Privacy Policy

This policy explains what personal data GenFable (“we”, “the service”) collects when you visit the site or play the game, why we collect it, who processes it on our behalf, and the choices you have. It sits alongside our Terms of Service. If you don't agree with it, please don't use the service.

Account data. Your email address, your password (stored only as a salted hash — we never see or store the password itself), whether your email is verified, and timestamps such as when the account was created and last logged in.

Game data. Your character's name and everything it does in the shared world: actions you type, messages and rumours you leave, trades, duels, quest progress, and the narrated transcript of your story. The world is shared — other players can see your character's name, level, gear, and public deeds (for example in the Travellers list, duel ladders, and the public Armory).

Technical data. Our servers keep security and activity logs that record your IP address, the pages and actions you request, sign-in attempts, and the text sent to and received from the AI narrator. We use these to keep the service safe: rate limiting, abuse and cheating investigations, and debugging. These logs are size-bounded and rotate, so old entries are overwritten automatically.

Essential. One signed session cookie keeps you logged in and protects forms against cross-site request forgery. It contains no tracking and is required for the service to work.

Analytics. We use Google Analytics to measure traffic. For visitors in the EU/EEA it stays off (no analytics cookies, via Google Consent Mode) unless you allow it in the cookie notice; your choice is remembered in your browser's local storage and you can change it by clearing site data.

Preferences. The game remembers small interface choices (like which side panels you keep open) in your browser's local storage. This never leaves your device.

• To run the game — your account, character, and everything the world needs to tell your story (the contract between us).
• To reach you about your account — email verification, password resets, and account-deletion confirmations. We don't send marketing email.
• To keep the service safe and fair — security logs, rate limiting, and investigating abuse, cheating, or attacks (our legitimate interest).
• To measure traffic — aggregate analytics, with consent where required.

We do not sell your data, and we don't share it with anyone except the processors below.

A handful of services help us run GenFable. Each receives only what its job needs:

• Render (render.com) — hosts the servers and databases (United States).
• Cloudflare Turnstile — the “are you human?” check on our sign-in and contact forms; it processes your IP address and browser signals to tell people from bots.
• Brevo — delivers account email (verification, password reset, deletion confirmations, contact-form relay) and so processes your email address.
• OpenRouter and its AI model providers — the AI narrator. The text you type into the game and the game facts needed to narrate it are sent there to generate the story. Your email and IP address are not sent with it — but the words you write are, so don't put real-world personal details into in-game messages.
• Google Analytics — aggregate traffic measurement, as described in section 3.

Account and game data are kept for as long as your account exists. Security and activity logs are size-bounded and rotate on their own, so entries fade as new ones arrive. Backups are kept for a short window to protect the world against loss, then replaced.

You can delete your account yourself at any time from your Settings: confirm your password, then click the confirmation link we email you. This permanently removes your login, your character, and your character's inventory, quests, messages, and transcript.

One honest caveat: the world's shared history (for example an event line saying your character once slew a troll) may keep your character's name as part of other players' stories — but it is no longer linked to you or your email in any way.

Depending on where you live (for example under the GDPR), you may have the right to access, correct, export, or erase your personal data, to object to or restrict processing, and to complain to your local data-protection authority. Deletion is self-service (section 7); for anything else, reach us through the contact page and we'll help.

GenFable is not for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we'll remove it.

If we change this policy, we'll update the date at the top; for a significant change we'll say so on the site. Continued use after a change means you accept the new version. Questions? The contact page is always open.