Privacy Policy
Last updated: May 19, 2026
1. Information We Collect
Account Information
When you register, we collect your email address and password (stored securely). You may optionally provide a display name.
Character & Adventure Data
We store your character details, inventory, adventure history, and session logs to provide the Service. This includes content you create or that is generated during play.
Usage Data
We collect basic usage metrics (login frequency, features used) to improve the Service. This data is aggregated and anonymous.
Device & Connection Info
Browser type, IP address, and general location (country/region) are logged for security and infrastructure purposes.
2. How We Use Your Information
- Provide, maintain, and improve the Service.
- Authenticate your account and secure access.
- Store your character data and adventure progress between sessions.
- Send service-related notifications (account, password reset, etc.).
- Analyze usage to make ScrollKeeper better.
3. Data Sharing & Third Parties
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
We may share data with service providers who help us operate (hosting, authentication, analytics), but only as needed to provide the Service, and under appropriate confidentiality obligations.
4. AI & Content
Adventure narratives are generated in real-time by AI models and are not stored long-term beyond your session logs. We do not use your game content to train external AI systems.
5. Cookies & Storage
- sk_session — authentication cookie, session-scoped.
- We use local storage to remember UI preferences (e.g., dark/light mode if applicable).
- Third-party cookies from our infrastructure providers (analytics) may be used — see section 6.
6. Analytics
We use privacy-respecting analytics that minimize personal data collection. We do not use advertising trackers or sell your data to ad networks.
7. Data Retention & Deletion
- You can request deletion of your account and all associated data at any time by contacting Support.
- We retain account data for 30 days after deletion request before permanent removal.
- Adventure session logs may be retained anonymously in aggregated form for analytics purposes.
8. Security
Passwords are hashed with bcrypt. Authentication uses httpOnly cookies to prevent XSS access. All traffic is served over HTTPS. While we strive for security, no system is 100% secure — you also play a role by keeping your password private.
9. Children's Privacy
ScrollKeeper is not intended for users under 13 years of age, in compliance with COPPA. We do not knowingly collect personal information from children.
10. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated data.
- Object to certain processing activities.
To exercise any of these, contact us at Support.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.