Privacy Policy

Last updated: May 19, 2026

1. Information We Collect

Account Information

When you register, we collect your email address and password (stored securely). You may optionally provide a display name.

Character & Adventure Data

We store your character details, inventory, adventure history, and session logs to provide the Service. This includes content you create or that is generated during play.

Usage Data

We collect basic usage metrics (login frequency, features used) to improve the Service. This data is aggregated and anonymous.

Device & Connection Info

Browser type, IP address, and general location (country/region) are logged for security and infrastructure purposes.

2. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Authenticate your account and secure access.
  • Store your character data and adventure progress between sessions.
  • Send service-related notifications (account, password reset, etc.).
  • Analyze usage to make ScrollKeeper better.

3. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

We may share data with service providers who help us operate (hosting, authentication, analytics), but only as needed to provide the Service, and under appropriate confidentiality obligations.

4. AI & Content

Adventure narratives are generated in real-time by AI models and are not stored long-term beyond your session logs. We do not use your game content to train external AI systems.

5. Cookies & Storage

  • sk_session — authentication cookie, session-scoped.
  • We use local storage to remember UI preferences (e.g., dark/light mode if applicable).
  • Third-party cookies from our infrastructure providers (analytics) may be used — see section 6.

6. Analytics

We use privacy-respecting analytics that minimize personal data collection. We do not use advertising trackers or sell your data to ad networks.

7. Data Retention & Deletion

  • You can request deletion of your account and all associated data at any time by contacting Support.
  • We retain account data for 30 days after deletion request before permanent removal.
  • Adventure session logs may be retained anonymously in aggregated form for analytics purposes.

8. Security

Passwords are hashed with bcrypt. Authentication uses httpOnly cookies to prevent XSS access. All traffic is served over HTTPS. While we strive for security, no system is 100% secure — you also play a role by keeping your password private.

9. Children's Privacy

ScrollKeeper is not intended for users under 13 years of age, in compliance with COPPA. We do not knowingly collect personal information from children.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and associated data.
  • Object to certain processing activities.

To exercise any of these, contact us at Support.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.