What we keep, and why

When you sign in, through Google Firebase with an email and password or a Google account, we keep:

• your email address, and whether it has been verified;
• the username you choose;
• if you use Google, the display name and profile picture address Google provides;
• which sign-in method you used, when you last signed in, and when you confirmed you are 18 or older and accepted these terms.
• if you arrived through a link we tagged (one of our ads, for example) or from another site, which link or site it was, so we can tell which ads are worth paying for. Your browser keeps this for up to 30 days, and we store it once, when your account is made. It is never shared.

Your password is handled by Firebase. We never see or store it.

To run the game, we store what happens in it:

• Characters: names, backstories, appearance, stats, inventory, money, location, reputation and history.
• Play: everything you type in scenes and in the out-of-character chat, and everything the world writes back.
• What the world remembers: NPCs' memories of and standing with your characters, the chronicle of your story, and pictures made for it (portraits and scene paintings).
• Worlds you build: maps, peoples, magic, cast, lore, rules, settings, invites and who has joined.
• Notifications: if you turn them on, the push address your browser gives us, and which kinds you want.

The storyteller is an AI model. To write a scene, we send what you typed together with the relevant parts of the world (your character, the place, the people present, what they remember) to an AI provider. Pictures and voices are made the same way. These services process your data for us:

• OpenRouter routes text, picture and voice requests to the model providers that answer them.
• ImageRouter paints some of the pictures.
• Google Firebase handles sign-in.
• Cloudflare sits in front of the site, like most websites, and sees the network traffic that reaches us.

In a world whose builder has connected their own AI provider, that world's requests go to the provider they chose instead. We don't train AI models on what you write. The providers that process requests have their own data policies.

Builders' own AI keys are stored encrypted, and are used only for their world's requests.

• Other players in the same place see what happens there, including what your character does and says.
• Your living characters appear on the map's adventurers layer and in the hall of adventurers, with their name and where they are.
• Messages in the out-of-character chat are seen by everyone in it.
• In a builder's world, the builder can see who has joined and what happens in their world.
• A world's public page, if its builder publishes one, is open to anyone on the internet. It shows the world, not its players.

Your email address is never shown to other players.

We set one small cookie that only records that this device has signed in before, so the site can open straight to the game. The site also keeps preferences in your browser's storage (things like which updates you've seen and map settings) and caches its own files so it loads fast and works as an installed app. None of this is used to track you across other sites.

We keep your account and what you've made for as long as your account exists, because the game depends on remembering it. Technical logs, used to find and fix problems, are kept only as long as they are useful for that.

You can ask us to delete your account, your characters and your play at any time: message @a.eid1 on our Discord with the account's email address. We confirm the request with that address, then delete it within 30 days. You can also ask for a copy of what we hold about you, or for something to be corrected.

Worldtable is for people 18 and older, and every account confirms it. We don't knowingly keep data about anyone younger; if we learn that an account belongs to someone under 18, we delete it.

If this policy changes in a way that matters, we update the date at the top and ask you to accept it again the next time you visit. Questions: @a.eid1 on Discord.