Privacy Policy

1. Information We Collect

When you use StoryRoll, we collect the following:

• Account information: Your email address and name from Google or Apple when you sign in, and your profile picture if you use Google.
• Game data: Campaigns, worlds, characters, session messages, dice rolls, and anything else you create in a game.
• Usage data: Pages you visit, buttons and features you use, session recordings (text boxes are hidden; text on screen is not), achievement progress, and when you play. Your IP address comes with this data, and our analytics provider uses it to estimate your city and country.
• Diagnostics: Crash reports, error details, and performance timings from your device.
• Purchases: What you bought and when, so we can unlock it on every device you sign in on. Apple or Stripe handles payment, and we never receive your card details.
• Device token: If you allow notifications in the iOS app, a push token that lets us reach that device.
• Messages to support: Whatever you include when you email us.

Voice input uses your device's built-in speech recognition. Only the resulting text reaches StoryRoll; we never receive the audio. We do not collect your precise location, contacts, or photos.

2. How We Use Your Information

• To run StoryRoll and your game sessions.
• To generate Game Master responses, voice narration, and artwork for your campaigns.
• To check content against our rules and keep StoryRoll safe for other players.
• To understand how people use StoryRoll and fix what breaks.
• To process purchases and restore them on your devices.
• To send notifications and emails you can turn off at any time: notifications in your device settings, emails from the link in each one.

We do not sell your data, share it for advertising, or track you across other companies' apps and websites.

3. Third-Party Services

StoryRoll relies on these companies. Each one receives the data described beside it.

• Convex: Our database, file storage, and backend. Everything you create in StoryRoll is stored here.
• Vercel: Hosts the StoryRoll website and app pages, so it handles each request your device makes, including its IP address.
• Google Sign-In: Signs you in with your Google account and shares your name, email address, and profile picture with us.
• Sign in with Apple: Signs you in with your Apple Account and shares your name and email address (or an Apple relay address, if you choose to hide yours).
• Anthropic (Claude): Writes the Game Master's narration. It receives your actions plus the campaign, world, and character details the Game Master needs.
• ElevenLabs: Turns Game Master text into voice narration when voice is on.
• Leonardo.ai: Draws scene art, character portraits, and other game artwork from text descriptions. Some images use Google's Gemini image model, which we reach through Leonardo.
• OpenAI: Checks the text you write (game actions, character and world descriptions) against our content rules through OpenAI's moderation service. It does not write any game content.
• TypeSafe AI: When switched on, runs automated checks on game turns (content boundaries, story beats) that we use to improve the Game Master.
• PostHog: Product analytics. Records which pages you visit and actions you take, plus session recordings, linked to your StoryRoll account ID, name, and email. Recordings hide what you type into text boxes, but text already on screen can appear in them, including actions you have sent.
• Sentry: Error and performance reports. When something breaks, it receives technical details about the failure and, for some sessions, a screen recording with typed text hidden. These reports are not tied to your name or email.
• Apple App Store and RevenueCat: Process purchases in the iOS app. RevenueCat receives your StoryRoll account ID and your purchase history so we can unlock what you bought.
• Stripe: Processes purchases on the website. You enter card details on Stripe's page, and we never see your card number.
• Resend: Sends our emails, such as a note when your free turns refill. It receives your email address and the message.
• Apple Push Notification service: Delivers notifications to your iPhone or iPad if you allow them. It receives your device's push token and the notification text.

4. Data Retention

We keep your data for as long as your account exists. You can delete your account at any time from your profile page. Deleting it removes your account, characters, profile, achievements, push tokens, email settings, and sign-in records. If you signed in with Apple, we also ask Apple to revoke StoryRoll's access, so it drops off the apps list in your Apple Account settings.

Campaigns and session messages stay so other players in a shared campaign keep their story, but they are no longer connected to an account. If your account has an open content-safety report when you delete it, we keep your email address and that report so the account can't be recreated to avoid review.

Analytics and error data already sent to PostHog and Sentry follows their retention schedules. PostHog session recordings are deleted after 30 days.

If you report a message or a player, or someone reports you or one of your messages, we keep that report as a moderation record after you delete your account, including a short excerpt of the reported message.

5. Cookies & Local Storage

StoryRoll stores a session token on your device to keep you signed in. PostHog, our analytics provider, stores an ID in a cookie and in your browser's local storage so it can tell visits apart and link them to your account once you sign in. If your browser sends a Do Not Track signal, PostHog analytics stay off. We use no advertising cookies.

6. Children's Privacy

StoryRoll is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

7. Your Rights

You can ask to see, correct, or delete your personal data at any time by emailing us. Account deletion is also available directly from your profile page.

8. Contact

If you have questions about this Privacy Policy, please contact us at privacy@storyroll.app.