PRIVACY POLICY

This Privacy Policy explains what data mogs.gg ("we," "us," "our") collects, what stays on your device, and what we do with information that reaches our server. We built mogs.gg to be as privacy-respecting as possible. Here's exactly how it works.

1. What Stays on Your Device (Never Sent to Us)

The following data is created and processed entirely within your browser. It never leaves your device and never touches our servers:

• Camera feed: Your webcam video is processed in your browser by a locally-loaded machine learning model. We have no access to it.
• Facial analysis: The face mesh, landmark coordinates, blendshape data, and PSL scores are all computed inside your browser using Google MediaPipe Face Landmarker, an open-source model. The model files are downloaded to your browser's cache from Google's CDN — they run locally, not on a remote server.
• Your username: Stored in your browser's localStorage. We don't maintain a username database.
• Session data: Your ELO rating, win/loss record, and session ID are stored in your browser's localStorage.

2. What We Do NOT Do

To be explicit:

• We do not record, save, or store your camera feed or audio
• We do not use your facial data to train, fine-tune, or improve any AI or machine learning model
• We do not sell, share, or transfer your data to third parties for advertising, analytics, or any other purpose
• We do not use facial recognition or attempt to identify who you are
• We do not create profiles or dossiers about users
• We do not run any analytics or tracking services (no Google Analytics, no Meta Pixel, nothing)

3. What Is Sent During Matches (Peer-to-Peer)

During Ranked Arena and Private Mog matches, your video and audio are transmitted directly to your opponent using WebRTC, a peer-to-peer technology built into your browser. This means:

• Your video stream goes directly from your device to your opponent's device
• Your audio goes directly from your device to your opponent's device
• This data does not pass through our servers (except in rare cases where a direct connection can't be established, in which case a TURN relay server may temporarily route encrypted data — even then, we cannot see or access the contents)

Your opponent can see and hear you during a match. You should assume anything visible or audible on your end is seen and heard by your opponent in real time.

4. What Our Server Receives

Our server handles matchmaking, signaling (helping your browser connect to your opponent), and the ranking system. Here's what it receives:

• IP address: Used for connection management, rate limiting, and enforcing bans from the report system. We do not log IP addresses to disk or store them permanently. They exist only in server memory while you're connected and are discarded when you disconnect or the server restarts.
• Username: Sent to the server temporarily during matchmaking so your opponent can see your name. Not stored permanently.
• PSL score (during matches only): Your current median score is sent to the server during a match so it can be forwarded to your opponent and used for ELO calculations. It is not stored after the match ends.
• ELO rating: Sent by your browser at connection time. The server uses it for matchmaking. Updated ELO is sent back to your browser and stored locally. We maintain an in-memory leaderboard that resets when the server restarts.
• WebRTC signaling data: Session descriptions and ICE candidates (networking metadata needed to establish peer connections). These are relayed between players and not stored.

5. How the AI Model Works

We want to be transparent about the technology:

• The facial analysis model is Google MediaPipe Face Landmarker (float16 variant)
• The model file (~5 MB) is downloaded from Google's public CDN into your browser the first time you use the Service. After that, your browser caches it.
• The model runs using your device's GPU (via WebGPU/WebGL) or CPU — entirely in your browser
• It detects 478 3D facial landmarks and 52 blendshape scores (facial expressions)
• Our code then calculates geometric ratios (symmetry, canthal tilt, jaw proportions, etc.) from those landmarks and produces a composite score
• This entire pipeline — from camera frame to score — happens on your device. Our server never sees a single frame of your face.

6. Local Storage (Browser)

We use your browser's localStorage to store:

• Your username (key: mogs_name)
• Your session data including ELO, win/loss record, and session ID (key: mogs_session)

We do not use cookies. You can clear this data at any time through your browser settings. Clearing it resets your username and ranking.

7. The Report System

If you report another user, the report is tied to their IP address (not their username). Reports are stored in server memory only and are used to trigger automatic temporary bans when a threshold is reached. Report data is automatically cleaned up after a short window (a few minutes) and is fully lost when the server restarts. We do not permanently log reports.

8. Third-Party Services

mogs.gg uses the following third-party services:

• Google MediaPipe (via Google/jsdelivr CDN): Face landmarker model files are downloaded from Google's CDN. Google's CDN may log standard access information (IP address, user agent) per their own privacy policies.
• Google Fonts: Font files are loaded from Google's servers. Same CDN logging applies.
• STUN/TURN servers: We use public STUN servers (Google) and a public TURN relay to help establish peer-to-peer connections. These services see networking metadata (IP addresses) but not your video or audio content.

We do not use any advertising networks, social media trackers, or analytics platforms.

9. Data Retention

We don't have a data retention policy because we don't retain data. All server-side state (connected users, active matches, reports, bans) exists only in memory and is lost on server restart. The only persistent data is what your browser stores locally, which you control.

10. Children's Privacy

mogs.gg is not intended for anyone under 18 years of age. We do not knowingly collect information from minors. If you are a parent or guardian and believe your child has used the Service, please contact us at privacy@mogs.gg and we will take appropriate action.

11. Your Rights

Because we store almost no data about you, most traditional data rights (access, deletion, portability) don't apply in a meaningful way. That said:

• You can delete all locally stored data by clearing your browser's localStorage for mogs.gg
• You can revoke camera/microphone permissions through your browser settings
• You can stop using the Service at any time with no consequences

If you are located in the European Economic Area, United Kingdom, or California, and you believe we hold any data about you, contact us and we will respond promptly.

12. Changes to This Policy

We may update this Privacy Policy at any time. When we do, we will update the "Last updated" date at the top. Continued use of the Service after changes means you accept the new policy.

13. Contact

Questions about privacy? Reach out at privacy@mogs.gg.