Privacy Policy

1. Who we are

FaceIQ Labs, Inc. ("FaceIQ Labs", "we", "us"), a Delaware corporation located at 111b South Governors Avenue, Dover, DE 19904, United States, operates Mog Stars. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use Mog Stars. It is specific to Mog Stars and supplements (and where applicable, supersedes for Mog Stars features) the FaceIQ Labs Master Privacy Policy.

2. What we collect

2.1 Account information

• Google account identifier, name, email, and profile image (via Google sign-in).
• Mog Stars handle / display name.
• Self-attested gender and ethnicity (used to apply ratio scoring; optional, editable).

2.2 Biometric information

While you play Mog Stars we collect and process the following biometric information from your device camera:

• Live video frames of your face during matches.
• Facial landmarks and geometric measurements (face shape, ratios, symmetry, harmony score).
• Selected still snapshots captured at key moments of each match (e.g. front and side reveals, end-of-match Mog Card images).

We do not generate or store face-recognition templates that could be used to identify you across services. We do not sell biometric data, and we do not use it to train face-recognition models.

2.3 Match and device data

• Match metadata (opponent, IQ, rank, score deltas, timestamps).
• Reports filed by or against you.
• IP address (hashed for security/rate-limit purposes), user-agent, approximate country.
• Cookies and local storage entries used for session, queue state, and preferences.

3. Why we use it

• Run matches. Stream your live face to your opponent and score the match in real time.
• Generate Mog Cards. Capture end-of-match snapshots and persist them for the winner's collection (see Mog Stars Terms §4).
• Leaderboards and replays. Display rank, history, and replays.
• Trust and safety. Detect virtual cameras, image overlays, multi-accounting, harassment, and underage participants.
• Account and product operations. Authentication, support, security, fraud prevention.
• Legal compliance. Where required by law.

4. Your biometric consent

We process your biometric information only after you give express, opt-in consenton the "Enter the Arena" screen. Consent is logged with a timestamp, version, and hashed IP. You can withdraw consent at any time by deleting your Mog Stars account; doing so prevents future matches and triggers deletion as described in §6.

For residents of jurisdictions with specific biometric privacy laws — including, without limitation, the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), Washington RCW 19.375, and the EU General Data Protection Regulation (GDPR Art. 9) — your consent on the Arena entry screen serves as the written release / explicit consent required by those laws. You may revoke this consent at any time per §6.

5. Who sees your data

• Your opponent sees your live camera feed and handle during the match.
• The winner of any match keeps a Mog Card containing the loser's face image and score, in their collection.
• Other players and spectators may see your handle, rank, and replays of your matches; matches are public by design.
• FaceIQ Labs staff may access match data and reports for trust-and-safety review.
• Service providers we rely on (Google for authentication, Vercel for hosting, our database provider). They process data on our behalf under contract.
• Law enforcement, where legally compelled.

We do not sell your personal information or biometric information.

6. Retention and deletion

• Live video frames used for real-time scoring are processed in memory and on-device and are not persisted as raw video.
• Match snapshots and harmony scores are retained while your account is active and for up to 30 days after account deletion (to handle disputes), then permanently deleted from active systems.
• Mog Cards held by other players are not retroactively expunged from their collections, but on request your face image is replaced with an anonymized placeholder wherever it is publicly displayed under our control.
• Backups may retain data for up to 90 days after deletion, after which they are rotated out.
• Audit logs (consents, moderation actions, security events) are retained as long as legally required, in line with applicable biometric privacy laws (e.g. BIPA mandates that biometric information be destroyed when the initial purpose is satisfied or within 3 years of the last interaction, whichever first occurs).

7. Your rights

Depending on where you live, you may have rights to access, correct, port, restrict, object to, or delete your personal and biometric information, and to withdraw consent. To exercise any right, email privacy@faceiqlabs.com. We respond within the timeframes required by applicable law (no more than 45 days under CCPA, 30 days under GDPR).

8. International transfers

Mog Stars is hosted in the United States. If you access Mog Stars from outside the US, your data is transferred to and processed in the US. We rely on Standard Contractual Clauses or other valid transfer mechanisms where required.

9. Children

Mog Stars is not directed to and not available to anyone under 18. We do not knowingly collect data from minors. If we learn that we have collected data from a minor, we delete it.

10. Security

We use industry-standard encryption in transit (TLS) and at rest, hashed identifiers for sensitive lookups, and access controls limiting biometric data access to engineers with a legitimate operational need. No system is perfectly secure; we do not guarantee absolute security.

11. Changes

We may update this Privacy Policy. For material changes affecting biometric data, we will require you to review and re-accept the updated Policy and biometric consent before continuing to play.

12. Contact

FaceIQ Labs, Inc., 111b South Governors Avenue, Dover, DE 19904, United States. Privacy questions: privacy@faceiqlabs.com.