random visitor ID (oin-visitor-id) with the price you were last shown (oin-price-quote). If you start the order form, your answers and the photos you picked are also kept on this device (oin-order-draft) so you can finish later. They are deleted when you submit the order or press "Start over", and expire after 30 days.
To show the right price, the site sends the random visitor ID to our server together with your pricing region, language, order form version, the page you arrived on, and any referral code or campaign tag in the link. We use this only to run price tests and to charge exactly the price you were shown; it contains no name or contact details and is never shared with advertisers. The form version and visitor ID are also sent with your order. Our server sees your IP address on these requests and uses it only to prevent abuse. If an order fails to send, the form sends us a report of the technical error, without your letters, contact details or photos, so we can fix it. Your draft answers and photos stay on your device until you submit the order.
To understand how people use the site and where the order form is confusing, we use PostHog analytics. It records which pages you open, what you tap, which form steps and fields you complete (but not what you enter in them), and session recordings in which every text field is hidden. It is linked to the random visitor ID above, which is also sent with your order, but not to your name or email address. PostHog keeps its own item in local storage (ph_…_posthog), and its data is sent through our own domain. We use it only to improve the site, never for advertising.
Location, language, and local pricing
We select the initial site language and pricing region from the approximate country reported by our hosting provider's network edge. This is only a country-level guess, not precise location tracking. You can change the language in the site menu and the region on the pricing page. Kazakhstan purchases are charged through Polar in KZT.
Sharing
We never sell, rent, or share your order content with advertisers. It is shared only with the service providers listed above, each for the purpose described there, or when required by law.
Security
Submissions travel over HTTPS. The cloud storage that holds your files is access-restricted. Because anyone holding the private game link can open your game, please only share it with the person the gift is for.
How long we keep things and how to get them deleted
The hosted copy of the finished game and its private link are kept for one year from delivery; after that, we deactivate the link and delete the hosted copy. Downloaded game files remain on your own device, so keep your own backup. You may email oingift@gmail.com at any time to ask us to delete the photo, letters, quiz, and hosted game earlier. After a full refund, we deactivate access immediately. We may retain only the minimum order and consent record required for security, fraud prevention, or legal claims.
Polar independently retains transaction and tax records in its role as Merchant of Record. For payment-data requests, follow Polar's Privacy Policy.
Your rights
You can ask what information we hold about you, and ask us to correct or delete it, by emailing oingift@gmail.com. For payment or billing data, follow Polar's Privacy Policy; Polar controls that data.
Photos of other people
Every identifiable person whose photo or likeness will be used in the game must give prior, explicit consent. You confirm this authorization in the order form; we do not process unauthorized likenesses.
Children
oin is intended for people aged 18 and older. We do not knowingly collect information from children.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.
Contact
For any privacy question or request, email oingift@gmail.com.
Email order support: oingift@gmail.com
