Privacy Policy

Account information. If you create a GM account: your email address, authentication credentials (handled by Supabase Auth — we never see your password in plaintext), and, if you sign in with Discord, the profile information Discord shares with us.

Campaign content. Everything you and your table put into a campaign — NPCs, locations, notes, session records, uploaded documents, and any other content you create in the Service.

Session audio and transcripts. If you use the closeout/transcription feature, the audio you upload and the transcript generated from it. Audio is uploaded directly to storage and processed by our transcription providers as described in Section 3.

Player/Discord identity.If a GM connects a campaign to Discord, we store the Discord user IDs of players who interact with the bot (for example, submitting a journal entry or reacting to a recap), so the GM can attribute player-submitted content. We do not require or collect a player's real name, email, or any Arcane Atlas account — players do not have accounts.

Billing information. If you subscribe to a paid plan, Stripe collects and stores your payment method directly; we receive and store only your Stripe customer ID, subscription status, and plan tier, not your card number.

Usage data. Standard technical data such as IP address, browser type, and pages visited, collected for security and to keep the Service working.

• To provide, maintain, and secure the Service;
• To process session audio into transcripts and AI-drafted recaps and suggested updates, which are queued for GM review before they touch canonical campaign data;
• To process billing through Stripe and manage subscriptions;
• To post player-safe content to Discord when a GM enables that integration; and
• To respond to support requests and communicate service changes.

We do not sell your information, and we do not use campaign content to train AI models outside of processing your own request.

To provide AI features, Arcane Atlas sends the relevant campaign data to these processors, solely to perform the task requested:

• Anthropic — session recaps, suggested entity updates, and other AI-assisted generation.
• Deepgram (primary) and Groq (fallback) — audio transcription of session recordings.
• Voyage AI — embeddings used for semantic search over campaign and rules content.

Each processor receives only what it needs to perform its task, and is bound by its own data-processing terms. AI features are optional — a campaign works without them, per the Service's manual-mode guarantee.

If a GM connects a campaign to Discord, only content the GM has marked visible to players is ever posted to Discord — GM-only secrets never post there, regardless of AI or automation involvement. Discord's own privacy policy governs how Discord itself handles data within your Discord server.

We retain campaign data for as long as the campaign or account exists. GMs can export their campaign data (Vault → Export) at any time. To request deletion of your account or campaign data, contact us at the address below; we will delete or anonymize data we are not required to retain for legal, billing, or security purposes.

Campaign data is stored in Supabase with row-level security enforced per campaign and per role, so a user can only read or write the data their campaign membership entitles them to. The service-role credential that bypasses those checks is never exposed to the browser and runs only on our backend worker.

We use the minimum cookies and local storage needed to keep you signed in (via Supabase Auth) and to remember basic preferences. We do not use third-party advertising or tracking cookies.

Arcane Atlas is not directed to children under 13, and GM accounts require you to be at least 18 or the age of majority in your jurisdiction. Players who interact through Discord are subject to Discord's own minimum age requirements.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can exercise most of these directly from your account settings, or by contacting us at the address below.

This Policy is governed by the laws of the State of Oklahoma, USA, consistent with our Terms of Service.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where practical, notify account holders.

Questions about this Policy, or requests regarding your data, can be sent to legal@arcaneatlas.app.