Privacy Policy

This Privacy Policy explains how DMForge LLC ("DMForge", "we", "us" or "our") collects, uses, stores and shares personal information when you use the DMForge website, applications and services (the "Service").

1. Who we are

• DMForge is a toolset for Dungeon Masters running Dungeons & Dragons 5th-edition games.
• It is operated by DMForge LLC, a Virginia limited liability company, and offered to residents of the United States.
• For privacy questions or requests, email info@dmforge.io.

2. What we collect

2.1 What you give us

• Account details: your name, email address and password. We store passwords hashed, never in plain text.
• Billing details: if you add a card, Stripe, Inc. collects and processes it for us. We never receive or store your full card number. We receive limited details: the card brand, its last four digits, transaction IDs, amounts and subscription status.
• Your content: what you type, upload or create in the Service, such as campaign notes, character details, world details and prompts.
• Messages: what you send us through the contact form or by email.

2.2 What we record when you use the Service

• What the forges make for you: the campaigns, maps, heroes and encounters the Service creates from your inputs.
• Usage information: pages visited, features used, how often you use each feature (this is how monthly allowances are counted), and errors. We record this ourselves; we don't use third-party analytics services.
• Device and log information: IP address, browser and operating system, referring page, timestamps, and basic technical logs.

2.3 From Stripe

Subscription status, payment confirmations, refunds, disputes and fraud signals.

2.4 Cookies

We use only essential cookies:

• to keep you signed in;
• to protect forms and accounts, for example against cross-site request forgery;
• to remember simple settings, such as the sound toggle.

We don't use advertising cookies or ad networks, and we don't sell cookie data.

3. How we use information

We use information to:

• provide the Service: sign you in, run the tools, save your work, and apply your plan and allowances;
• handle payments: trials, renewals, cancellations, refunds and receipts;
• send service emails: account notices, receipts, trial and renewal reminders, security alerts and policy updates. These aren't optional;
• send product news, if you agree: you can unsubscribe at any time;
• improve the Service: for example by looking at aggregated usage and fixing errors;
• prevent abuse: fraud, spam, scraping and breaches of our Terms;
• meet legal obligations: tax records, and responding to lawful requests.

We do not:

• sell your personal information;
• share it for cross-context behavioural advertising;
• use your content to train AI models without your explicit consent;
• show ads in the Service.

4. Who we share information with

We share information only with service providers that help us run DMForge, and only as needed:

• Payments: Stripe.
• AI services: OpenAI, xAI and TypeSafe. They receive the inputs needed to produce your results.
• Hosting, database, storage and email: for example, Vercel and Google Workspace.

We require these providers to use your information only to provide their service to us and to keep it secure.

• AI providers: we instruct them not to use your inputs to train their general models, but we can't fully control third parties. Please don't put sensitive personal information (health, financial account numbers and the like) into the Service.
• Legal requests: we may disclose information when the law requires it, or to protect the safety, rights or property of DMForge, our users or the public.
• Business transfers: if DMForge is involved in a merger, acquisition or sale of assets, information may transfer as part of it. We will tell you of any change in how it is handled.

5. Where information is stored

DMForge operates in the United States, and our providers process information mainly in the United States.

6. How long we keep information

Your personal information and your game content are treated differently:

• Personal information identifies you: your email address, sign-in details, billing records and IP addresses.
• Game content is the creative material you make in the Service: campaigns, maps, heroes, encounters and notes. It is not personal information, and it is covered by Section 11 of our Terms of Service.

How long we keep it:

• While your account is open, including while it is frozen, we keep your account and content. A frozen account (a trial that ended without a subscription) is kept until you ask us to delete it.
• When you ask us to delete your account, we delete your personal information and your account. The exceptions are records we must keep by law, such as tax and payment records, usually for 7 years, and information we need to prevent fraud or resolve disputes.
• After an account is closed, game content is handled under Section 11 of the Terms.

7. Your choices and rights

To make a request, email info@dmforge.io from your account email. You can ask us to:

• give you a copy of the personal information we hold about you;
• correct inaccurate information;
• delete your account and personal information, subject to the legal exceptions in Section 6;
• send you a copy of your game content while your account is open;
• stop sending product news. Use the unsubscribe link or email us.

We will not treat you differently for using any of these rights. If your state gives you further privacy rights, contact us and we'll honour them as the law requires.

8. Children

The Service is not directed to children under 13, and we don't knowingly collect personal information from them. Users between 13 and the age of majority need the consent of a parent or guardian. If you believe a child under 13 has given us personal information, email info@dmforge.io and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect information:

• encryption in transit (HTTPS);
• encryption at rest where our providers support it;
• hashed passwords;
• access controls and least-privilege access;
• regular updates.

No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires.

10. Links to other sites

The Service may link to other websites. Their privacy practices are their own; please read their policies.

11. Do Not Track

We don't respond to browser "Do Not Track" signals, because there is no agreed standard for them. We don't do cross-context behavioural advertising either way.

12. Changes to this policy

We may update this policy. The "Last updated" date shows the latest version. For material changes, we'll tell you by email or in the app before they take effect.

13. Contact

DMForge LLC · info@dmforge.io