this policy explains what we collect, why, who else touches it, and how to get rid of it. the short version: keeper is privacy-light by design — no advertising, no tracking cookies, no analytics beacons, no selling of your data. we collect the minimum needed to run your account, your game, and (if you subscribe) your billing.

what we collect

  • account. if you create an account, we store your email address and either a securely hashed password or an identifier from your chosen sign-in provider (google or facebook). we never see or store your provider password.
  • your game data. the characters you create and your campaign save state — the fiction, your choices, your progress. this is what lets a world persist and be there when you return.
  • gameplay input. the intents and messages you type in play, which are sent to the narration model to generate the scene (see subprocessors below).
  • subscription data. if you subscribe, our payment provider processes your payment. we store only your subscription status (active / trial / free) and a customer identifier — never your card number.
  • reach preferences. if you opt in to in-character letters, we store the email or discord destination you provided and your per-channel opt-in state.
  • minimal operational logs. error and integrity logs needed to keep the service running and secure.

we do not use tracking cookies, third-party advertising, cross-site trackers, or behavioural analytics.

cookies

we use only strictly-necessary cookies — the kind the service cannot work without, which most privacy laws exempt from consent banners:

  • a session cookie that keeps you signed in after you log in;
  • a short-lived sign-in cookie used only during a google/facebook login to complete the handshake securely, then discarded.

we set no advertising, analytics, or cross-site tracking cookies. clearing your cookies signs you out; nothing else breaks.

why we collect it

  • to authenticate you and keep your account and heroes yours across campaigns;
  • to run the game — generate narration, adjudicate outcomes, and persist your world;
  • to process and manage your subscription, if you choose to have one;
  • to deliver in-character reach only on the channels you explicitly turned on;
  • to keep the service secure, reliable, and abuse-free.

who else processes your data (subprocessors)

to run the game we send limited data to service providers, each for a single purpose. we do not sell data to any of them; they act on our behalf under their own terms.

  • google (gemini / cloud tts). your gameplay intents and scene context are sent to generate narration; scene text may be sent for voice synthesis.
  • replicate. scene-art prompts are sent to generate optional illustrations.
  • observability (langfuse). agent-turn telemetry used to debug and keep narration quality up.
  • payment provider (dodo payments, a merchant of record). handles checkout, billing, and card data; we receive only subscription status. dodo's own privacy terms govern the payment.
  • sign-in providers (google / facebook). if you use social sign-in, they verify your identity and return a basic profile identifier and email.
  • discord (optional). only if you opt in to discord reach, we deliver messages to the destination you provide.
  • hosting / database infrastructure. stores your account and save data.

your gameplay text and the model

the words you type in play are sent to the narration model to write the next scene. we do not use your gameplay content to train our own models. the model provider processes it under its terms to return a response. the model proposes prose; a deterministic rules engine — not the model — decides every outcome that matters. see how this works.

retention and erasure

we keep your account and game data for as long as your account exists. you can reset or erase your data from in-app settings (the privacy-reset control), and you can request full account deletion by contacting us at fabricio@zoff.tech. on deletion we remove your account, characters, and save state; minimal billing records may be retained where required by law. if you cancel a subscription, previously experienced content is never clawed back.

we do not sell or share your data

we do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under california law (ccpa/cpra). we have not done so in the preceding twelve months. we will never discriminate against you for exercising a privacy right.

your rights

depending on where you live, you may have some or all of these rights over your personal data:

  • access / know — what we hold about you and how it's used;
  • correct — fix inaccurate data;
  • delete — erase your data (subject to legal retention);
  • portability — receive a copy in a usable format;
  • object / restrict — to certain processing;
  • opt out — of any sale or sharing (we do neither — see above).

to exercise any of these, email fabricio@zoff.tech. we will verify your request and respond within the timeframe your law requires (for example, 45 days under ccpa, one month under gdpr). you may use an authorised agent where the law allows, and you may appeal a refusal by replying to our response.

california (ccpa/cpra): you have the rights to know, delete, correct, and to opt out of sale/sharing (we do neither), and the right to non-discrimination.

eea / uk (gdpr): we process your data to perform our contract with you (running your account and game), to meet legal obligations (billing records), and for our legitimate interest in keeping the service secure and working. you may lodge a complaint with your local data-protection supervisory authority.

children

keeper is not directed to children under 13, and we do not knowingly collect their data. if you believe a child has provided us data, contact us and we will delete it.

changes

if we make material changes to this policy we will update the effective date above and, where appropriate, notify account holders. continued use after a change means you accept the updated policy.

contact

questions about privacy: fabricio@zoff.tech · The Narrow Way Group LLC, Frisco Square, 6136 Frisco Square Blvd, Frisco, TX 75034, the State of Texas, United States.