Privacy Policy

Last updated: April 2026  ·  Effective: April 2026

1. Overview

Runebook (runebook.study) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We believe in being straightforward: we collect the minimum data needed to run the service, we never sell your data, and we never use your notes or files for AI training.

2. Information We Collect

Information You Provide

Information Collected Automatically

Information We Do NOT Collect

3. How We Use Your Information

We use the information we collect to:

We do not use your information for advertising, and we never sell your personal data to any third party.

4. Your Uploaded Files

Your uploaded notes and photos are NOT stored on our servers. When you upload a file, it is processed in real time to generate your dungeon and then immediately discarded. It is never shared with other users, never used to train AI models, and never stored beyond the moment of generation.

5. Third-Party Services

Supabase

We use Supabase to store your account information, hero data, dungeon progress, and achievements. Your data is stored securely in the United States.

Anthropic (Claude AI)

We use Anthropic's Claude AI to generate dungeon content from your uploaded notes. Anthropic does not use customer data submitted via the API to train their models.

Stripe

All payment processing is handled by Stripe. We never see or store your payment card details. Stripe is PCI-DSS compliant. See Stripe's privacy policy.

Google Analytics

We use Google Analytics to understand how users interact with the app. This data is aggregated and anonymized. You can opt out via the Google Analytics opt-out browser add-on.

GitHub Pages & Vercel

Our app is hosted on GitHub Pages and our API proxy runs on Vercel. These services may collect standard server logs including IP addresses for security and performance purposes.

6. Cookies

Runebook uses minimal cookies:

We do not use advertising cookies or tracking pixels.

7. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days.

8. Your Rights

You have the right to:

To exercise any of these rights, email us at support@runebook.study. We will respond within 30 days.

9. Children's Privacy (COPPA)

Runebook is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@runebook.study and we will promptly delete it.

10. Data Security

We take reasonable measures to protect your personal information, including:

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice in the app. The date at the top of this document reflects the most recent update.

12. Contact Us

Email: support@runebook.study
Website: runebook.study

This Privacy Policy was written to be clear and readable. If anything is unclear, please reach out — we're happy to explain.