How to read this page
We do not ask you to take our word for it, so everything we use is written here: what it is, who makes it, its exact licence, what it does for us, where it runs and what data it sees. Items are checked against our own source files (package lists, notices, configuration files and project notes). Versions are those of SCC Universe release 0.16, as of 5 November 2026.
When our files do not show a fact, we write to be verified instead of guessing. “On your device” means the data stays on your PC or phone. “Our Cloudflare account” means our server. Zenith UniverSoft is powered by SCC Universe, so most items come from SCC Universe, the first connected app.
Open-source engines and libraries
Everything that ships inside the Windows program and the Android app. The apps use no Google Play Services, ML Kit, Firebase or AndroidX package, and ship no usage statistics to anyone. Tools used only to build the software are in the internal tools section.
| Name | Made by | Licence | What it does for us | Where it runs | Data it sees | Status |
|---|---|---|---|---|---|---|
| llama.cpp | The llama.cpp Authors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | Runs the language model of the AI assistant on a Windows PC (processor or graphics card). | On your device (Windows PC) | Only what you work on, on the device; nothing leaves it | In use |
| LLamaSharp 0.27.0 | SciSharp STACK: Rinne, Martin Evans, jlsantiago and all other contributors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | C# bindings that let our program drive llama.cpp. | On your device (Windows PC) | Only what you work on, on the device; nothing leaves it | In use |
| LLamaSharp.Backend.Cpu 0.27.0 | The llama.cpp Authors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | llama.cpp native library for the processor. | On your device (Windows PC) | Only what you work on, on the device; nothing leaves it | In use |
| LLamaSharp.Backend.Vulkan 0.27.0 | The llama.cpp Authors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | llama.cpp native library for graphics cards of any make (Vulkan). | On your device (Windows PC) | Only what you work on, on the device; nothing leaves it | In use |
| LLamaSharp.Backend.Vulkan.Windows 0.27.0 | The llama.cpp Authors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | Windows part of the Vulkan library. | On your device (Windows PC) | Only what you work on, on the device; nothing leaves it | In use |
| LLamaSharp.Backend.Vulkan.Linux 0.27.0 | The llama.cpp Authors | MIT (declared in the package metadata; the packages contain no licence text file, so our notices list it as pending verification) | Linux part of the Vulkan library. It is listed in our notices because it is inside the package; the product runs on Windows and Android. | Included in the Windows package | None | In use |
| ONNX Runtime 1.31.0 (Microsoft.ML.OnnxRuntime and .Managed) | Microsoft | MIT. It also contains third-party code, whose notices Microsoft publishes with the package. | Runs the translation models and the text-reading models. Same version on Windows and Android. | On your device (PC and phone) | Texts and images you translate or read, on the device only | In use |
| ONNX Runtime GenAI 0.13.2 (Microsoft.ML.OnnxRuntimeGenAI and .Managed) | Microsoft | MIT | Runs the AI assistant's language model on the phone. We deliberately stay below version 0.17: from 0.17 the Android package ships a Microsoft telemetry library, which we do not include (a test fails if the version rises to one that does). | On your device (Android phone) | Nothing leaves the device | Built in; no phone AI model released yet |
| Bergamot translator (WebAssembly engine) | Mozilla and the Bergamot project | MPL 2.0. Version v0.4.5 according to our component inventory; the version and the copyright line of the engine files are to be verified (listed as pending in our notices). | Translation without AI on Windows. | On your device (Windows PC), inside the Windows web view | The text you translate stays on the PC | In use |
| Microsoft.Web.WebView2 SDK 1.0.4314.35 | Microsoft | BSD 3-Clause | Hosts the Bergamot engine and the sign-in window on Windows. | On your device (Windows PC) | Only the pages and texts our program shows in it | In use |
