Privacy Policy

Sagecraft is operated by Goibniu Games(the “Studio,” “we,” “us”). This policy describes the data we collect when you use Sagecraft at playsagecraft.com during the alpha period, why we collect it, and what choices you have. The product is in alpha — terms may change with reasonable notice to active users.

What we collect

• Account data — your email address, sign-in identifiers, and OAuth profile data (name, avatar) provided by Clerk when you sign in via Google or Discord.
• Game data — your characters, sessions, scenes, dice rolls, and DM/player messages, stored so you can resume play.
• AI request/response data— your turn prompts and the DM’s narrative responses are sent to large language model providers (see Third Parties below) to generate gameplay.
• Voice audio (Tier 2+) — generated text-to-speech audio for narration. We do not record or transmit your microphone audio in the alpha.
• Operational logs — error traces, API latency, spend totals. Used for product reliability; not sold or shared for marketing.

How we use it

• To provide the game — generate DM narration, persist your character, resume sessions.
• To enforce per-tier session and spend limits (see Terms of Service).
• To monitor reliability, debug failures, and prevent abuse.
• To contact you about your account (alpha invitations, security notices, material policy changes).

We do not sell your personal data, and we do not use your gameplay text to train third-party AI models beyond what is required to serve your turn (see provider links below).

Third parties (subprocessors)

We rely on a small set of vendors to operate the product. Each is contractually bound to handle your data only as needed for their service:

• Clerk — authentication and account management. Privacy policy
• Supabase — primary database and session storage. Privacy policy
• Vercel — hosting and edge infrastructure. Privacy policy
• Anthropic (via Vercel AI Gateway) — large language model that generates DM narration and structured responses. Privacy policy
• OpenAI (Tier 2+ only) — text-to-speech for DM narration audio. Privacy policy
• Sentry — error monitoring. Captures stack traces and sanitized request metadata; we do not knowingly send gameplay text or auth tokens to Sentry. Privacy policy

Retention

We retain your account and game data for as long as your account is active. Operational logs are retained for up to 90 days. When you delete your account, your characters, sessions, and messages are deleted within 30 days; backups containing residual data are overwritten on the standard rolling schedule (typically ≤ 60 days).

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request export of your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, email privacy@playsagecraft.com. We respond within 30 days. We may need to verify your identity before acting on a request.

Security

Connections are encrypted in transit (HTTPS). Account credentials are never stored in our database — Clerk handles authentication. We apply least-privilege access and review subprocessors periodically. No system is perfectly secure; if you believe your account has been compromised, contact us at privacy@playsagecraft.com.

Changes

If we make material changes to this policy, we’ll update the “Last updated” date above and notify active users by email. Continued use of Sagecraft after a change indicates acceptance of the revised policy.

Contact

Questions, requests, and complaints: privacy@playsagecraft.com. See our Terms of Service for additional context on operator identity.