Privacy Policy

1. Information we collect

We collect information you provide, information created as you use the Service, and information from third parties you connect.

Information you provide:

• Account & profile — name, username, email, password, avatar, bio, your date of birth (to verify you meet our minimum age), pronouns, interests, and the games and activities on your shelves.
• Content you create — posts, comments, reactions, messages, character sheets, campaigns, journal notes, circle and forum posts, reviews, images you upload, and anything else you submit.
• Location — the location you set for discovering and hosting nearby games. You control how precisely your location is shared with others (see Privacy settings).
• Payment details — if you subscribe to a paid plan or make a purchase, our payment processor collects your payment information. We receive limited billing data (e.g., plan, status, and the last four digits of a card), not your full card number.
• Communications — messages you send us for support, and your responses to surveys or prompts.

Information collected automatically:

• Usage & device data — pages viewed, features used, approximate location derived from IP address, browser and device type, and diagnostic/performance data.
• Cookies & similar technologies — used for essential functions (sign-in, security) and, with your consent, privacy-respecting analytics. See Cookies.
• Comics reading data — if you read comics here, we record where you got to and keep delivery records that protect publishers’ work. Because those records are unlike anything else on the Service, they have their own section: see Comics reading data.

Information from third parties:

• Sign-in providers — if you sign in with Google or another provider, we receive basic profile information (such as your name and email) as permitted by that provider and your settings.

2. How we use information

• Provide, operate, and improve the Service — accounts, discovery, messaging, circles, campaigns, and toolkits.
• Match you with nearby games, players, venues, and content, and personalize your experience.
• Enable the AI Game Master and other AI features you choose to use (see AI features).
• Send transactional messages (sign-in, security, RSVPs, notifications you opt into) and, where permitted, product updates you can opt out of.
• Keep the community safe — verify age, enforce our Code of Conduct, review reports, detect abuse and fraud, and moderate content.
• Process payments, subscriptions, and payouts, and maintain records.
• Deliver comics you have access to, save your place, and protect publishers’ work from automated copying (see Comics reading data).
• Understand usage through analytics, and comply with legal obligations.

3. How we share information

We do not sell your personal information. We share it only as described here:

• With other members — your profile and the content you post are visible to others according to your privacy settings and each feature’s audience (e.g., a circle, a campaign party, or the public). Your precise location is not shown to others beyond the level you choose.
• With venue and event partners — when you RSVP to or book a partner’s session or venue, we share what the partner needs to host you (such as your name and booking details).
• With comics publishers — aggregate readership figures for their own works (how many people opened a chapter and how far they got), never your identity or your reading history.
• With service providers — companies that process data on our behalf under contract, including cloud hosting and database (Google Cloud, Supabase), maps (Mapbox), email delivery (Resend), payments (Stripe), and AI processing for features you use (Anthropic). They may only use the data to provide services to us.
• For safety and legal reasons — to comply with law, enforce our terms, or protect the rights, safety, and property of members, the public, or Waypoint Realms LLC.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. AI features

Some features, such as the AI Game Master and AI-assisted content generation, send the relevant content (for example, your campaign messages, character details, or prompts) to our AI provider to generate a response. This content is processed to provide the feature to you and is not used by us to train third-party AI models. AI-generated output can be inaccurate or unexpected — treat it as entertainment, not professional advice. AI features are optional; if you don’t use them, your content isn’t sent for AI processing.

5. Location information

Because Waypoint Realms helps people meet to play, location is central to discovery. You choose the location associated with your account and how precisely it is disclosed to others. We use it to surface nearby games, players, and venues, and to power maps and distance filters. You can adjust or remove your location, and control precision, in your privacy settings. Never share another person’s exact location or personal details without their consent.

6. Comics reading data

Reading a comic here creates records that nothing else on the Service does, so we set them out separately rather than folding them into “usage data.” The same disclosure appears in the Comics Reader Terms.

• Your reading position — the chapter and page you reached, and how far down it, so you can pick up where you left off. It is private to you: not shown to the publisher, to other members, or anywhere on your profile. You can clear it at any time from your comics settings.
• Your content settings — the maximum rating and the content warnings you choose to filter by.
• Session and delivery records — that your account requested pages from a chapter, when, and how quickly. We keep these to detect automated copying, investigate leaks, and enforce our terms — not to profile your taste or to recommend things to you. Your IP address and browser user-agent are stored as one-way hashes rather than in the clear, because attribution only ever needs to compare them, and a forensics log full of readable IP addresses is a liability that outlives its usefulness.
• A forensic watermark, on a portion of sessions — an invisible marker in the rendered pages that identifies the reading session. If pages from a work later turn up where they should not, that marker traces them back to the session that produced them. It does not change what you see, and it exists to make leaking traceable rather than to observe your reading.
• Purchases and access — which works you bought or were granted, and under which plan.

We do not sell any of this, and we do not use reading data for advertising.

Reading data is included in your data export and is deleted with your account. Session and watermark records are the one part you cannot clear on demand while your account is open: they exist to protect other people’s copyrighted work, and a record its own subject can erase would not serve that purpose. They are covered by our retention practices and removed when you delete your account.

7. Children and teens

The Service is not for anyone under 13, and we do not knowingly collect information from children under 13. We verify a minimum age at signup. For members under 18, we apply additional safeguards — for example, limiting adult–minor direct messaging, hiding minors from public discovery unless they are connected, and filtering mature-rated content. If you believe a child under 13 has provided us information, contact us at privacy@waypointrealms.com and we will delete it.

8. Cookies and tracking

We use strictly necessary cookies to sign you in and keep the Service secure. With your consent, we also use privacy-respecting analytics to understand and improve the product. You can manage your choice through our consent banner and your browser settings, and we honor recognized privacy signals such as Global Privacy Control.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can:

• Access and edit your profile and content in the app.
• Export your data — download a copy of your information from your account settings.
• Delete your account — permanently delete your account and associated data from your account settings.
• Manage privacy and visibility in your privacy settings.
• Control notifications and marketing messages in your notification settings.

To exercise a right not available in-app, or to ask a question, email privacy@waypointrealms.com. We will not discriminate against you for exercising your rights.

10. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we remove or de-identify your personal information, except where we must retain certain records to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Some content you shared publicly or with others (for example, messages sent to another member) may persist in their view of the Service.

11. Security

We use technical and organizational measures — including encryption in transit, access controls, and row-level security — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Use a strong, unique password and keep it confidential.

12. International data transfers

We operate the Service using providers that may process and store data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

14. Contact us

Questions about this Policy or your information? Email us at privacy@waypointrealms.com or support@waypointrealms.com.