← VAULT

Privacy and data deletion

VAULT is a game run by Lakshmanan (GeekyLax, @geekylax_ai). This page covers what the game stores and how to have it deleted.

What we collect

• From Instagram, when you comment on the VAULT post: your Instagram-scoped user id, your handle and the comment text. We use these to send you one private-reply DM. When you reply to it, Instagram tells us whether you follow @geekylax_ai, and we send your play link if you do. We read only messages that ask for the link, and we store only that we've handled them.
• If you sign up with email (for example from YouTube): your email address, the display name you choose, and where you found VAULT (YouTube, Instagram or somewhere else). Your email is used only to send your play link and, if you win, to send your prize. It's never shown publicly; the board shows your display name. Your player id is a keyed one-way code made from your email, not the email itself.
• If you sign up with email, you play straight away and we email you a copy of your link. If that email has already signed up, we only email the link to that address and never show it on screen, so nobody can play as you by typing your email. At most 3 link emails per address a day. We check the email is yours before sending a ₹500 prize to it.
• This site remembers your play link on your phone (browser storage), so you can come back without it. Clear your browser data to forget it.
• Your play link carries your player id, your display name, where you came from and the round. It's signed so it can't be changed, and expires after 7 days.
• When you play: your messages to VAULT, VAULT's replies, the time, and a salted hash of your IP address (used only to stop scripts; the IP itself is not stored).
• No login, no cookies, no ads, no tracking scripts. The page uses Cloudflare Turnstile to check that you're a person.

How we use it

• To run the game, decide winners and stop abuse.
• Your tries and your handle may be shown on the live board and in GeekyLax videos, with the password masked. Abusive messages are never shown.
• We don't sell or share your data. It's processed by Cloudflare (hosting and the AI model), Resend (sending the link email) and Meta (Instagram DMs). We never send marketing email: one email with your link, and one more only if you win.

How long we keep it

We delete each round's data 30 days after the round ends. We keep the winners' handles and their winning try, because they appear in the published results.

Delete your data now

DM @geekylax_ai with "delete my VAULT data" (email players: tell us the email you signed up with). We delete your comments, tries, email and DM records within 7 days and reply to confirm.