Privacy Statement

1. What we collect

• Account information. When you sign up we receive your email address, display name, and (if you sign in with a social provider) an avatar image from our sign-in service, Amazon Cognito. We do not see or store your password.
• Gameplay. The prompts you type, your characters, and your saved story state. This is the game itself — without it there is nothing to continue when you come back.
• Billing. If you subscribe to Premium, payment is handled by Stripe. We store your subscription status and a Stripe customer reference; we never see or store your card number.
• Support and bug reports. If you report a problem or reply to our emails, we keep the report and its context so we can respond and fix things.

2. How prompts are used

Thaedoria's narration is AI-generated. To produce it, the prompts you type — together with your current game state — are sent to an AI model provider for processing. Prompts are used to run your game, to enforce our content policy, and to debug and improve the Service. We do not use your prompts to advertise to you, and we do not sell them or any other personal data to anyone.

3. Cookies and analytics

We use essential cookies to keep you signed in — session and refresh tokens from our sign-in service. These are required for the Service to work and need no consent. With your permission — asked once via the cookie banner — we also use Google Analytics to understand how the site is used (pages visited, general usage patterns) so we can improve it. If you decline, no analytics cookies are set at all. We do not run advertising trackers either way.

You can change your answer at any time: manage your cookie choice — the banner will reappear.

Your browser's local storage also holds a few small functional preferences — your cookie choice itself, notices you've dismissed, and panel layout. These never leave your device.

4. Who we share data with

Only the service providers that operate the game, and only what each one needs:

• Amazon Web Services — hosting, database, and sign-in (Cognito);
• AI model providers — prompt and game-state processing to generate narration;
• Stripe — Premium payments and subscription management;
• Mailgun — sending and receiving our emails;
• Google Analytics — aggregate site usage.

We do not sell personal data, and we do not share it for advertising. We may disclose information if the law requires it.

Our servers and providers run in the United States. If you play from the EU, UK, or elsewhere, your data is transferred to and processed in the US, under each provider's data-processing terms and recognised transfer safeguards (such as the EU–US Data Privacy Framework or standard contractual clauses, where they apply).

5. Children

Accounts are for adults, and the Service is not directed at children. Kids Mode is a content and access filter inside a parent's account — it does not create accounts for children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

6. Retention and your rights

We keep your account and gameplay data while your account is active, and billing records as long as tax and accounting law requires. You can ask us at any time to see the personal data we hold about you, to correct it, or to delete your account and its data — email us and we will handle it. Depending on where you live, these rights may be backed by law (such as the GDPR or CCPA); we honour reasonable requests regardless. If you are in the EU or UK, you also have the right to lodge a complaint with your local data-protection authority.

Where the GDPR applies, our legal bases are: performance of our contract with you (running the game — account, gameplay, billing, support), legitimate interests (keeping the Service secure and improving it), and consent (analytics cookies, which you may refuse or withdraw at any time without losing any part of the game).

7. Security, changes, and contact

Data is encrypted in transit, access to production systems is restricted, and we keep personal information out of our logs by design. No system is perfectly secure, but we take the care of your data seriously. We may update this statement as the Service evolves; material changes will be announced in the Service. Privacy questions and data requests go to contact@rampart16.com; game and support questions to hello@mg.worldofthaedoria.com. See also our Terms of Service.