Loose Knees, LLC d/b/a Gumbo Labs

Privacy Policy

Effective September 14, 2026

1. Scope and contact

Loose Knees, LLC d/b/a Gumbo Labs ("Gumbo Labs," "we," "us," or "our") is responsible for the personal information described in this policy. It covers Grand Isle, grandisle.ai, VERMIN, Trailer King: Online, and other games, worlds, websites, applications, and related services we provide through the platform (the "Services"). Contact privacy@hellogumbo.com with privacy questions or requests.

2. Information we collect

Account and profile information. When you register or sign in, we collect your email address, account and authentication identifiers, and profile information such as your chosen display name, character appearance, and home world. We also maintain records of your agreement to our terms when you register.

Game activity and content. We process player and session identifiers, world visits, in-game positions and actions, scores, inventories, virtual balances, preferences, world creations, chat messages, character descriptions, agent instructions, and related game state. Some game events, world histories, and agent memories are stored so worlds and characters can persist between visits. For signed-in Trailer King players, we save account-linked race results and career statistics, including vehicles, tracks, participation times, placements, wins, and in-game damage scores. We also receive information you send us for support or to report an issue.

Connected agents and optional voice. If you authorize an external agent, we process connection identifiers, permissions, requests, and the information exchanged through the integration. If you enable microphone chat, your audio and connection information are processed to transmit voice to other participants through our voice provider. You control microphone access through the game and your browser or device settings.

Technical and usage information. Our Services and infrastructure providers process information such as IP addresses, browser and device information, requested pages, referrers, timestamps, errors, and connection logs. We use Vercel Web Analytics and Google Analytics 4 for website usage and gameplay information, such as pages visited, matchmaking and connection outcomes, game modes, tracks, sign-in status, player counts, and time spent playing. We also maintain game-event records to understand play and maintain leaderboards.

3. How we use information

We use information to provide and secure the Services; authenticate users; save and synchronize accounts, worlds, and progress; enable multiplayer, communications, and agents; show scores and shared content; troubleshoot and improve the experience; respond to requests; enforce our terms; prevent abuse; and meet legal obligations.

Where a law requires a legal basis, we rely on performing our agreement with you for requested account and gameplay functions; legitimate interests in operating, improving, and protecting the Services, where those interests are not overridden by your rights; compliance with legal obligations; and consent where required for a particular feature. You may withdraw consent for future processing that relies on it without affecting earlier lawful processing.

4. AI and information visible to others

Player names, messages, actions, creations, and scores can be visible to people participating in the same world or viewing public features, including spectators. Recent room messages can also be shown to people who join later. Depending on world settings and permissions, they may also be accessible to other users' connected agents. A shared game space is not a confidential communication channel.

To generate character behavior and dialogue, we may send relevant world context, nearby character and player names, dialogue, events, and memories to AI providers. Depending on configuration, these features use MCP.computer, Anthropic, OpenAI, or Vercel AI Gateway. Spoken character text may be sent to ElevenLabs for speech generation. We also use generation services such as Google Gemini and Tripo for world assets. Do not include secrets or sensitive personal information in content you make available to characters or agents.

An external agent you choose operates under its provider's terms and privacy policy for information it receives. Other players and their agents may retain information they observe outside our control.

5. How we disclose information

We disclose information to providers that support hosting, authentication, storage, realtime networking, analytics, AI, voice, and other service functions. These include Supabase, Vercel, Google Analytics, the AI providers described above, and LiveKit when voice chat is enabled. The information a provider receives depends on the feature and configuration in use.

We also disclose information to other users or integrations as described above; when you direct or authorize us to do so; when reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or enforce agreements; and in connection with a merger, financing, reorganization, or sale of our business or assets, subject to applicable protections.

If you play an optional third-party radio stream or follow an external link, that provider receives the connection information needed to serve the content, such as your IP address. Its own privacy policy applies. Trailer King: Online currently offers streams from GTA Radio.

6. Cookies and device storage

We use cookies and browser storage to keep you signed in, recognize a returning player, remember settings and introductory hints, and preserve local game progress. Some first-party player and preference cookies last up to one year and are renewed as you use the Services. Local browser storage may remain until you or your browser removes it.

You can manage or clear this information in your browser. Doing so may sign you out or remove progress that has not been synchronized to an account. Google Analytics 4 uses analytics cookies to understand visits and gameplay. Our configuration disables Google signals and advertising personalization. Our custom analytics events exclude names, emails, account identifiers, invitation identifiers, authentication tokens, and URL query strings. Google Analytics collection is disabled when your browser reports that Do Not Track is enabled; this does not disable Vercel Web Analytics or essential gameplay storage. You can also use Google’s Analytics opt-out browser add-on in supported browsers. See how Google uses information from sites that use its services for more information.

7. Retention and security

We retain account and persistent gameplay information while needed to provide your account and saved experience. We retain other information according to its purpose, sensitivity, security needs, applicable legal requirements, and the time needed to resolve disputes or enforce agreements. Some world histories and agent memories persist across sessions. This policy does not set a fixed deletion period for every type of information.

You can request account or personal-information deletion at privacy@hellogumbo.com. We may retain limited information where permitted or required for security, legal obligations, dispute resolution, or other legitimate purposes. Backup copies and content retained by other participants may not disappear immediately. We use reasonable safeguards appropriate to the information, but no system can guarantee complete security.

8. Your choices and rights

You can change available profile and game settings, disable microphone access, clear browser storage, and disconnect agents through the relevant provider or available account controls. Contact privacy@hellogumbo.com for access, correction, deletion, or other privacy requests.

Depending on where you live and which laws apply, you may have rights to obtain a copy of your information, correct it, delete it, restrict or object to processing, withdraw consent, or opt out of certain sale, sharing, targeted advertising, or profiling activities if they occur. You may also have the right to appeal a request decision or complain to a privacy regulator. We may need to verify your identity and, where applicable, an authorized agent's authority before fulfilling a request. We will not discriminate against you for exercising applicable privacy rights.

Our providers may process information in the United States or other countries where they operate. Privacy protections may differ by country. Contact us for information about locations and any applicable transfer safeguards.

9. Children and policy changes

The Services are intended for people at least 13 years old, or any higher minimum age required locally. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information in violation of this policy, contact privacy@hellogumbo.com so we can investigate and take appropriate action.

We may update this policy as the Services or our practices change. We will update the effective date and provide a prominent notice or another appropriate notice for material changes. Where legally required, we will request consent before using information in a materially different way.