Privacy Policy

Play Grimoire — Effective Date: July 1, 2026 — Last Updated: July 1, 2026

Play Grimoire (“we,” “us,” or “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding it.

1. Information We Collect

Account data: Username, email address, hashed password, and subscription tier.
Gameplay data: Session IDs, chat logs, AI responses, character names, and campaign titles generated during your sessions.
Payment data: We use Stripe for payment processing. We store your Stripe customer ID but never store raw card numbers. See Stripe’s Privacy Policy.
Technical data: IP address (at signup), browser type, and session activity for security and fraud prevention.
Communications: If you contact support or subscribe to our newsletter, we store your messages and email.

2. How We Use Your Information

To provide and improve the Grimoire service.
To process payments and manage subscriptions.
To send transactional emails (account confirmation, password reset).
To send newsletters and product updates, if you opted in. You may unsubscribe at any time.
To detect and prevent fraud or abuse.
To analyze platform usage in aggregate, anonymized form.

3. AI Processing

Your gameplay inputs are sent to third-party AI providers (including OpenRouter, Together AI, Cartesia, and ElevenLabs) to generate narrative responses, images, and voice. These providers may process your inputs per their own privacy policies. We do not send personally identifiable information alongside gameplay prompts.

4. Data Sharing

We do not sell your personal data. We share data only with:

Service providers: Hosting (IONOS), payment processing (Stripe), AI providers — as necessary to operate the service.
Legal requirements: When required by law or to protect the rights and safety of Grimoire and its users.

5. Data Retention

Account data is retained as long as your account is active.
Chat logs and campaign data are retained to support the Chronicle export feature.
You may request deletion of your account and associated data at any time (see Section 7).

6. Cookies and Tracking

We use session cookies to keep you logged in. We do not use third-party advertising cookies or tracking pixels. If we introduce analytics in the future, we will update this policy and notify users.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your account and data.
Withdraw consent for newsletter communications at any time.
Opt out of certain data processing (contact us to exercise this right).

To exercise any of these rights, email [email protected].

8. Children’s Privacy

Grimoire is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Security

We use industry-standard measures including password hashing (bcrypt), HTTPS, and server-side session management. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated date at the top and notify registered users by email of material changes.

11. Contact

Privacy questions? Contact us at [email protected].