Privacy Policy.

Effective date: July 31, 2026 (website and updates list; game-service sections take effect when the game opens)

Who we are: PermaCampaign is operated by Infinite Customer Systems, LLC, a Virginia limited liability company ("we", "us").

Contact: privacy@permacampaign.com

1. The short version

PermaCampaign is a solo tabletop-roleplaying game you play by typing. To run the game we store what you type and what the game generates in response, and we send what you type to an AI provider to produce the next turn. We do not sell data, we do not serve ads, and we do not take payments today.

2. The development updates list

If you sign up for development updates on this website, the email address you submit is stored in our own database at our hosting provider (Cloudflare), and it is used solely to send development updates — one or two a month. When we send an update, the list is shared with an email delivery provider for that delivery and nothing else. Every email carries an unsubscribe link, and unsubscribing marks your address so it is never mailed again. The list is kept separate from game accounts and is never merged with game data.

Sign-up attempts are rate-limited using a short-lived, salted fingerprint of the network address — kept for minutes, never the address itself, and never stored with your email.

3. What we store about you as an account

Almost nothing. When you sign in, our database records a single opaque user identifier — a UUID issued by our authentication provider — used to attach your campaigns to you.

Your email address is not stored in our application database. It is held by our sign-in provider, which is the custodian of your email address, sign-in method, and any OAuth identity you use. Practically, the personal data in our own database is a UUID.

This section describes the game application's database. The development updates list (§2) is the one place we hold an email address you give us directly, and it lives in its own database, apart from the game.

4. What we store about your game

This is the substantial part, and it is where anything personal is most likely to end up.

• Your typed input, verbatim and indefinitely. Every turn you play stores the exact text you typed, unaltered and untruncated, alongside the game's interpretation of it and the resulting narration. We do not filter, redact, or truncate this text.
• The world you create — campaigns, characters and their backstories, non-player characters, locations, quests, story arcs, recorded deeds, and generated images.

Because your input is free text, it can contain anything you choose to type, including personal details about yourself or others. We have no way to detect that. Please do not type information into the game that you would not want stored. This is the single most important line in this policy.

5. What we log

• Website analytics, on this website only. permacampaign.com uses Cloudflare Web Analytics, a cookieless aggregate counter — page and country totals, with no cookie set and no identifier stored about you. The game itself runs none (see §6).
• IP addresses. We use them for rate limiting, and they appear in our hosting provider's standard request logs, which age out on that provider's retention schedule. We do not store IP addresses in our database.
• Operational counters — token counts and cache statistics. These contain no prompt or story content.
• Diagnostic logs, disclosed because they behave differently from the rest. When the game fails to understand a turn, the text you typed is recorded in our server logs so the failure can be diagnosed and fixed — only on those error paths, not on ordinary turns. Log entries are not part of a campaign, so they are not removed when you delete one; they age out on our hosting provider's retention schedule.

6. Who else receives your data

• Anthropic — receives the text you type, and the game context around it, on every turn. This is how the game works; it is not optional.
• Google (Gemini) — receives text prompts describing characters, creatures, and places in order to generate artwork, and — for visual consistency — images the game previously generated (a character's existing portrait, a map draft). It receives generated material, never files you upload; there is no upload path.
• Cloudflare — stores the artwork the game generates for your campaigns (portraits, scene art, maps), and holds the development-updates list (§2).
• Our sign-in and hosting providers — run the service and hold the stored data described above on our behalf.

We do not use analytics or tracking services in the game. There is no Google Analytics, Sentry, Mixpanel, Segment, PostHog, or comparable SDK in the product — verified in both the server and browser code. The one measurement anywhere is the cookieless website counter in §5. We do not sell or share your data for advertising.

7. How long we keep things

Game data is kept for as long as your account exists, because a permanent campaign is the product — the game's value depends on remembering what happened hundreds of turns ago.

8. Your choices

You can delete any campaign from within the application at any time. Deleting a campaign permanently removes its game data — including every turn you typed, the characters and world built around it, and its generated images.

You can delete your entire account from within the application. Doing so removes all of your campaigns and your account record, and deletes your sign-in credentials from our authentication provider. This cannot be undone.

Three honest limits on what deletion can reach:

• Diagnostic log entries (see §5) are not part of a campaign and are not removed by deletion. They age out on our hosting provider's retention schedule.
• World-generation working files — including the theme preferences you type when creating a world — are kept outside campaigns and are not removed by campaign deletion.
• Content already sent to AI providers in the course of generating your turns is governed by those providers' own retention policies, which we do not control.

If you are in a jurisdiction granting rights of access, correction, portability, or erasure and the in-app controls don't cover what you need, write to privacy@permacampaign.com and we will honor the request.

9. Payments

We do not currently process payments and no payment processor is integrated. If that changes, this policy will be updated before any payment is accepted, and payment details will be handled by a payment provider rather than stored by us.

10. Children

PermaCampaign is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13. We do not currently collect a date of birth or verify age.

11. Security

Campaign data is accessible only to the account that owns it, and every request must carry valid proof of sign-in — enforced at more than one layer.

No system is perfectly secure, and we do not claim otherwise.

12. Changes

We will update this policy when the product changes what it collects, stores, or sends. Material changes will be announced in the application before they take effect.

Infinite Customer Systems, LLC · Virginia, USA · privacy@permacampaign.com