Privacy Policy

Last Updated: September 2026

1. Introduction & Scope

VatisNode ("we", "our", or "us") is dedicated to safeguarding your personal information and privacy rights. This Privacy Policy outlines how we collect, process, utilize, and protect your personal information when you use our interactive AI D20 Tabletop Role-Playing Games (TRPG), and AI Murder Mystery platform.

By accessing or playing on our platform, you acknowledge that you have read and understood the practices described in this policy.

2. Information We Collect

We collect only the minimum data required to deliver real-time interactive storytelling, ensure game security, and manage your account:

  • Account & Profile Information: Email address, external OAuth authentication identifiers (e.g., Google or Discord login identifiers), unique user IDs, and chosen display nicknames.
  • Interactive Gameplay & Story Data: User prompts, in-character dialogues, game choices, dice roll histories, inventory states, and murder mystery deduction logs.
  • Transactional & Billing Records: Records of Credits purchases, subscription tiers, transaction timestamps, and order reference numbers. (Note: We never process or store full debit/credit card numbers or CVV codes on our servers.)
  • Technical & Telemetry Data: IP addresses, browser types and versions, operating systems, language preferences, device screen resolutions, and server access log timestamps.

3. How We Use Your Information

Your data is processed strictly for the following operational and safety purposes:

  • Interactive Story Execution: Feeding scenario context and dialogue choices into our AI engine to generate continuous GM storytelling, NPC replies, and clue discovery.
  • Account & Balance Management: Maintaining your active session, tracking virtual Credits consumption.
  • Safety, Moderation & Anti-Abuse: Enforcing our Acceptable Use Policy, intercepting unauthorized prompt injection attempts, preventing NSFW/illicit content generation, and safeguarding system integrity.
  • Product Quality: Analyzing platform performance, resolving narrative engine bugs, and monitoring latency across client-server pipelines.

4. AI Processing, Sub-processors & Third-Party Disclosure

To power our generative fiction engines, we share limited, necessary data with vetted third-party service providers (Sub-processors):

  • AI Model Providers: Your game prompts, interaction history, and contextual variables are securely transmitted to large language model (LLM) API providers solely to generate real-time gameplay responses. We do not sell your narrative inputs, nor do authorize third-party LLM providers to use your private game logs to train public AI foundation models.
  • Payment Gateways: All payments are processed via PCI-DSS compliant payment gateways (such as Creem). Financial billing information is tokenized and processed directly by them under their respective privacy protocols.
  • Analytics & Hosting Infrastructure: We utilize trusted cloud infrastructure (e.g., Cloudflare, cloud storage providers) for asset delivery and security firewalls, as well as aggregated analytical tools (such as Google Analytics) to assess traffic performance using pseudonymized metrics.
  • Legal Compliance: We may disclose information if required by a valid court order, subpoena, or to defend against legal liabilities and system exploitation.

5. Cookies, Local Storage & Session Data

We prioritize lightweight and transparent storage. We do not use intrusive cross-site ad trackers. We utilize standard browser local storage (localStorage) and essential session cookies solely for:

  • Authentication Persistence: Storing authorized tokens (e.g., portal_token) to keep you signed in seamlessly across gameplay sessions.
  • User Preferences: Remembering UI configurations, volume levels, and selected language locales (e.g., English, French, German, Spanish, Japanese).
  • Referral Routing: Preserving referral parameters (ref) to accurately credit bonus to you and your referring fellow adventurers.

6. Data Retention and Security Measures

  • Retention Periods: Gameplay chronicles, chat dialogues, and account data are retained for as long as your account remains active. If you choose to delete your account or specific campaign archives, associated narrative logs are purged from our live databases within 30 days, subject to routine encrypted backup lifecycles.
  • Security Safeguards: We employ industry-standard security protocols, including HTTPS/TLS 1.3 encryption in transit, strict database access controls, API authentication tokens, and real-time firewall filtering to protect against unauthorized data interception.

7. Your Privacy Rights (GDPR, CCPA & Global Users)

Depending on your geographic jurisdiction, you hold specific legal rights regarding your personal data:

  • Right of Access & Portability: You may request a copy of the personal data we hold about your account and gameplay history.
  • Right to Rectification: You may request corrections to inaccurate personal details associated with your profile.
  • Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account and all associated campaign logs at any time.
  • Right to Restrict or Object: You can object to certain data processing activities, including automated telemetry analysis.

To exercise any of these rights, please contact our privacy desk at the email address provided below.

8. Children's Privacy (COPPA Notice)

Our interactive narrative services are strictly intended for individuals aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 18 (or the applicable age of digital consent in your territory). If we learn that personal data of a minor has been gathered without verified parental consent, we will promptly delete that information and terminate the associated account.

9. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect technical upgrades, adjustments to our AI models, or evolving legal requirements. Material modifications will be signaled by updating the "Last Updated" date at the top of this document. Continued use of our narrative services after updates constitutes acceptance of the revised policy.

10. Contact Us

If you have inquiries, feedback, or wish to submit a data erasure request under applicable privacy statutes, please contact us at:

Privacy Desk Email: vatisnode@gmail.com