| WebView2 Runtime (Evergreen) | Microsoft | Proprietary and closed. It is part of Windows / Microsoft Edge; we do not distribute it. | The system component the SDK above needs. Not open source: we list it as a minimum requirement. | On your device (Windows PC) | Only the pages and texts our program shows in it | In use System component |
| OpenCC dictionaries STCharacters and STPhrases | Carbo Kuo and the OpenCC contributors | Apache 2.0 | Turns Simplified Chinese into Traditional Chinese. We merge the two official dictionaries into one compressed file and keep the first Traditional form, as OpenCC does; the conversion code is ours. | On your device (PC and phone) | The text being converted, on the device | In use |
| CommunityToolkit.HighPerformance 8.4.2 | The .NET Foundation and contributors | MIT | Supporting library used by the packages above. | On your device (Windows PC) | None | In use |
| System.Management 10.0.13 | Microsoft | MIT | Reads the PC's processor, memory and graphics card so the program can choose a model that fits. | On your device (Windows PC) | Hardware specifications, read locally and not sent | In use |
| System.Numerics.Tensors 10.0.5 (Windows) and 9.0.0 (Android) | Microsoft / the .NET Foundation | MIT | Supporting library for model calculations. | On your device (PC and phone) | None | In use |
| Microsoft.Bcl.AsyncInterfaces 10.0.5 | Microsoft | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| Microsoft.Bcl.Memory 10.0.5 | Microsoft | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| Microsoft.Extensions.AI.Abstractions 10.4.1 | Microsoft | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| Microsoft.Extensions.DependencyInjection.Abstractions 10.0.5 | Microsoft | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| Microsoft.Extensions.Logging.Abstractions 10.0.5 | Microsoft | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| System.Linq.Async 7.0.0 | The .NET Foundation and contributors | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| System.Interactive.Async 7.0.0 | The .NET Foundation and contributors | MIT | Supporting library. | On your device (Windows PC) | None | In use |
| Microsoft .NET runtime and base libraries | Microsoft and the .NET Foundation | to be verified: it is not listed in our third-party notices | The platform our Windows program and our Android app are written for. | On your device (PC and phone) | None | In use |
| Windows built-in text recogniser (Windows.Media.Ocr) | Microsoft | Proprietary; a feature of Windows 10/11 that we do not distribute | An optional second check of numeric values only, never the main reader. Used only if the game's language is installed in Windows. | On your device (Windows PC) | The small image of a number, on the PC | Off by default |
| D&D System Reference Document 5.2.1 (content) | Wizards of the Coast LLC | CC BY 4.0. The required attribution is shown with the content. | Rules material for the Questheart Domain Pack. | Pack data on our servers and in the app | None (it is public content) | Not released yet; the pack moved to 0.18 |
AI models
Which model runs where. Models that run on your device come from our own storage, are checked with a SHA-256 fingerprint and keep their licence file next to them. Models that run on the server run inside our Cloudflare account. Models in the lab are not part of the product.
| Model | Made by | Licence | What it does for us | Where it runs | Data it sees | Status |
|---|---|---|---|---|---|---|
| Qwen3-4B, GGUF Q4_K_M (AI assistant, standard size) | The Qwen team | Apache 2.0 | Answers questions from the game's notes on a Windows PC with enough memory. | On your device (Windows PC); downloaded from our own storage and checked with a SHA-256 fingerprint | Your question and the notes chosen on the device; stays on the PC | In use (0.16). The source of the GGUF file is to be verified |
| Qwen3-1.7B, GGUF Q8_0 (AI assistant, light size) | The Qwen team | Apache 2.0 | Same job for PCs with less memory. | On your device (Windows PC); same download and check | Same as above | In use (0.16). The source of the GGUF file is to be verified |
| Qwen3-1.7B, ONNX 4-bit (phone candidate) | The Qwen team | Apache 2.0 | Candidate for the AI assistant on the phone. | On your device (Android phone) | Would stay on the phone | Tested, not enabled It did not pass our quality test (72.8% of key facts against 91.4%). |
