Privacy Policy

1.The short version

• Your account is an email address and a password, or a Google sign-in.
• We store the maps, character sheets, homebrew and dice skins you create.
• We run no analytics, no tracking pixels and no advertising. Nobody is building a profile of you here.
• Your prompts and any images you upload are sent to the AI providers that generate your maps: that is the service working, and it is unavoidable.
• Payments go through Stripe. Card details never reach RPGenie’s servers.
• Email us and we will delete your account and its contents.

2.What we collect

Account information. Your email address, and either a password (stored hashed by our authentication provider: we never see it) or the fact that you signed in with Google. We do not ask for your name, address, phone number or date of birth, and there is nowhere to enter them.

Things you create. Map prompts and the options you pick, generated map images, character sheets (including free-text fields like backstory and notes), homebrew content, campaign notes, AI portraits, dice skins and animated maps.

Billing state. Which plan you are on, how many credits you have used and when your period resets, plus the customer and subscription identifiers Stripe gives us so we can look your billing up. We never receive or store your card number.

Anything you type into a support message. The feedback box sends us your message. If you are signed in when you use the one on your dashboard, it sends your email address with it so we can reply.

Which link brought you here. If you reached RPGenie through a link we posted or paid for, we store the name of that link or site alongside your account, once, on the day you sign up. It is a word like “reddit” and a date, nothing more. Section 5 explains why and what it is not.

We do not buy data about you, and we have no way to identify you beyond the account you created.

3.Why we have it

• To run your account: sign you in, remember your plan, count your credits.
• To provide the thing you asked for: generate a map, save it, show it back to you later.
• To take payment and give you the credits you paid for.
• To answer you when you write in.
• To keep the service working and lawful: investigate abuse, fix bugs, and comply with the law when we have to.

We do not use your content to train AI models, and we do not sell or rent your information to anyone. Ever, for any price.

4.Who else touches your data

RPGenie is a small service built on other people’s infrastructure. These are all of them, and what each one gets:

• Supabase: hosts the database, your login, and stored images. Effectively everything in section 2 lives there.
• Vercel: hosts and serves the site. Their platform logs requests, which includes IP addresses, in the ordinary way that any web host does.
• Stripe: handles payment. We send your email address and an internal account identifier when you start a checkout. Your card details go straight to Stripe and never pass through us.
• fal.ai: runs the image and video models. Your prompts, any image you upload, and the images produced from them are processed there. Map generation runs directly from your browser to fal.ai, so your prompt goes to them without passing through our server first.
• Anthropic: turns a plain-English map description into a better prompt, and, when you animate a map, looks at that map image to work out what is in it. So: the text you type, and the map image you are animating.
• Resend: sends the small number of emails we send: a welcome message, and your feedback forwarded to us.
• Google: if you sign in with Google. Separately, our pages load fonts from Google, which means your browser contacts them (and reveals your IP) when a page loads.
• YouTube: the tutorial and animated-map videos are embedded from YouTube, which may set cookies when a page containing one loads.

Each of these has its own privacy policy governing what they do with what they receive. We have chosen them, but we do not control them.

5.Tracking, analytics and advertising

One thing we do record, and we would rather say it plainly. If you arrive through a link we posted or paid for, your browser keeps a note of which link it was, and if you go on to create an account that note is saved with it: the site or campaign name, and the date. It is written once and never changed. That is how we tell whether posting somewhere was worth doing. It stays in our own database, no third party is involved, it is not a profile of you, and if you never make an account nothing is ever sent anywhere. You can clear it by clearing this site’s data in your browser.

Cookies. The only cookies RPGenie sets are the ones that keep you signed in. There is no cookie banner because there is nothing to consent to: we set no advertising or analytics cookies. Note that the embedded YouTube videos described above are a third party and may set their own.

6.Who can see what you make

Nothing you create is public by default. There is no sharing feature, no public gallery of user work, and no profile page. Your maps, sheets and homebrew are visible to your account only.

The person who runs RPGenie can look up an account by email address to see its plan, credit usage and billing status, and can adjust credits: this is how support requests and billing problems get fixed. If our content-safety filter flags an image and the block is overridden, we keep a record of that event alongside the account it belongs to.

7.How long we keep it

Your content stays until you delete it or ask us to close your account. Two exceptions, both of them housekeeping rather than policy: we keep a limited number of the most recent saved map images and dice skins in durable storage, and older ones fall back to the AI provider’s copy, which may expire. Billing records are kept as long as tax and accounting rules require.

8.Deleting things

Inside the app you can delete individual maps, characters, homebrew entries and dice skins whenever you like.

There is no self-service account deletion yet. Rather than pretend otherwise: email info@rpgenie.ai from the address on the account and we will delete the account and the content attached to it. We aim to do it within 30 days and usually much sooner. A self-service button is on the list.

You can also ask for a copy of what we hold about you, ask us to correct it, or ask us to stop using it. Same address.

9.If you are in California, the UK, or the EU

Californian residents have rights under the CCPA/CPRA to know what is collected, to have it deleted, to correct it, and not to be discriminated against for asking. There is nothing to opt out of regarding sale or sharing, because we do not sell or share personal information and never have.

If you are in the UK or the EEA, you have rights of access, rectification, erasure, restriction, portability and objection. Our lawful bases are performance of a contract (running your account and providing what you paid for), legitimate interests (keeping the service working and secure), and consent where it applies. Your data is processed in the United States. You may complain to your local supervisory authority, though we would rather you told us first so we can fix it.

Exercise any of these by emailing us. We will not make you fill in a form.

10.Children

RPGenie is not intended for children under 13, and you must be at least 13 to create an account. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, email us and we will delete it.

11.Security, honestly stated

Passwords are hashed by our authentication provider and we never see them. Payment details never reach us. Access to accounts is restricted to the person who runs the service.

That said: this is a small service, not a bank. No system is perfectly secure, and we cannot promise one. Please do not store anything in a character’s notes field that would genuinely hurt you if it leaked.

12.Changes

If we change this materially (a new processor, a new category of data), we will update the date at the top and, where the change matters, tell account holders by email. Continuing to use RPGenie after a change means you accept it.