Privacy

This policy covers moky.ai, the Moky account service at api.moky.ai, and Moky World (world.moky.ai), all operated by Moky AI.

Last updated: 13 October 2026

What we collect

Signing in with Google. We keep your Google account's unique ID, its verified email address and your display name. We only ask Google for the basic openid, email and profile permissions — never your contacts, calendar or files — and we don't store your profile picture.

Signing in with a phone number. We keep the phone number. Your password is stored only as an irreversible hash (scrypt); nobody can read it. For now, phone accounts are set up by us; there is no self sign-up.

Staying signed in. api.moky.ai sets one cookie that keeps you signed in for 30 days; signing out ends it immediately. When you enter Moky World we hand World a single-use sign-in ticket that expires within about two minutes.

Sign-in records. For each sign-in we record the time, the method, whether it succeeded and whether a new account was created. We don't keep your IP address: only a tag hashed with a key that changes every day, which can count distinct visitors for that day but can't be linked across days or turned back into an address. These records are kept for six months.

Preventing duplicate accounts. To tell whether several accounts come from the same source, we keep tags derived from IP address and device characteristics, hashed with a key that changes every day. They can't be turned back into an address or a device, and they are deleted after 30 days.

In Moky World. We keep your character, the island you're on, your inventory, island Coins and Crystal balance, your pets and your progress.

Talking to AI residents and companions. Your conversations are stored so they can remember you. The raw conversation text is kept for 180 days; the long-term memory residents form about you (short summaries) is kept for as long as your account exists. Both are deleted when you delete your account, and you can ask us to delete your conversations at any time.

Waitlist. If you joined the waitlist, we keep the email address, the language you browsed in and the time you signed up.

Backups. Data is backed up every hour, encrypted, to other servers we operate (and, later, to Google Cloud Storage). Backups follow the same retention periods.

What we use it for

To sign you in, let you into Moky World and save your progress; to let AI residents remember your conversations; to prevent abuse (rate limits and temporary locks on accounts under attack); and to count overall numbers such as sign-in success rates so we can improve the service. We don't sell your data, we don't run advertising trackers, and neither this site nor World uses analytics cookies.

AI and other services

Replies from AI residents and companions are generated by third-party AI model providers: mainly OpenAI (GPT-family models, including Codex); Anthropic (Claude) for our development assistants; and DeepSeek only as a fallback when the others are unavailable. To generate a reply we send them the conversation and the context it needs; we never send them your email address or phone number. Google is used only to sign you in; phone sign-in involves no third party.

Age

Moky World is currently for adults aged 18 and over. Please don't use it if you are under 18.

Your data, your choice

To see, export or delete your account and data, or to delete only your conversations, write to hello@moky.ai from the email on your account (or tell us your phone number). We act on requests within 30 days. Deleting your account removes your sign-in methods, sessions, your World character and progress and your conversations; only anonymous totals in the sign-in records remain.

隐私说明

本说明适用于由 Moky AI 运营的 moky.ai、Moky 账号服务 api.moky.ai 和 Moky World（world.moky.ai）。

更新日期：2026 年 10 月 13 日

我们收集什么

用 Google 登录。我们保存你 Google 账号的唯一编号、已验证的邮箱和显示名字。我们只向 Google 申请 openid、email、profile 三项基础权限，不读取联系人、日历或文件，也不保存头像。

用手机号登录。我们保存手机号。密码只以不可逆的加密形式（scrypt 哈希）保存，任何人都看不到原文。目前手机号账号由我们预先设置，不开放自助注册。

保持登录。api.moky.ai 会放一个保持登录的 Cookie，有效 30 天，退出登录后立即作废。进入 Moky World 时，我们交给 World 一张约 2 分钟内有效、只能用一次的登录票据。

登录记录。每次登录我们记录时间、登录方式、是否成功、是否新建账号。我们不保存你的 IP 地址，只保存用每天更换的密钥算出的标记：只能统计当天有多少不同的来源，无法跨天关联，也无法还原成地址。登录记录保留半年。

防止重复注册。为判断多个账号是否来自同一来源，我们保存由 IP 地址和设备特征算出、并用每天更换的密钥加密的标记。它们无法还原成地址或设备，30 天后删除。

在 Moky World 里。我们保存你的角色、所在的岛、背包、岛币和水晶余额、宠物和进度。

和 AI 居民、伴侣的对话。对话会被保存，好让它们记得你。对话原文保留 180 天；居民对你形成的长期记忆（简短摘要）在账号存在期间保留。删除账号时两者一并删除；你也可以随时要求只删除对话。

等候名单。如果你加入过等候名单，我们保存邮箱、浏览时使用的语言和加入时间。

备份。数据每小时加密备份到我们自己运营的其他服务器（之后增加 Google Cloud Storage），备份同样遵守上述保存期限。

用来做什么

让你登录、进入 Moky World、保存进度；让 AI 居民记得你们的对话；防止滥用（限制尝试次数、临时锁定被攻击的账号）；统计登录成功率等整体数字以改进服务。我们不出售你的数据，不做广告追踪，本站和 World 都不使用分析 Cookie。

AI 和第三方服务

AI 居民和伴侣的回答由第三方大模型服务生成：主要是 OpenAI（GPT 系列模型，含 Codex）；Anthropic（Claude）用于我们的开发助手；DeepSeek 只在其他服务不可用时兜底。为了生成回答，我们会把对话内容和必要的上下文发给它们，但不会发送你的邮箱或手机号。Google 只用来帮你登录；手机号登录不经过任何第三方。

年龄

Moky World 目前只面向 18 岁及以上的成年人。未满 18 岁请不要使用。

查看和删除你的数据

如需查看、导出或删除你的账号和数据，或只删除对话记录，请用账号绑定的邮箱写信到 hello@moky.ai（手机号账号请注明手机号）。我们会在 30 天内处理。删除账号会一并删除你的登录方式、会话、World 里的角色和进度以及对话；登录记录里只留下无法关联到你的匿名统计。