Privacy Policy
Last updated: September 5, 2026
This policy describes what AdventureCraft Interactive LLC (“we”), operator of AdventureCraft, collects when you use adventurecraft.ai, why, and the control you have over it.
1. What we collect
- Account: your email address and a hashed password, managed by Supabase (our authentication provider).
- Your content: the campaigns, characters, notes, direction, and setting/rulebook material you create or upload. It is stored so the Service can generate from it.
- Payments: handled entirely by Stripe. We store your Stripe customer reference and a ledger of credit purchases and spending — never card numbers.
- Diagnostics: server and client error reports via Sentry (error message, stack trace, request metadata), used only to fix bugs.
- Cookies: essential session cookies only, used to keep you signed in. We set no advertising or cross-site tracking cookies, which is why you see no cookie banner.
2. How we use it
We use your data to operate the Service: authenticate you, store your campaigns, generate the content you request, charge and track credits, and fix errors. We do not sell your data, show ads, or use your content for anything other than serving your account.
3. AI processing
Generating content means sending the relevant parts of your campaign — and excerpts of material you uploaded — to our AI providers: Anthropic (text) and fal.ai (images). These providers process the data to produce your result and, under the API terms we use them under, do not train their models on it.
4. Uploaded source material
Setting and rulebook material you upload is owner-scoped: it is used only to generate content for your own account, is never visible to or usable by any other user, and is deleted when you delete the campaign or your account.
5. Where your data lives
Our subprocessors:
- Supabase — authentication and file storage
- Railway — application hosting and database
- Stripe — payment processing
- Anthropic — text generation
- fal.ai — image generation
- Sentry — error reporting
6. Retention and deletion
Your content stays as long as your account does. Deleting a campaign deletes its stored content; deleting your account (from the account page) deletes your campaigns, uploaded material, generated assets, and account record. Records of financial transactions are retained as required by law and by Stripe. Backups age out on our hosting providers’ standard schedules.
7. Your rights
You can access and edit your content in the app, delete campaigns or your whole account yourself, and email us to request a copy of your data or to exercise any right you hold under the GDPR, CCPA, or similar law — including access, correction, deletion, and portability. We respond at hello@adventurecraft.ai.
8. Children
The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.
9. Changes
We may update this policy; material changes will be announced on the site or by email. The date above always reflects the current version.