Who we are and what this covers
Vitverk, Iceland, publishes Seed and is responsible for the personal-data processing described here. Contact us at support@vitverk.is.
This policy covers Seed's website at flaxa.app, the guest companion and MCP service at mcp.flaxa.app, and the Seed plugin when used through a compatible host. Seed is a temporary simulation. It does not require a Seed account or connect to your live SEED game account. Its initial launch is intended for Iceland; that does not mean all data processing takes place in Iceland.
Information processed by Seed
Guest play. The open companion keeps its simulated character, calendar, activities, resources, goals, and display choices in the page's memory. Reloading or closing it loses that local progress. Text you or your assistant enter, such as an activity or goal title, becomes part of the simulation. Please use fictional information and do not enter passwords, payment details, sensitive personal information, or information about other people.
Tools and temporary delivery. When a host calls a Seed tool, our service receives the arguments supplied by that host. These can include a simulation snapshot, your requested action, a random session identifier, a command identifier, and a temporary credential limited to that guest. The service processes them to return a result or deliver a command to the open companion. It does not receive your entire conversation automatically.
For commands to an open companion, Cloudflare hosts a temporary memory-only mailbox containing bounded requests, results, and random routing credentials. Its authorization expires five minutes after the last successful heartbeat from the companion. The mailbox is not written to durable application storage. Expired records are cleared when expiry is processed or the runtime is discarded; the five-minute expiry is an access limit, not a promise of physical deletion at an exact second. No game simulation continues on the server after the view closes.
Technical requests. Hosting and network delivery involve technical information such as IP addresses, requested addresses, request times, browser or client information, and response or error details. Cloudflare processes this information to deliver and protect the website and MCP service. Infrastructure security and operational records are separate from guest progress and may outlast a guest session.
Support. If you email us, we and our email service process your address, message, and any information or attachments you provide to respond and handle the issue. Avoid sending active guest credentials or sensitive data in a support request.
When you use Seed inside chat
In hosts that support it, the companion automatically supplies captured game context to the host as the guest changes. This may include a summary, calendar and activity information, a bounded state snapshot, and the temporary credential that lets the host address that guest. The separate browser-owner credential is not included in that context.
The Share with chat control explicitly sends a snapshot as a message and may cause the host to respond. Automatic context updates do not themselves send that message. Tool results and either kind of shared context may remain with the chat host after the companion closes.
Your host, such as ChatGPT or Claude, handles its account, conversations, model processing, retention, and privacy settings under its own terms and policies. Closing Seed does not delete copies held by the host. Review its settings and contact it about those copies. In a standalone browser view, there is no embedding chat host to receive this context.
Why we process information
Where information is personal data, we use the following GDPR bases:
- Providing the service you request: processing tool inputs, results, and necessary session delivery supports performance of the service under our terms, Article 6(1)(b).
- Operating and protecting Seed, and answering enquiries: necessary technical processing, abuse prevention, troubleshooting, and correspondence support our legitimate interests in a functioning, secure service and responding to people who contact us, Article 6(1)(f). These interests must be balanced against your rights.
- Meeting legal duties: we process information when necessary to comply with an applicable legal obligation, Article 6(1)(c).
You do not need to supply your name or create a Seed account. Necessary network and tool information must be processed for the requested online feature to work. Contact details are needed if you want a reply to an enquiry. Simulated outcomes are game mechanics, not automated decisions about you with legal or similarly significant effects.
Providers and international processing
Cloudflare supplies hosting, network security, and temporary command delivery. Our email provider handles support correspondence. The chat host you choose receives the tool results and game context described above. We may also disclose information where a legal duty requires it or where necessary to establish, exercise, or defend legal claims.
These services may process information outside Iceland and the European Economic Area. Cloudflare publishes its processing terms, including provisions on international transfers and standard contractual clauses, in its Data Processing Addendum. Its subprocessor information identifies the providers it uses. The applicable arrangements depend on the services involved. Contact us for information about the safeguards relevant to processing for Seed. This policy does not promise Iceland-only storage or a particular chat provider's retention or model-training practices.
Retention and your choices
Seed does not save guest worlds for later retrieval. Local progress ends with the page session, and the temporary command channel expires as described above. Copies in your chat or your own exports are separate from the guest session.
Support correspondence is kept for as long as needed to respond, resolve the issue, and meet applicable legal obligations or handle related claims. The nature of the issue, follow-up work, security needs, and applicable obligations determine that period. Hosting and security records follow the relevant service configuration and provider requirements; they are not subject to the guest channel's five-minute limit. Contact us about a particular record or deletion request.
You can stop using the companion by closing it and disconnect the plugin through your host. Do not share its temporary channel credentials: anyone receiving a valid command credential could send commands to that guest while the channel remains active.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction, and a portable copy of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Email support@vitverk.is to exercise a right. We may need enough information to locate the relevant records and verify that the request concerns you. We do not create a permanent guest identity just to identify anonymous sessions. If we cannot identify the relevant data, we will explain that limitation. We respond within the time required by applicable data-protection law.
You may complain to Persónuvernd, Iceland's Data Protection Authority, or another competent supervisory authority. You do not have to contact us first to exercise that right.
Changes
We will update this page when Seed's processing changes and revise the date above. Where the law requires additional notice or consent, publishing an updated policy alone does not replace that requirement.