| Qwen3-1.7B, ONNX 8-bit (phone candidate) | The Qwen team | Apache 2.0 | Candidate for the AI assistant on the phone. | On your device (Android phone) | Would stay on the phone | Tested, not enabled At 3.07 GB it did not fit our reference phone. |
| PaddleOCR PP-OCRv5 mobile: text detection and recognition (Latin, Chinese/Japanese, Cyrillic, Arabic, Korean) | PaddlePaddle Authors / Baidu; converted to ONNX by the RapidOCR project (RapidAI) | Apache 2.0 (both the original and the conversion) | Reads text on screenshots, photos and video frames for SCC Vision. Used as converted, with no other change to the weights. Downloaded from our site on first use and checked with SHA-256. | On your device (PC and phone) | Images never leave the device | In use |
| PaddleOCR PP-OCRv4 English recogniser (en_PP-OCRv4_rec_mobile) | PaddlePaddle Authors / Baidu; converted to ONNX by RapidOCR | Apache 2.0 | Second opinion on numeric values only; it does not read the text. | On your device (PC and phone) | The small image of a number, on the device | In use On by default |
| OPUS-MT translation models | Language Technology Research Group, University of Helsinki (Helsinki-NLP) | CC BY 4.0. Changes by us: conversion to ONNX and 8-bit compression of the weights, nothing else. | Translation without AI on the phone, and the second engine on the PC. | On your device (PC and phone) | The text you translate stays on the device | In use |
| Firefox Translations models (for Bergamot) | Mozilla | MPL 2.0 | Translation without AI on Windows, one small model per language pair. | On your device (Windows PC) | The text you translate stays on the PC | In use |
| Qwen3-30B-A3B (fp8) on Workers AI | The Qwen team; run for us by Cloudflare | Apache 2.0 | The AI assistant on our server (daily quota per person, Lv2) and the translations of the SCC Translate bot on Discord. | Our Cloudflare account (server) | Assistant: the question text and the notes chosen for it. Discord bot: the text of the message you ask to translate. Both stay inside Cloudflare. | In use |
| BGE-M3 on Workers AI | BAAI (as named in its Cloudflare identifier) | MIT | Search by meaning in the knowledge base (1024-dimension fingerprints, in Vectorize). | Our Cloudflare account (server) | Text of knowledge entries and search questions | In use |
| M2M-100 1.2B on Workers AI | Meta (as named in its Cloudflare identifier) | MIT | Translation of texts on the server, such as shared knowledge records and public paragraphs the app asks to translate. | Our Cloudflare account (server) | The public text to be translated | In use |
| Hy-MT2 1.8B and 7B | Tencent | Apache 2.0 | Translation tests for Japanese, Korean, Chinese and Arabic, and drafts of translations of our own site texts. Not part of the product. | Rented graphics cards (Modal) | Our own texts and test sets, never user data | Internal lab only |
| MADLAD-400 | Apache 2.0 | Lab translation comparisons. Not part of the product. | to be verified (lab) | Our own texts and test sets | Internal lab only | |
| Qwen3-8B | The Qwen team | Apache 2.0 | Text generator in our lab tools. It is not used as a judge. | to be verified (lab) | Our own texts and test sets | Internal lab only |
| M2M-100 418M (basis of our first own translation models) | Meta | MIT | We are training small "student" translation models of our own, starting from this open model (Japanese and Korean first). They are not in the product yet. | Rented graphics cards (Modal) | Texts our rules already accepted, never user data | Internal lab only |
| IBM Granite 4.0 (1B and 350M sizes) | IBM | Apache 2.0 | Compared with Qwen3 for the phone assistant. It scored lower (80.2% against 91.4%) and was not chosen. We keep watching new Granite versions. | Our test PC | Our own test questions | Tested, not used |
| FLUX.2 klein 4B | Black Forest Labs (to be verified) | Apache 2.0 (per our decision note; to be re-checked before first use) | Images for the stories and for the Agents. Quality trials come first. | Rented graphics cards (Modal) or our own GPU | Our own prompts, never user data | Planned; lab Whether any published image used it: to be verified |
Cloud services
We run our servers on Cloudflare. This is exactly which parts we use, and for what.
