Curious AI Consulting, LLC, trading as Curious Campaigns, is the data controller for the personal data described here. This notice explains what we collect when you use Curious Campaigns, why, and what you can ask us to do about it.
What we collect and why
- Account data — email address, password hash (or Google sign-in identifier) and display name. Used to create and secure your account and to keep your characters across devices. Legal basis: performance of our contract with you.
- Campaign data — campaign names, invite codes, table membership, saved characters, dungeons and quests. Used to provide the game itself. Legal basis: contract.
- Entitlement data — which campaign pass and modules your table holds, and the term dates. Used to give your table what it paid for. Legal basis: contract.
- AI assistant messages — prompts and world context you send to the AI Dungeon Master. Used to generate a reply. Legal basis: contract.
- Technical and security data — IP address, device and browser information, and error logs. Used for security, abuse prevention and fixing faults. Legal basis: our legitimate interest in a safe, working service.
- Support messages — what you send us. Used to answer you. Legal basis: contract and legitimate interest.
Who we share it with
- Merchant of Record — Paddle.com handles the sale of our products, subscription management, payments, tax compliance and invoicing.
- Service providers — our hosting, database, authentication and AI model providers, acting on our instructions.
- Professional advisers — legal and accounting, where necessary.
- Authorities — where the law requires it.
We do not sell your personal data.
International transfers
Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses.
Retention
We keep account, campaign and entitlement data for as long as your account is active and for up to 30 days after deletion, except where we must keep records longer for tax or legal reasons. Technical logs are kept for a short operational period and then deleted or anonymised.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent. UK and EEA users may also complain to their supervisory authority. Email support@curious-campaigns.lovable.app and we will respond within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database rules so a table’s data is only readable by the people seated at it.
Cookies and local storage
We use essential cookies and browser local storage to keep you signed in, remember your active campaign and store offline game saves on your device. We do not use advertising cookies. You can clear this data in your browser at any time, which will sign you out and remove local saves.
Contact
Privacy questions: support@curious-campaigns.lovable.app.