← Grimhold

Who receives data

Revision of 21 July 2026

Below is everyone who receives data, as of the date above. Beyond them, nobody: no mailing lists, no ad networks, no error-reporting service, and no analytics other than what is in the list.

Anthropic

PurposeRuns the game — powers the Game Master
What is sentOn every turn: your line, several preceding lines and a short recap of what happened earlier in the session — together with campaign state: character, equipment, location, people you know, missions, promises made
What is not sentEmail, or any other account identifier
Training on the dataNo — paid tier, terms exclude it
Data processing agreementAccepted 21 July 2026

This is the most substantive exchange in the list: what you wrote is exactly what goes. Otherwise the game would be impossible — the Game Master would have nothing to answer with.

Google

PurposeDraws portraits and location art (Gemini)
What is sentA description of the picture: terrain, time of day, weather, mood — or the character's appearance for a portrait
What is not sentEmail, campaign id, character name, and your lines
Training on the dataNo — paid tier
Data processing agreementAccepted 21 July 2026

Microsoft — Clarity

PurposeShows where the interface is awkward
WhenOnly if you allowed it. Until you press "Allow" the script does not load at all — "not asked" counts as "refused"
What is sentClicks, scrolling, window size, browser errors — and the page layout without text
What is not sentAny text from the page: your lines, the Game Master's replies, the character's name, your email
Data processing agreementAccepted 21 July 2026

Recordings like this normally capture the whole page, which for this game would mean sending Microsoft everything you typed. So the text is masked in the browser itself, before sending: what leaves is the shape of the page, not its content. This is not a setting in someone else's dashboard that could be quietly flipped — it is markup on our own page, and the build carries a check that stops the mask being removed by accident.

Cloudflare

PurposeHosts the site and carries requests to the game
What is sentWhat any intermediary on the network sees: request address, IP, browser type
Data processing agreementAccepted 21 July 2026

Apple

PurposeThe mailbox used to reply to signup requests and send invitations
WhenOnly if you submitted a signup request through the form. If you simply play, your address never reaches it
What is sentThe address you gave and the message itself — as in any ordinary correspondence
What is not sentNothing from the game: no campaigns, no lines, no character name
Data processing agreementAccepted 21 July 2026

There are no automated mailings — messages are written one at a time, by hand. That is why this is ordinary iCloud mail rather than a bulk-mail service: setting one up for a handful of messages would hand your address to another company for no reason.

Where all of it lives

The game itself and the database run on a home server, not in a cloud. Only what is listed above leaves it.

> Keeping this list current is enforced outside the document — see #243.