| Service | What we use it for | Data it holds or sees | Status |
|---|---|---|---|
| Cloudflare Workers: sccuniverse-web | The SCC Universe website and its API: accounts, sign-in, downloads, the Discord bot's brain, the knowledge base. | Account and service records, consents, shared knowledge records and usage counters (see the SCC Universe privacy page). | In use |
| Cloudflare Workers: the AI assistant hub | The network of AI assistants: the bridge between a person's phone and PC, and the team that shares work. | Question and answer texts pass through in memory; accounts are verified by calling the main site. | In use |
| Cloudflare Workers: scc-translate | The SCC Translate bot for Discord. | The text of the messages you ask to translate, and a short-lived cache (7 days). | In use |
| Cloudflare Workers: scc-otp-relay | Sends the sign-in codes and notices by email through our mail provider (see Aruba below). | The recipient's address and the message. | In use (its own files were not read for this list) |
| Cloudflare Workers: zenith-id | Zenith ID: one account for all connected apps, sign-in with a code by email. | Email address, sign-in records. | Ready; not published until the partner programme opens publication status to be verified |
| Cloudflare Workers: zenith-hub | The central hub of the star model. | Partner keys (stored as fingerprints), people's levels, small cleaned knowledge records. | Ready; not published until the partner programme opens |
| Cloudflare Workers: partner hub model (hub-partner) | A template that runs on the partner's own Cloudflare account, not ours. | The partner's own users, on the partner's account. | Ready; not published |
| Cloudflare Workers: zenith-sito | This website (zenithuniversoft.com). It loads nothing from other domains and stores only your light/dark choice in your browser. | Ordinary web server logs (Workers Observability is switched on). | Being finalised |
| Durable Objects | Four small stateful pieces: the Discord gateway door, the translator's door, one bridge per account (questions kept in memory, nothing in the database) and the team dispatcher. | Connection state; the bridge keeps questions in memory only. | In use |
| D1 databases | scc-universe-beta (shared by the site, the hub and the translator), zenith-id and zenith-hub. | Accounts, roles, consents, knowledge and AI-budget counters (SCC); Zenith accounts and levels (Zenith). | In use |
| R2 storage | A releases bucket (downloads, model files, manifests), a private reports archive and a backup bucket. Buckets are not public: files pass through our Worker. | Program and model files; internal reports; backups. | In use |
| Queues | Slow jobs, today the translations that do not fit in one request. | Texts waiting for translation. | In use |
| Vectorize | The index for search by meaning (1024 dimensions). | Numeric fingerprints of knowledge entries. | In use |
| Analytics Engine | Counting events without writing database rows (dataset scc_universe_eventi). | Event counts. | In use |
| Workers AI and AI Gateway ("scc-translate") | Runs the three server models listed in the AI models section; the translator goes through the gateway. | The texts sent to those models, inside Cloudflare. | In use |
| Rate limiting and Cron Triggers | Brakes on sign-in attempts, and the scheduled jobs (daily Discord posts, the translator's door check, nightly knowledge maintenance). | Counters. | In use |
| Browser Rendering (crawl) | A page reader for the nightly index of public game websites. The code adapter is written; its request format was marked as an assumption to re-check. | Public web pages only. | Prepared Whether it runs in production: to be verified |
| Email Sending | Zenith ID sign-in codes; and, for SCC reports, a path that is written but switched off. | The recipient's address and the message. | Prepared whether live to be verified |
| Email Routing | Forwarding of incoming mail to the old inbox notice feature. | Incoming mail. | Rules disabled on 31 October 2026 The code is to be removed after the launch. |
| Cloudflare Access | Protects the private test environment, for our team only. | Staff sign-ins. | In use |
| DNS and domains | DNS records for sccuniverse.com, including the mail records, and for zenithuniversoft.com. | Domain records. | In use Where each domain is registered: to be verified |
External services
Companies outside our own accounts that receive something from you or from our servers.
