Privacy Policy

1. What we collect

1.1 What you give us

• Account: your email address, and the authentication data needed to sign you in.
• Payment: handled by Stripe. We receive a customer and subscription reference and the status of your plan; we never receive your full card number.
• What you write in a game: your character's answers, the actions you type each turn, and anything you keep in the notes panel.
• Settings: display and gameplay preferences, such as text size and how difficulty is resolved.
• Correspondence: anything you send us by email.

1.2 What we record as you play

• Usage: pages opened, campaigns viewed, sessions started, turns taken, messages consumed, and the funnel events that tell us where people stop.
• Session technical data: the model used for a turn, token counts and cost, and quality signals such as a refused or regenerated turn.
• Device and connection: browser and device characteristics, used to recognise a returning guest before there is an account to recognise.

1.3 What we deliberately do not keep

We do not store your IP address. Where we need to tell one visitor's connection from another — to apply a rate limit, or to notice a flood of guest sessions from a single source — we take a one-way cryptographic hash of the address under a secret salt and store only that. The hash cannot be turned back into an address, and the address itself is never written down.

We do not ask for your real name, your date of birth, your address or your phone number, and there is nowhere in the Service to enter them.

2. Why we use it

We use what we collect to:

• run the game — generate turns, keep the record of your world, and restore a session when you come back to it;
• sign you in and keep your account secure;
• meter and bill: count messages, apply your plan's allowance, take payment and send you the receipts and renewal reminders the Terms require;
• answer your emails;
• understand how the Service is used, in aggregate, so we can improve it;
• moderate what is submitted to the Game Master and enforce the Terms;
• detect and prevent abuse, fraud and automated access;
• meet our legal and tax obligations.

We do not use what you write to train AI models, and we do not permit our model providers to. We do not sell your personal data, and we do not share it with advertisers.

3. What is sent to the Game Master

Each turn is generated by a large language model operated by a third-party provider. What we send it is: the campaign's own material, a compacted summary of the story so far together with the most recent turns, the current record of your character and world, and the message you have just written.

Your notes are not sent. Your email address is not sent. Your account identity is not sent. The provider receives the story and the turn, not the person playing it.

Your messages are additionally checked by an automated moderation step before a turn is generated.

4. Who else sees it

We do not sell your personal data. We share it only with the providers that make the Service work, and only so far as they need it:

• AI model providers — receive the prompt described in Section 3, in order to generate a turn;
• Supabase — accounts, authentication and the database your sessions live in;
• Stripe — payments, subscriptions and billing correspondence;
• our email provider — transactional email such as sign-in links, receipts and renewal reminders;
• our hosting platform — serving the Service and its operational logs;
• Cloudflare Turnstile — the human check shown when guest activity from one source looks automated.

We may also disclose data where the law requires it, where it is necessary to investigate a breach of the Terms or to protect the rights or safety of our users or the public, and to a successor entity in the event of a merger, acquisition or sale of assets.

5. How long we keep it

Your account, your sessions and everything in them are kept for as long as your account exists. Nothing you have played is deleted because a plan lapsed.

When you delete your account:

• your account data, sessions and notes are scheduled for permanent deletion within 30 days;
• records of payments are kept for up to 7 years, because tax and financial reporting law requires it;
• records of a suspension or ban may be kept for as long as necessary to enforce it;
• usage data that has been aggregated or stripped of any link to you may be kept indefinitely.

6. How we protect it

• data is encrypted in transit and at rest;
• row-level security is enabled on every table holding user data, so one account's sessions cannot be read by another;
• the keys that bypass those rules exist only on the server and never reach your browser;
• access to personal data by our staff is limited to those who need it;
• payment details are held by Stripe, not by us.

No system is perfectly secure. We cannot guarantee absolute security and are not liable for a breach arising from circumstances beyond our reasonable control.

7. Cookies

We use cookies only for the Service's own operation. There are no advertising cookies and no third-party tracking cookies.

• Authentication — keeps you signed in.
• Guest session — lets an unregistered visitor return to the game they started.
• Preferences — remembers display and gameplay settings, so that a page rendered on the server already matches them.
• Analytics — a first-party identifier used to group one visitor's page views into a single visit.

You can clear or block cookies in your browser. Blocking the first two will prevent you from staying signed in or resuming a game.

8. Your rights

Depending on where you live, you may have the right to ask us to:

• give you a copy of the personal data we hold about you;
• correct it, if it is wrong;
• delete it, and your account with it;
• provide it in a portable, machine-readable form;
• restrict or object to a particular use of it;
• withdraw a consent you have given.

Write to support@questhall.gg from the address on your account and we will respond within 30 days. We may need to verify that the account is yours before acting. If you are in the European Economic Area or the United Kingdom you also have the right to complain to your local data protection authority.

9. Young people

The Service is for people aged 16 and over, and we do not knowingly collect data from anyone younger. If we learn that an account belongs to someone under 16, we will delete the account and its data.

If you believe a child has given us personal data, write to support@questhall.gg and we will remove it.

10. Where your data is processed

We are based in the United States, and our providers operate there and in other countries. Using the Service means your data may be transferred to and processed in a country whose data protection law differs from your own. Where such a transfer is made from the European Economic Area or the United Kingdom, we rely on the safeguards those laws provide for, and we take reasonable steps to see that your data is handled in line with this Policy wherever it is processed.

11. Changes to this Policy

We may update this Policy. When a change is material we will revise the “Last updated” date above and, where appropriate, notify you by email. Continuing to use the Service after a change takes effect means you accept the updated Policy.

12. Contact us

Questions about this Policy, or about your data, can be sent to us at: