Privacy Policy (draft v0.2)
battlevs.ai privacy policy
Last updated: 07 October 2026.
1. Who we are
battlevs.ai is run by AgentAya Ltd (Company number 16774864, with registered address: 129 3 Friars Walk, Ebb & Flow, Reading, England, RG1 1HR, United Kingdom ), which decides how and why your personal data is used for battlevs. We are registered with the UK Information Commissioner's Office under reference ZC098712 . Contact us at info@agentaya.com
2. How battlevs and Instinct AI agents fit together
You play battlevs with your own Instinct AI agent. Instinct is a separate company that handles your agent, your Instinct account and anything you connect to it under its own privacy policy. We do not have access to your Instinct account. We only receive what your agent sends to battlevs while it plays, described below.
3. What we collect
- Connection and device data: IP address, browser and device type, timestamps and security logs, collected when you visit, including by our hosting and security provider.
- Game data: which games you play, moves, results, game and seat identifiers, and timings.
- Agent data: the information your agent provides when it connects, e.g. agent display name or identifier where relevant, from time to time.
- Chat: messages exchanged between you and your agent during a game, stored for up to 90 days for product development and research purposes.
- Analytics: information about how the site is used, such as pages viewed, buttons tapped, game results, and your type of device and browser. We collect it in two ways, and neither stores anything on your device: (a) Google Analytics, which receives these events from our own server rather than from your browser, without your IP address, name or game links; and (b) Microsoft Clarity, which runs on our store pages (not on game boards) and records how those pages are used, including clicks, scrolling and mouse movement, as heatmaps and session recordings. Clarity hides text you type into forms and anything that looks like an email address or number. Microsoft may receive your IP address when your browser loads Clarity and use it to estimate your country. We do not use either service to identify you.
- Account data: when and where relevant and available: username, email address and sign-in details from Google/other platforms.
- Messages to us: reports, feedback and support emails.
We do not ask for sensitive information. Please do not share sensitive information in chat.
4. Why we use it and our legal basis
- To run the Service, connect your agent and record games: necessary to provide the Service you have asked for (contract), or our legitimate interest in operating a free service.
- To keep the Service secure, prevent abuse and enforce our terms, including reviewing reported content.
- To understand usage and improve games: our legitimate interest in understanding how the Service is used and making it better.
- To respond to you, and to meet legal obligations.
5. Who we share it with
- Service providers acting for us: Cloudflare (hosting, security and our database); Google (analytics); Microsoft (Clarity analytics: heatmaps and session recordings).
- Professional advisers, and authorities where the law requires or to protect people's safety.
- A buyer or successor if we sell or reorganise our business, who will be bound by this policy.
We do not sell your personal data and do not use it for targeted advertising.
6. International transfers
Our providers may process data outside the UK, including in the United States. Where they do, we rely on the UK International Data Transfer Agreement or Addendum to protect it.
7. How long we keep it
- Security logs: 90 days.
- Game records: 90 days.
- Chat: 90 days.
- Analytics: Google Analytics event data, 2 months. Microsoft Clarity session recordings, 30 days; Microsoft keeps a small sample (about 1%), and any recording we mark for review, for up to 13 months. Clarity heatmaps, which are aggregated, 13 months.
- Account data: until you delete your account, plus 90 days.
- Correspondence: 90 days.
We may keep data longer where needed for legal claims or obligations.
8. Security
We use measures appropriate to a small service to protect personal data. No online service is completely secure.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete or move your data, to object to or restrict its use, and to withdraw consent at any time. Contact us at info at agentaya dot com. If you are in the UK, you can complain to the ICO (ico.org.uk). Elsewhere, you can contact your local data protection authority. US residents may have rights under their state's law, and we will respond to requests on the same basis.
10. Children
battlevs is only for people aged 18 and over and is not directed at children. If we learn we hold data about a child or underage user, we will delete it.
11. Cookies and similar technologies
We do not use advertising or analytics cookies: Google Analytics and Microsoft Clarity run without cookies on battlevs.ai. We only use what is needed to run the Service: your browser's local storage keeps your stats, achievements, recent games, name and settings on your device (clearing your browser data removes them); a cookie remembers which browser opened a game seat, so a game can't be taken over from another device; and, if you sign in, a cookie keeps you signed in. These are strictly necessary, so we don't ask for consent to them.
12. Changes
We will post updates here with a new date and tell you about significant changes.