| Service | Run by | What it is used for | What it receives | Status |
|---|---|---|---|---|
| DuckDuckGo | DuckDuckGo | The search in SCC Browser (from level Lv2). The search leaves from your device straight to DuckDuckGo. The AI assistant does not use search engines. | The words you search for, like any web search. | In use |
| Discord | Discord | Sign-in with Discord, our community server and our bots (announcements, daily posts, welcome, events, SCC Translate). | Your Discord identity when you sign in with it, and whatever you write on the server. The translator's text goes to Cloudflare, not to another company. | In use |
| Aruba | Aruba (company name to be verified) | Our mailboxes and the sending of sign-in codes and notices from the no-reply address. | The recipient's address and the message. | In use The mail provider of zenithuniversoft.com: to be verified |
| Wikidata | Wikimedia (as named by its address query.wikidata.org) | Each morning the server asks for "on this day" and upcoming games for the daily Discord posts. Wikidata is published under CC0 (per our code comment). | A query without any user data. | In use |
| Public game websites | Their owners | Our nightly index of pages about each game, and the pages you open in SCC Browser. We declare our user agent, read robots.txt each time, wait between requests, and skip sites that refuse us or refuse AI bots. | Ordinary page requests. The assistant asks our index with concept identifiers only, never your sentence. | In use whether the nightly crawl runs to be verified |
| Google Play | Distribution of the Android app (identity verified on 26 October 2026; closed test planned). Today the app is downloaded from our site. | Whatever Google collects when you install from its store: to be verified | Planned | |
| Microsoft Store links | Microsoft | If a photo or video format needs a codec, the program shows a link to Microsoft's extension page. Nothing is sent unless you click. | Your normal visit to that page. | In use |
| Support-campaign platforms | Kickstarter, Indiegogo, Ko-fi, itch.io | Our site links to the Kickstarter page in the history of the campaign; Indiegogo was prepared; Ko-fi was set aside on 21 October 2026; an itch.io page is planned. | Only what you give them if you choose to support us there. | Current state of each to be verified |
| X, Bluesky and Instagram | Their owners | Public accounts: SCC Universe, and the Agents (Instagram only for the Agents). | Our public posts. We do not send them user data. | Accounts set up what is live to be verified |
Internal tools we use to build
Tools we use to make the software and the content. According to our own project rules, none of them receives your data: users' data never goes to a third party, and the Claude API is used only for our own or public texts.
| Tool | Made by | Licence or terms | What we use it for | Does it handle users' data? | Status |
|---|---|---|---|---|---|
| Claude (Claude Code and the Claude API) | Anthropic | Commercial service terms, not an open licence. Exact terms to be verified | Writing and reviewing our code and texts, preparing knowledge for approval, weekly reviews and other internal jobs, on our own or public texts. It does not answer users: your messages are never sent to it. Drafts for internal review can be shared as private pages on Anthropic's artifact hosting. Every job that uses the API is meant to have a fallback on our own AI. | No. Project rule: users' data never goes to third parties. | In use |
| Modal | to be verified | Commercial service terms. Exact terms to be verified | Rented graphics cards for the lab: translation tests, quality judging, training our own small models, image trials. Spending caps are set. | No. Project rule: users' data never goes to third parties. Jobs use our texts, public texts and test sets. | Internal lab In use |
| IBM Quantum and Qiskit Aer (QAI Lab) | IBM | Service terms; Qiskit licence to be verified | An experiment that compares classical and quantum methods on synthetic optimisation problems. Today only the local simulator runs; the IBM path is switched off and has a hard time budget. | No. Synthetic problems only, never player data. | Internal lab only |
| Blender and the Blender MCP add-on | to be verified | Licence to be verified | 3D characters, scenes and videos for the Agents. | No. | In use |
| Wrangler 4.124.0 | Cloudflare | MIT OR Apache-2.0 (from its package file) | Builds and publishes our Workers. | No. | In use |
