Privacy Policy

Effective 22 September 2026

Quoxen is made in Finland. Ordinary play keeps everything on your Mac. Optional AI-written dialogue and spoken voices need an account and send fictional dialogue to AI providers. This website uses analytics only if you say yes. That is most of it; the rest of this page is the detail.

The game

Quoxen generates and simulates the town on your computer. Ordinary play, including built-in text dialogue, needs no account and no internet connection. The optional AI-written dialogue and spoken voices described below each need an account and a connection.

Saved towns are files in your user library (~/Library/Application Support/Quoxen/saves) and the quick save next to it. They contain the town, its people and the name you give the save. To remove them, delete the saved files.

The game sends no analytics, crash reports or telemetry to us. If you install it from the Mac App Store or TestFlight, Apple may collect crash and usage data under its own privacy terms. TestFlight also shares crash reports and any feedback you submit with us, including screenshots you choose to send. See Apple's TestFlight information.

AI dialogue, speech and your account

The game has two optional online features: AI-written dialogue uses OpenAI to write conversation lines, and spoken voices use Google Gemini to read dialogue aloud. Each is off until you turn it on and requires a Quoxen account and an internet connection. The account holds your sign-in identity, such as your email address, and a record of your use of these features so that we can meter them and enforce their limits. We use it for nothing else and never sell it.

When AI-written dialogue is enabled, conversations near the camera or ones you choose to listen in on can send relevant game context (the two Sonderfolk, their recent memories and the situation) to OpenAI. If live generation is disabled or unavailable, the game uses built-in lines. Those built-in lines are produced on your Mac.

When spoken voices are enabled, the revealed lines, assigned voice and delivery instructions can be sent to Google Gemini to generate speech. Speech can read either AI-written or built-in lines. The dialogue context sent to these providers is about fictional townsfolk, and no account identifier of yours is included in it. The providers process requests under their own terms.

This website

The site is served by Firebase Hosting (Google), which processes IP addresses for abuse detection and usage analysis. Google's Firebase privacy information says Hosting retains IP data for a few months. This hosting activity is separate from the optional analytics below.

Analytics and cookies

We would like to know roughly how many people visit and which pages they read. For that the site can use Google Analytics through Firebase, which sets cookies (_ga and a _ga_… cookie) to distinguish visits and sessions. It collects information such as page views, browser and device details, and approximate location. These cookie identifiers can link visits from the same browser. See Google's description of Analytics data collection.

Analytics is off until you choose Accept in the banner. Choosing Decline, or pressing Escape, keeps it off. Your choice is stored in your browser's local storage under the name cookie-consent so the banner does not return on every page; that entry holds only the word "accepted" or "declined". To change your mind, clear the site's data in your browser and the banner asks again.

The legal basis for analytics is your consent (GDPR Article 6(1)(a)). Google acts as our processor; its own notice is at policies.google.com/privacy.

Fonts

The typefaces load from Google Fonts. Your browser requests them from Google's servers, which receive your IP address and browser request details even when you decline analytics.

Email and the contact form

If you write to us, we keep the message for as long as we need it to answer you and handle any follow-up, then delete it. We do not add your address to any list.

The support form sends your name, email address, subject and message through our Firebase function and Brevo, our email delivery provider, so we can receive and reply to it. To limit repeated submissions, the form also stores your IP address and submission times in Firestore (Google).

Your rights

Under the GDPR you can ask what personal data we hold about you, ask for it to be corrected or deleted, withdraw consent at any time, and complain to the Finnish Data Protection Ombudsman. For ordinary play there is nothing to hold. For a Quoxen account, deleting it removes your sign-in identity and usage record. For website analytics and messages sent through the contact form, write to the address below about your data and we will answer.

Contact

The data controller is Valtone Oy, Finland. Email support@quoxen.com.

Changes

When this page changes, the date at the top changes with it. A change that affects what the game sends anywhere is also noted in that build's release notes.