Realmweaver is built by creators, for creators. We take your privacy seriously because your creative work is personal. This policy explains what we collect, why, and what we do with it.
1. Information We Collect
Account Information:
- Email address (for authentication and communication)
- Display name (shown in the app)
- Password (encrypted, we cannot read it)
Content You Create:
- Worlds, wiki entries, session transcripts, writings, and exported documents
- Images you upload to wiki entries
- Feedback you submit through the app
Usage Information:
- Which features you use and how often (session types, exports, consistency checks)
- Session depth and duration
- Error logs when something goes wrong
- Browser type and device type (for compatibility)
Payment Information:
- Processed entirely by Stripe — we never see or store your full credit card number
- We store your Stripe customer ID to manage your subscription
2. How We Use Your Information
To provide the Service:
- Your world content is sent to Anthropic's Claude API to power coaching sessions, Write Together, the Realm Keeper, and the Consistency Checker
- Your content is stored in our database (hosted by Supabase) so you can access your worlds
- Your email is used for account authentication and important service notifications
To improve the Service:
- We analyze aggregate usage patterns (which session types are popular, where users get stuck) to improve the product
- We DO NOT read your individual world content for product development
- We DO NOT use your content to train any AI model
To provide support and improve quality:
- Our team may review world content and session transcripts to diagnose issues reported by users, improve AI coaching quality, and ensure the platform is working correctly. We never share individual user content externally.
To communicate with you:
- Account-related emails (password reset, subscription changes)
- Product updates and new features (you can opt out)
- We will never sell your email to third parties or send you spam
3. How Your Content Is Processed by AI
This section is important to understand:
- When you use an AI feature (sessions, Write Together, Manuscripts, Game Books, the Realm Keeper, Chronicle, imports, or the Consistency Checker), your relevant world content is sent to Anthropic's Claude API
- Anthropic processes this content only to generate the response, and retains API data only briefly and only as described in its API data policy (for example, for abuse monitoring)
- Anthropic's API terms explicitly state that API inputs and outputs are not used to train their models
- For full details, see Anthropic's API data policy at anthropic.com/policies
- We do not use any other AI provider — all AI features are powered exclusively by Anthropic's Claude
4. Data Storage and Security
- Your data is stored on Supabase servers with encryption at rest and in transit
- Authentication is handled through Supabase Auth with secure token management
- Payments are processed through Stripe with PCI-compliant security
- We use HTTPS for all data transmission
- Access to production databases is restricted to authorized personnel only
5. Data Sharing
We do not sell, rent, or share your personal information or creative content with third parties, except:
- Anthropic: Your world content is sent to their API for AI features (never used to train their models; see Section 3)
- Stripe: Your payment information is processed by Stripe for billing
- Supabase: Your data and uploaded images are stored on their hosted infrastructure
- Vercel: Hosts the application itself; like any web host, it processes standard request logs (such as IP addresses)
- Sentry: Our error monitoring. When something breaks, an error report (what failed, browser details, and which account hit it) is sent so we can fix it. Your creative content is not included in error reports.
- Resend: Delivers our account and service emails, and processes your email address to do so
- PostHog: Our product analytics. We record which features are used (for example, that a session was started or an export was downloaded) tied to your account, so we can find where the product confuses people and fix it. Your creative content is never included in analytics events, and this data is never sold or shared with advertisers.
- Meta (ad measurement): When we run ads, we use the Meta Pixel and Conversions API to measure whether they work (for example, counting that a signup or purchase happened after an ad click). For matching, we may send Meta a hashed (irreversibly scrambled) version of your email address alongside these events. Meta never sees your creative content. You can control ad personalization in your Meta account's Ad Preferences.
- Legal requirements: We may disclose information if required by law or to protect our legal rights
We do not sell your data or share it with advertisers or data brokers. We never share your creative content with any third party except Anthropic for AI processing.
6. Cookies
We use the following cookies and similar browser storage:
- Authentication cookies: Required to keep you logged in (essential, cannot be disabled)
- Session cookies: Required for the app to function
- Analytics (PostHog): Used to understand which features are used so we can improve the product. Never includes your creative content, never sold, never shared with advertisers. To be excluded from analytics, email support@realmweaver.io and we will do it manually.
- Ad measurement (Meta Pixel): Active when we run ad campaigns, to measure whether the ads work. See Section 5.
We never sell your data, and your creative content is never shared with advertisers under any circumstances.
7. Your Rights
You have the right to:
- Access your data at any time through the app
- Export all your content using our export tools (PDF, Markdown)
- Delete your account and all associated data from your settings page
- Correct your profile information at any time
- Object to marketing communications by opting out
For EU/EEA users (GDPR):
- You have the right to data portability (our export tools fulfill this)
- You have the right to request deletion (our delete account feature fulfills this)
- You have the right to restrict processing — contact us at support@realmweaver.io
- Our legal basis for processing is contract performance (providing the Service you signed up for)
For California users (CCPA):
- We do not sell personal information
- You can request disclosure of what data we collect — contact support@realmweaver.io
8. Children's Privacy
Realmweaver requires users to be at least 13 years old. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it promptly. Users aged 13-17 should have parental consent to use the Service.
9. Data Retention
- Your content is retained as long as your account is active
- If you delete your account, we delete all your data within 30 days
- Backup copies may persist in encrypted backups for up to 90 days before automatic deletion
- Anonymous, aggregate usage statistics (with no personally identifiable information) may be retained indefinitely
10. Changes to This Policy
We will notify you of significant changes via email or in-app notification at least 14 days before they take effect. Minor clarifications may be made without notice.