Privacy notice
Information collected
We store account identifiers, email address, display name, password hash, verification and policy-acceptance records, preferences, sessions, approximate network address, browser identification, characters, campaign membership and actions, AI-usage totals, support and moderation records, and membership status. Stripe—not this service—stores payment-card details.
How it is used
We use this information to authenticate you, provide and restore campaigns, enforce rules and access limits, prevent abuse, process memberships, answer support requests, estimate AI cost, and maintain service security and reliability.
AI and service providers
The configured AI provider receives the campaign context and player message needed to produce Dungeon Master narration. Hosting and database providers process stored service data; the mail provider delivers account messages; Stripe processes billing; and the configured voice provider processes call traffic when voice is enabled. We do not sell personal information.
Retention
Expired credentials are routinely removed. Security, audit, usage, webhook, and backup records are normally retained for up to the configured retention period days. Campaign records remain while the campaign is active or archived so participants can restore their history. Financial, fraud, dispute, and security records may be retained longer when reasonably necessary or legally required.
Your controls
The account dashboard provides a machine-readable export and permanent account deletion. When you request deletion, new checkout and gameplay access stop. If you have a billing account, we delete that customer record at Stripe to cancel subscriptions immediately, and wait for confirmation before removing your local account. If billing is unavailable, the request remains pending: retry deletion from your dashboard or contact support. Completed deletion removes credentials, private profile data, characters, and ordinary local billing links. A minimal reconciliation record retains the internal account and Stripe customer identifiers, request/completion times, and completion status so delayed payment notifications cannot recreate the account. Historical campaign and aggregate cost records may remain without an account link where needed to preserve other players’ campaign history, security, accounting, or legal obligations. Contact us to request access, correction, deletion, restriction, or another right available in your jurisdiction.
Security and international processing
We use encrypted transport, hashed credentials, revocable sessions, access controls, monitoring, and backups. No internet service can guarantee absolute security. Providers may process information outside your region subject to their contractual and legal safeguards.
Contact
Privacy questions can be sent to the support address. The operator is located in the configured jurisdiction.