Privacy statement

Valid from 3 November 2026.

We keep as little about you as possible, we sell nothing on, and we show no advertising. Below you can read exactly which data we use, why, with whom we share it and how long we keep it.

Who is responsible

The controller is YAIS BV, Eikblokstraat 32, 2100 Antwerpen, België, company number BE 1006.558.904. For anything about your data, e-mail info@yaletree.com.

Which data, why and on what basis

• Your account: e-mail address, name as leader, password (only as an unreadable hash), date of creation and last login, and whether you declared that you are 18 or over. Needed to let you log in, send you a new password and e-mail you about your account. Basis: the contract (article 6.1.b GDPR).
• Your game: your country and everything you do in the game. Other players see your name as leader and the names you choose in the game. Basis: the contract.
• Your agreement: when you agreed to the terms, which version, your declaration about your age and, for an order, your request to start the subscription immediately, with the IP address at that moment. If you withdraw from an order, also your name, your e-mail address and the time of the withdrawal. This lets us show what you accepted and what you withdrew from. Basis: our legitimate interest and legal obligations (article 6.1.f and 6.1.c).
• Security: for a failed login, the e-mail address and IP address, for fifteen minutes, to stop password guessing; and the technical logs of the web server (IP address, requested page, time, browser) to detect errors and abuse. Basis: our legitimate interest in keeping the site secure.
• Subscription and payment: your tier, the start and end date of your period, and the customer and subscription numbers of Stripe. We never see your card or bank details; Stripe processes them. For the invoices, Stripe keeps your name, e-mail address, country or address and the amount. Basis: the contract and our accounting and tax obligations (article 6.1.b and 6.1.c).
• Help chat: what you type in the help chat and the answers of the AI, and how many messages you send per day. Basis: the contract (you ask us to help you).
• Proposals: the ideas, improvements and bugs you send in, with your name as leader, and our answer. Basis: our legitimate interest in improving the game and letting you know what we did with them.
• Reports of unlawful content: your name, e-mail address and your report, if you report something via Report content. Basis: a legal obligation (Digital Services Act).
• E-mails: we only send e-mails that belong to your account: a new password, the confirmation of an order, important changes to the terms, and the e-mails you switch on yourself in the game. No newsletter or advertising unless you ask for it separately.

We take no decisions about you that are made by a computer alone and that have legal effects, and we create no profiles for advertising.

AI in the game

• Help chat. Your messages in the help chat and the history of the conversation are sent to Anthropic (the language model Claude), which creates the answer. Anthropic acts as our processor and does not use the messages to train its models. We send your name as leader and your subscription tier along, never your e-mail address. Do not type personal data or sensitive information in the chat.
• AI images. The images for subscribers are created on our own computer, from data of the game world (such as the weather, buildings and the names in the game). No data goes to another company for this.

With whom we share data

• Stripe (Stripe Payments Europe Ltd., Ireland) for the payments, the invoices and the customer portal. Stripe is partly a controller itself, for example to prevent fraud; please also read Stripe's privacy policy.
• Anthropic (Anthropic, PBC, United States) for the help chat, as our processor. See Anthropic's privacy policy.
• The website, the game and the database run on the provider's own server in Belgium; no hosting company is involved.
• A public authority or court, only if the law obliges us to.

Outside the European Union. Anthropic and, for part of the processing, Stripe are based in the United States. The transfer is based on the EU-US Data Privacy Framework (for companies certified under it) or on the standard contractual clauses of the European Commission. You can request a copy of these safeguards via info@yaletree.com.

How long we keep data

• Your account, your game and your proposals: as long as your account exists. After your account is deleted, we erase them within 30 days.
• Help chat: up to 90 days after the last message of a conversation. At Anthropic, the messages are kept for a limited time according to Anthropic's rules.
• Failed logins: fifteen minutes. Server logs: a few weeks at most.
• Your agreement to the terms, your orders and your withdrawals: as long as your account exists and for 7 years after that, so that we can show what was agreed in case of a dispute or an inspection (the same period as for the accounts). After your account is deleted, we keep them without IP address and without name, with your e-mail address only as an unreadable code (a hash), separate from your account. After those 7 years we erase them.
• Invoices and payments: as long as accounting and VAT law requires (in Belgium 7 to 10 years).
• Reports of unlawful content: up to one year after they were handled.
• Back-ups: erased data may remain in an encrypted back-up for up to 6 months, until it is overwritten.

Cookies

We only use cookies that are strictly necessary for the site to work. No consent is needed for these, which is why you see no cookie banner. We use no cookies for advertising or statistics, and the site loads no fonts, scripts or images from other companies.

• PHPSESSID: remembers that you are logged in and protects the forms, until you close your browser.
• ge_remember: only if you tick "stay logged in", so that you stay logged in for 30 days.
• ge_lang: only if you choose a language with the language button, so that the site remembers that language, for one year.

When you pay, you go to Stripe's site. Stripe sets its own cookies there, among other things to prevent fraud.

Security

The site only works over an encrypted connection (https). We only store passwords and login codes as a hash, access to the server and the database is restricted, and back-ups are encrypted.

Young people

You must be at least 16 years old to create an account. The help chat and taking out a subscription yourself are for those aged 18 or over. If we find out that someone younger has an account, we delete it.

Your rights

You may access your data, have it corrected or erased, have the processing restricted, and receive your data in a common file format to take it with you. You can object to processing based on our legitimate interest. To do so, e-mail info@yaletree.com; we answer within one month. To check that it is your account, we send our answer to the e-mail address of your account.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (dataprotectionauthority.be), or with the supervisory authority of the country where you live.

Changes

If something important changes in this statement, we announce it in advance by e-mail or in the game.

Languages

This statement exists in Dutch and in English, with the same content.