| workerd 1.20260815.1 | Cloudflare | Apache-2.0 (from its package file) | Local copy of the Workers runtime for tests. | No. | In use |
| Miniflare 5.20260815.0-alpha | Cloudflare | MIT (from its package file) | Local simulation of Cloudflare services for tests. | No. | In use |
| esbuild 0.28.1 | esbuild authors | MIT (from its package file) | Bundles Worker code. | No. | In use |
| Other Wrangler dependencies | Their authors | From their package files: @cloudflare/kv-asset-handler 0.5.0 and @cloudflare/unenv-preset 2.16.1 (MIT OR Apache-2.0); unenv 2.0.0-rc.24, @cspotcode/source-map-support 0.8.1, @jridgewell/* , @poppinss/*, @sindresorhus/is 7.2.0, blake3-wasm 2.1.5, cookie 1.1.1, error-stack-parser-es 1.0.5, kleur 4.1.5, path-to-regexp 6.3.0, pathe 2.0.3, supports-color 10.2.2, undici 7.29.0, ws 8.21.0, youch 4.1.0-beta.10, youch-core 0.3.3, @img/colour 1.1.0 (MIT); detect-libc 2.1.2 and sharp 0.35.2 (Apache-2.0; sharp's Windows build is Apache-2.0 AND LGPL-3.0-or-later); semver 7.8.5 (ISC); @speed-highlight/core 1.2.24 (CC0-1.0) | Helpers of the tools above. They run only on our computers when we build; none of them is shipped to you. | No. | In use |
| Node.js test runner | to be verified | Licence to be verified | Runs our website tests. | No. | In use |
| xunit 2.9.3 and xunit.runner.visualstudio 2.8.2 | xunit project | Apache-2.0 | Tests of the Windows program and the app. | No. | In use |
| Microsoft.NET.Test.Sdk 17.12.0 | Microsoft | MIT | Runs those tests. | No. | In use |
| Microsoft .NET SDK and build tools | Microsoft | Licence to be verified | Builds the Windows program and the Android app. | No. | In use |
| Python and lab libraries | to be verified | Licences to be verified | Scripts for model comparisons and the QAI Lab (for example numpy). | No. | In use |
| KeePassXC | to be verified | Licence to be verified | Our password vault for service keys and secrets. | No users' data: only our own keys. | In use |
| GitHub (organisation SCC-Universe) | GitHub | Service terms to be verified | Private repositories of our source code, used as a bridge for cloud sessions. The PC stays the main copy. | No. It holds code, not user data. | In use |
| Microsoft Outlook | Microsoft | Proprietary | Reading our mailboxes. | Only the mail people send to us. | In use |
| Typefaces for social graphics | to be verified | Licences to be verified | Posts and graphics for our public accounts. | No. | In use |
Our own code
What is ours, and under which licence it will be released.
| Part | Licence | Notes | Status |
|---|---|---|---|
| The code of the Zenith kits and SDK | Apache 2.0, with an SPDX header in each file | Nothing is exported before the LICENSE and NOTICE files are in place. The .NET sign-in library uses only the standard libraries: no external packages. | At release |
| Zenith ID, Zenith Hub and the partner hub model (the services) | Not part of the Apache 2.0 release | The service is used by registering, and the central hub is ours. Their only development dependency is Wrangler (above). | Ready; not published |
| Knowledge, prompts and profiles, synced data, trademarks | Not part of the Apache 2.0 release | They stay ours (or the partner's, for the partner's own knowledge). | In use |
| The SCC Universe program for Windows and the SCC Pocket app | licence to be verified | Our own code on top of the components listed above. Our notices ship with every package. | In use |
| Our own pieces inside the apps | Our own code | For example the SentencePiece tokenizer for OPUS-MT, the image preparation and decoding around the text-reading models, and the OpenCC conversion code are written by us. | In use |
Used before, now removed
Things we used or considered and took out, so the history is not hidden.
- Google ML KitThe text reader of the Android app until release 0.15. It sent usage statistics to Google and was not open source. It was replaced by PaddleOCR; the app now uses no Google Play Services, ML Kit, Firebase or AndroidX package.
- Meta Llama 3.3 70BThe AI assistant of our server used it in the early beta. Its licence (Llama 3.3 Community License) is not open source. It was removed on 23 October 2026, and an automatic check now fails if any server model has a licence that is not open.
- ntfy push serverConsidered for phone notifications, set aside and removed from the code.
- Forwarding to Cloudflare Email RoutingSwitched off on 31 October 2026 (the rules are disabled and the code will go).