Last updated: 2026-03-24
At Vaultica LLC ("Vaultica," "we," "us," or "our"), operating as ShadowRealms and Vaultica Realms, we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have. We've written this to be clear and honest — no buried clauses, no surprises.
Account Data: When you sign up, we collect your email address and display name. If you sign in with Google, we receive your name, email, and profile picture from Google.
Session Security Data: We log your IP address and browser user-agent string for each login session to detect abuse and protect your account. This data is retained for the lifetime of the session (maximum 30 days).
User-Generated Content: Characters, forum posts, chat messages, dice roll logs, world-building entries, uploaded images, and other content you create within ShadowRealms.
Usage Data: Cloudflare Workers Analytics collects anonymized performance metrics (request counts, error rates, latency) at 10% sampling. No personally identifiable information is included.
We use your data exclusively to operate and improve ShadowRealms:
• Account data — to authenticate you and display your identity to other players in your realms. • Session security data — to prevent unauthorized access and detect abuse (legitimate interest). • User-generated content — to provide the game experience you signed up for. • Usage data — to monitor service health and performance.
We do not sell your data. We do not use your data for advertising. We do not use your data to train AI models.
AI features in ShadowRealms are always opt-in. If you enable AI features in Settings, your prompts and relevant context are sent to Cloudflare Workers AI for processing. Your data is not used for model training. If you do not opt in, none of your data is sent to AI systems.
We share limited data with the following service providers to operate ShadowRealms:
• Google (OAuth authentication) — receives your sign-in request when you choose "Continue with Google." Subject to Google's Privacy Policy. • Resend (email delivery) — receives your email address to deliver sign-in codes and realm invitations. Subject to Resend's Privacy Policy. • LiveKit (voice/video) — receives a session token with your display name when you join a voice/video session. Subject to LiveKit's Privacy Policy. • Cloudflare (infrastructure) — hosts the application, database, file storage, and analytics. Subject to Cloudflare's Privacy Policy.
We do not share your data with any other third parties.
Account data is retained for as long as your account exists. You can delete your account at any time from Settings, which permanently removes all your data within 30 days.
Login sessions expire after 30 days of inactivity.
Export files are automatically deleted 7 days after creation.
Verification codes (OTPs) expire after 10 minutes.
When you delete content (characters, posts, messages), it is soft-deleted immediately and permanently purged within 30 days.
Regardless of where you live, you have the following rights:
• Access — View all data we hold about you. • Portability — Export all your data in open JSON format from Settings > Data Export. • Rectification — Update your profile, characters, and content at any time. • Erasure — Delete your account and all associated data from Settings. • Objection — Opt out of AI features at any time. Contact us to object to other processing.
To exercise any right, use the in-app controls or email privacy@rpgshadowrealms.com. We respond within 30 days.
We use the following cookies and browser storage:
• Authentication cookie (necessary) — maintains your login session. Cannot be disabled. • Language preference cookie (functional) — stores your chosen display language. • Cookie consent preference (necessary) — remembers your consent choices. • Forum drafts in localStorage (functional) — saves your in-progress forum posts locally in your browser.
We do not use tracking cookies or third-party advertising cookies.
ShadowRealms is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at privacy@rpgshadowrealms.com and we will promptly delete the account.
ShadowRealms runs on Cloudflare's global edge network. Your data may be processed in any country where Cloudflare operates. Cloudflare maintains appropriate safeguards for international data transfers, including Standard Contractual Clauses.
We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-app notification. The "Last updated" date at the top reflects the most recent revision.
For privacy questions, data requests, or concerns:
Vaultica LLC Email: privacy@rpgshadowrealms.com
For general support: support@rpgshadowrealms.com