In short
- What your table says and types is sent to AI services so they can answer you.
- The microphone is opt-in, and raw audio is not kept by default.
- Card details go to the payment processor and never reach DungeonFlux servers.
- DungeonFlux does not claim end-to-end encryption, because the server and the AI services have to read your content to run the game.
- You can export your data and ask for deletion. Some financial records must be kept.
What we handle
- Account: your name and email from the sign-in provider, your display name, your age confirmation, and which versions of the terms you accepted.
- Play: your characters, campaign progress, and what your table says and types.
- Money: purchases, receipts, allocations and usage statements. Not your card number.
- Technical: logs needed to run, secure and fix the service.
Who else processes it
Running DungeonFlux depends on outside services. The current plan names a hosted sign-in service, a payment processor, and a cloud host, and these are subject to final selection. The AI services that process text, speech, pictures and story memory will be listed here by name.
Provider list to be completed from the production configuration before launch.
Microphone and voice
Microphone capture is opt-in, and typing works without it. Raw audio is not kept by default after processing. A diagnostic recording, if ever offered, would be a separate choice.
Private information at the table
Private character notes and secrets are labelled for who may see them, and the label is enforced before the information is used to write a scene or sent to a device. Sharing the cost of a session does not make everything funded visible to every payer. Contribution amounts are shared with the group only if the group chooses it, and card details and total balances are never shown.
How long things are kept (proposed)
- Rejected and intermediate results: deleted after 24 to 72 hours unless needed for a short support check.
- Export downloads: available for a short time, for example 7 days.
- Backups: a database recovery window of 7 days and independent daily backups kept for 30 days.
- Required financial records: kept in restricted storage for as long as the law requires.
These are proposals and may change before launch.
Export and deletion
You can ask for an export of your profile, character templates, permitted campaign excerpts, usage statements and uploads. It leaves out other people’s private notes and hidden story state. Large or private exports ask you to sign in again, and the download expires.
Deletion removes live access straight away where possible and removes the stored files within a stated period. Backups age out on their own schedule, so we do not promise that every backup copy disappears at once.
Adults only
The pilot is an adult service. An age checkbox is not a full compliance program, and the policy for any younger users is still to be reviewed.
Messages and analytics
We send transactional messages such as verification, invitations, payment and refund updates. Marketing messages need separate consent. Analytics events never include payment details, private character secrets, provider credentials or signed file links.
Open items for counsel
- The company responsible for your data is Ember Table Studios LLC, a Florida limited liability company. For privacy requests, email support@dungeonfluxdnd.com.
- Rights and notices that depend on where you live.
- The full list of AI and infrastructure providers, and where data is processed.
- Cookie and local storage disclosures for the final site.
- Final retention periods.