Privacy Policy for RuleScroll
This Privacy Policy governs how the RuleScroll project ("Project", "We", "Us") collects, uses, maintains, and discloses information from users (each, a "User") of the rulescroll.studio website ("Site") and the RuleScroll Telegram Bot ("Bot"). The Site and the Bot together are the "Services".
1. Personal Identification Information
Through Site forms, we collect information you voluntarily submit:
- Email address;
- Telegram username;
- Brief description of your TTRPG scenarios (optional, for content creators).
When you use the Bot, we also process technical and game data required to operate the service:
- Telegram User ID and Chat ID;
- Game states, inventories, and related campaign records;
- User-generated game content and prompts (messages, character actions, scene descriptions).
2. How We Use Collected Information and Legal Bases
We process personal data only for the purposes below and on the following GDPR Article 6 legal bases:
- Waitlist and communications (alpha/beta registration, player and creator waitlists, project updates) — consent (Art. 6(1)(a)), given when you tick the consent checkbox on a Site form.
- Game engine and Bot (running a session, storing campaign state, generating game-master responses) — performance of a contract (Art. 6(1)(b)): providing the game service you requested.
- Site analytics (Section 4) — consent via the cookie notice and/or legitimate interest (Art. 6(1)(f)) in understanding how to improve the Services.
3. Data Storage and Protection
We adopt appropriate collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information.
- Data Infrastructure: Collected data is processed and stored on servers leased from Hetzner Online GmbH (Germany).
- Retention: Waitlist data is kept until you request deletion, until the testing program ends, or for 12 months — whichever comes first. Game state logs, inventories, and campaign history are retained for 12 months to maintain play continuity, unless you request earlier deletion.
4. Analytics and Cookies
To understand how visitors use the Site and to improve the product, we use third-party web analytics services that may set cookies and collect anonymized technical data (device and browser type, referral source, UTM parameters, on-page actions):
- Yandex.Metrica (Yandex LLC) — traffic and source statistics;
- Cloudflare Web Analytics (Cloudflare, Inc.) — privacy-friendly, cookie-less statistics.
These services act as independent operators and process data in accordance with their own privacy policies. Recording of form field contents (Webvisor) is disabled. You may opt out of analytics cookies via your browser settings or relevant browser extensions.
5. Sharing Your Personal Information
We do not sell, trade, or rent personal identification information (email, Telegram username, Telegram User ID) to third parties for marketing or other commercial purposes. This data is only accessible to internal technical services that operate the Services and maintain the Project database. The analytics services in Section 4 process only anonymized behavioral data and have no access to form contents.
AI processing: To deliver the core product experience, user text inputs, character states, and game prompts are processed via third-party artificial intelligence API providers (including OpenAI and Anthropic). We do not share personal identification information (emails, Telegram tags, User IDs) with AI providers. Your game data is processed strictly to generate game responses and is not used to train third-party AI models.
6. Your Rights and Data Erasure
If you are a resident of the European Economic Area (EEA) or any other jurisdiction with data privacy laws, you have the right to access, correct, withdraw waitlist consent, or request the permanent deletion of your personal information at any time.
To request removal of your data or if you have questions about this Privacy Policy, contact us:
- Email: rulescroll@gmail.com
We pledge to process your data deletion request within 48 hours of receipt.
7. Children's Privacy
The Services are not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact rulescroll@gmail.com for deletion.
8. Changes to This Privacy Policy
We have the discretion to update this privacy policy at any time as the Project evolves. When we do, we will revise the updated date at the top of this page.