Who receives data
Revision of 21 July 2026
Below is everyone who receives data, as of the date above. Beyond them, nobody: no mailing lists, no ad networks, no error-reporting service, and no analytics other than what is in the list.
Anthropic
| Purpose | Runs the game — powers the Game Master |
|---|---|
| What is sent | On every turn: your line, several preceding lines and a short recap of what happened earlier in the session — together with campaign state: character, equipment, location, people you know, missions, promises made |
| What is not sent | Email, or any other account identifier |
| Training on the data | No — paid tier, terms exclude it |
| Data processing agreement | Accepted 21 July 2026 |
This is the most substantive exchange in the list: what you wrote is exactly what goes. Otherwise the game would be impossible — the Game Master would have nothing to answer with.
| Purpose | Draws portraits and location art (Gemini) |
|---|---|
| What is sent | A description of the picture: terrain, time of day, weather, mood — or the character's appearance for a portrait |
| What is not sent | Email, campaign id, character name, and your lines |
| Training on the data | No — paid tier |
| Data processing agreement | Accepted 21 July 2026 |
Microsoft — Clarity
| Purpose | Shows where the interface is awkward |
|---|---|
| When | Only if you allowed it. Until you press "Allow" the script does not load at all — "not asked" counts as "refused" |
| What is sent | Clicks, scrolling, window size, browser errors — and the page layout without text |
| What is not sent | Any text from the page: your lines, the Game Master's replies, the character's name, your email |
| Data processing agreement | Accepted 21 July 2026 |
Recordings like this normally capture the whole page, which for this game would mean sending Microsoft everything you typed. So the text is masked in the browser itself, before sending: what leaves is the shape of the page, not its content. This is not a setting in someone else's dashboard that could be quietly flipped — it is markup on our own page, and the build carries a check that stops the mask being removed by accident.
Cloudflare
| Purpose | Hosts the site and carries requests to the game |
|---|---|
| What is sent | What any intermediary on the network sees: request address, IP, browser type |
| Data processing agreement | Accepted 21 July 2026 |
Apple
| Purpose | The mailbox used to reply to signup requests and send invitations |
|---|---|
| When | Only if you submitted a signup request through the form. If you simply play, your address never reaches it |
| What is sent | The address you gave and the message itself — as in any ordinary correspondence |
| What is not sent | Nothing from the game: no campaigns, no lines, no character name |
| Data processing agreement | Accepted 21 July 2026 |
There are no automated mailings — messages are written one at a time, by hand. That is why this is ordinary iCloud mail rather than a bulk-mail service: setting one up for a handful of messages would hand your address to another company for no reason.
Where all of it lives
The game itself and the database run on a home server, not in a cloud. Only what is listed above leaves it.
> Keeping this list current is enforced outside the document — see #243.