Privacy Policy

Universes ("we", "us", or "our") operates an AI-powered text adventure platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service. We are committed to safeguarding your privacy and handling your data transparently.

We collect the following categories of information:

• Account Information: Your display name, email address, and password (stored as a secure hash, never in plain text). Your display name is unique and permanent once set during registration.
• Adventure Data: Universes, characters, stories, and other content you create within the platform.
• Payment Information: Billing details are collected and processed entirely by Stripe. We do not store your credit card number or full payment details on our servers.
• Usage Data: Session cookies, authentication tokens, token usage metrics, and basic usage patterns necessary for operating the service.

We use your information for the following purposes:

• To create and manage your account
• To provide and improve the text adventure experience
• To process payments and manage subscriptions through Stripe
• To send transactional emails (such as email verification codes) via Resend
• To generate AI-powered content by sending your adventure data to the Anthropic Claude API
• To display relevant advertisements through Google AdSense, when configured

We share data with the following third-party service providers, solely for operational purposes:

• Anthropic (Claude API): Your adventure content (universe descriptions, character details, story text) is sent to Anthropic's Claude API to generate AI responses. Anthropic processes this data in accordance with their own privacy policy and data handling practices.
• Stripe: Handles all payment processing. Your payment information is governed by Stripe's privacy policy.
• Resend: Used to deliver transactional emails such as verification codes. Your email address is shared with Resend for this purpose.
• Google AdSense: When configured, Google AdSense may be used to serve advertisements and may set its own cookies in accordance with Google's policies.

We use cookies strictly for authentication and session management. When you log in, a session cookie is set by NextAuth to maintain your authenticated state. We do not use tracking cookies or third-party analytics cookies. Google AdSense, when active, may set its own cookies in accordance with Google's policies.

Your data is stored in our PostgreSQL database hosted securely. We implement industry-standard security measures including password hashing, secure session management, and encrypted connections. While we take reasonable precautions to protect your data, no method of electronic storage is 100% secure.

We retain your data for as long as your account is active. You may delete your account at any time, which will permanently remove your personal data and all associated adventure content from our systems. To request account deletion, use the account settings within the application.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data and account.
• Data Portability: Request your data in a portable format.
• Objection: Object to certain processing of your data.

To exercise any of these rights, please contact us at the address provided below. We will respond to your request within 30 days.

We do not sell, rent, or trade your personal data to third parties. Data is shared only with the service providers listed in Section 4, and only to the extent necessary to operate the platform.

Universes is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.