TAVERNMIND

Last Updated: March 8, 2026

Privacy Policy

TavernMind is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Dungeon Master service. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not use TavernMind.

1. Information We Collect

Personal Information

When you create an account on TavernMind, we collect:

Email address: Used for account authentication, password resets, and important service notifications
Username: Your chosen display name within the Service
Password: Stored securely using bcrypt hashing (we never store plaintext passwords)
Subscription status: Whether you're a Free Wanderer or Hero Premium subscriber

Gameplay Data

To provide the AI Dungeon Master experience, we collect and store:

Characters: Race, class, name, stats, inventory, equipment
Campaign progress: Quests completed, story choices, chapter progress
Session logs: Gameplay interactions, AI responses, combat results, turn history
Party data: Multiplayer party membership, invitations, co-op session logs
Turn usage: Daily turn counts for free tier rate limiting

Usage & Analytics Data

We automatically collect certain information when you use TavernMind:

Device information: Browser type, operating system, device identifiers
Usage patterns: Features used, session duration, page views, click events
IP address: For security, fraud prevention, and geolocation analytics
Cookies: Session cookies for authentication (see Section 5)

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details on our servers. Stripe collects and processes:

Credit/debit card numbers
Billing address
Payment transaction history

See Stripe's Privacy Policy at https://stripe.com/privacy for details on how they handle your payment information.

2. How We Use Your Information

We use the information we collect to:

Provide the Service: Create and manage your account, process subscriptions, deliver AI-generated campaigns
Personalize your experience: Remember your characters, campaign progress, and preferences
Improve TavernMind: Analyze usage patterns, identify bugs, optimize AI responses
Communicate with you: Send account notifications, feature updates, and support responses
Ensure security: Detect and prevent fraud, abuse, and unauthorized access
Enforce our Terms: Monitor compliance with Terms of Service
Legal compliance: Fulfill legal obligations and respond to lawful requests

3. Third-Party Services

TavernMind integrates with the following third-party services that may collect or process your data:

Service	Purpose	Data Shared
OpenAI / Anthropic	AI content generation (NPC dialogue, campaign narratives, combat descriptions)	Gameplay inputs, character context, story prompts
Stripe	Payment processing for Hero Premium subscriptions	Email, payment details, subscription status
Render	Cloud hosting infrastructure	Server logs, IP addresses, session data
Neon (PostgreSQL)	Database hosting	All user data, gameplay data, account information

These services have their own privacy policies. We recommend reviewing them:

OpenAI Privacy Policy: https://openai.com/privacy
Anthropic Privacy Policy: https://www.anthropic.com/privacy
Stripe Privacy Policy: https://stripe.com/privacy

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in these limited circumstances:

With your consent: When you explicitly authorize us to share your data
Service providers: Third-party vendors (hosting, payment processing, AI APIs) that help us operate TavernMind
Legal requirements: To comply with laws, regulations, court orders, or legal processes
Safety & protection: To protect the rights, property, or safety of TavernMind, our users, or the public
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner

5. Cookies & Tracking Technologies

TavernMind uses cookies to maintain your session and authenticate your account. We use:

Session cookies: HttpOnly, Secure cookies that keep you logged in (expires after 24 hours)
Analytics cookies: Anonymous visitor tracking for usage analytics (Polsia Analytics)

You can disable cookies in your browser settings, but this may prevent you from using certain features of TavernMind (such as staying logged in).

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

Account data: Retained until you delete your account
Campaign & character data: Retained indefinitely while your account exists
Session logs: Retained for 90 days for debugging and support purposes
Payment records: Retained for 7 years for tax and legal compliance

When you delete your account, we will permanently delete your personal information within 30 days, except where retention is required by law.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and associated data
Data portability: Request your data in a machine-readable format
Opt-out: Unsubscribe from marketing emails (account-related emails cannot be opted out)
Restrict processing: Request that we limit how we use your data

To exercise these rights, email us at tavernmind@polsia.app. We will respond within 30 days.

8. Data Security

We implement reasonable security measures to protect your information:

Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
Password hashing: Passwords are hashed using bcrypt (12 rounds) before storage
Secure cookies: Session cookies use HttpOnly and Secure flags
Access controls: Limited employee access to user data, role-based permissions
Database encryption: Data at rest is encrypted by our hosting provider (Neon)

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy (COPPA Compliance)

TavernMind is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not use TavernMind or provide any personal information.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.

Parents or guardians who believe their child has provided personal information to TavernMind should contact us at tavernmind@polsia.app.

10. International Data Transfers

TavernMind is hosted on servers located in the United States. If you are accessing the Service from outside the U.S., your data will be transferred to, stored, and processed in the United States.

By using TavernMind, you consent to the transfer of your information to the United States and acknowledge that U.S. privacy laws may differ from those in your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

Posting the updated policy on this page with a new "Last Updated" date
Sending an email notification to the address associated with your account

Your continued use of TavernMind after the changes take effect constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Email: tavernmind@polsia.app

Subject Line: "Privacy Inquiry"

🧭 Early Access Notice: During Early Access, we may collect additional feedback and usage data to improve the Service. We will always handle your data in accordance with this Privacy Policy and will notify you of any significant changes to our data collection practices.