Privacy Policy

The short version

We collect the information needed to run Foundry, keep it secure, process payments, answer support requests, and send the email you ask us to send. We do not sell or rent personal information. We do not use your campaigns, prompts, or forged work to train artificial-intelligence models.

1. Who we are

Gibborim Games LLC operates Gibborim Foundry. You can reach us at hello@gibborimgames.com.

2. Information we collect

Account and profile information

When you create an account, we collect your email address and account identifiers. You may also provide a display name and optional avatar.

Content you provide

We store the prompts, choices, saved records, campaign notes, party information, locations, uploaded banners, and other material you choose to create or save in Foundry.

Payment and plan information

Stripe processes payments. We receive limited billing information such as your Stripe customer identifier, subscription or purchase status, plan, and transaction events. We do not store full payment-card or bank-account details.

Usage and technical information

We and our service providers may collect device, browser, IP-address, request, security, and usage information. We use this information to operate, secure, troubleshoot, measure, and improve Foundry.

Messages and marketing information

If you contact support, we collect the information in your message. If you subscribe to our updates or receive account-related email, we process your email address and relevant delivery or subscription information.

3. How we use information

• To create and secure accounts, provide the Services, and save your work.
• To process purchases, administer plans, and send transactional messages.
• To forge content from the prompts and choices you submit.
• To provide support, investigate abuse, enforce our terms, and protect the Services.
• To understand how Foundry is used and improve its reliability and features.
• To send marketing email only where you have subscribed or where otherwise permitted by law. You may unsubscribe from marketing messages at any time.

4. Model processing and training

When you forge a character, creature, item, or related material, the prompt and relevant choices are sent to Anthropic through its commercial API so it can return a result. We do not use your User Content to train models, and we do not opt into training on it through our Anthropic commercial account.

This does not mean that prompts are never processed or retained by a provider. Anthropic processes the request to provide the service under its commercial terms. Do not submit sensitive personal, financial, health, or confidential information that you would not want processed by a service provider.

5. When we share information

We share information only as needed to run Foundry, comply with law, protect rights and safety, or complete a business transaction such as a merger or sale. We do not sell or rent personal information.

Our current service providers include:

• Supabase for authentication, database hosting, file storage, and live synchronization.
• Anthropic for commercial API model processing when you use a forge.
• Stripe for payments, subscriptions, and billing records.
• Vercel for hosting and delivery of the application.
• Resend for transactional and support-related email delivery.
• Kit for marketing-email subscriptions and preferences.
• Umami for usage analytics.
• Upstash for rate limiting and abuse protection.

If you create a player-share link, the person holding that link and access token can view or update the material you selected for sharing. We do not publish those links, but you are responsible for sharing them carefully.

6. Cookies, analytics, and security

We use cookies and similar technologies for authentication, security, preferences, and service operation. We also use analytics and rate-limiting tools to understand traffic and protect Foundry from abuse. Your browser may let you limit cookies, but some parts of Foundry may not work correctly if you do.

7. Retention and deletion

We keep information for as long as needed to provide Foundry, meet legal and accounting obligations, resolve disputes, and enforce our agreements. You can delete your account from Account settings. Our deletion flow removes the account and its active Foundry content, removes stored avatars, and anonymizes generation logs used for aggregate cost tracking.

Some information may remain in backups, email systems, payment records, or provider systems for a limited period or where law requires it. Those records are handled according to the applicable provider’s retention practices and our legal obligations.

8. Security

We use reasonable administrative, technical, and organizational measures to protect information. No online service can guarantee absolute security, so please use a unique password and keep player-share links private.

9. Children

Foundry is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact us and we will take appropriate steps to remove it.

10. International processing

Our providers may process information in the United States and other countries where they operate. Those countries may have privacy laws that differ from the laws where you live.

11. Changes to this policy

We may update this policy when our practices or the Services change. We will update the date at the top of this page when we do.

12. Contact us

For privacy questions, account deletion help, or requests about your information, contact hello@gibborimgames.com.