Privacy Policy

This policy explains what personal data Inkroll collects, why, and your rights. Inkroll is operated by Blue Worlds Inventions Ltd, a company registered in Mauritius (UHY House, 71 Impasse Saipan, 80829 Moka), which is the data controller. Contact: support@inkroll.gg.

We aim to handle personal data in line with the Mauritius Data Protection Act 2017 and, where applicable, the EU GDPR and UK GDPR.

1. What we collect

You give us:

• Account details: email address, display name, password (kept only as a secure hash), and an optional profile image.
• Content you create: posts, characters, character sheets, dice rolls, campaign settings, and images you upload.
• Invitations: email addresses you enter to invite players.
• Waitlist sign-ups: if you ask to be notified before we open, the email address you submit, and optionally which plan you were interested in.
• Reports: if you report content or conduct, the report you send us (the reason, any note you add, and, for a report you make without signing in, an email address you choose to give us).
• Optional integration credentials: if you use the Myth-Weavers importer or Discord/Matrix notifications, the login or access token you provide. These are stored encrypted and used only to run that feature.

Collected automatically:

• Sign-in and session data: IP address, browser/device (user agent), and timestamps, used for security and to keep you signed in.
• Basic activity such as last-seen time.
• AI usage records (token counts and cost) when you use Chronicle features, used for billing and quotas.

We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics. Inkroll sets one essential session cookie to keep you signed in. Your browser may also store post drafts and interface preferences locally on your device.

Payment data: paid plans are sold by Paddle, our Merchant of Record. Paddle collects and processes your payment details; we never receive or store your full card number. We receive limited information such as your subscription status, billing country, and the card brand and last digits. Paddle's own privacy notice and buyer terms apply to the payment and billing data it processes.

Inkroll is designed for fictional tabletop roleplaying content, not for storing sensitive real-world personal data. Please do not upload government IDs, financial information, medical information, private real-world records, or sensitive information about other people unless you have a lawful reason and their permission. This matters especially because campaign content can be sent to optional AI features.

2. Why we use it, and our legal bases

• To provide the Service and your account: performance of a contract.
• To process subscriptions through Paddle: performance of a contract, and a legal obligation for tax and accounting records.
• To keep the Service secure, prevent abuse, and moderate content: our legitimate interests and legal obligations.
• To send essential service emails (verification, password reset, security notices, invitations): performance of a contract or our legitimate interests.
• To send optional notifications or marketing emails, where offered: your consent, which you can withdraw at any time.
• To add you to our launch waitlist and email you when Inkroll opens, if you ask us to: your consent, which you can withdraw at any time.
• To run optional features you choose, such as AI Chronicle, imports, or notifications: performance of a contract, our legitimate interests in providing features you request, and your consent where required.
• To comply with the law, including reporting illegal content where required: a legal obligation.

3. AI (Chronicle) features

If you use Chronicle features, the relevant campaign text you choose to process (posts, character descriptions, campaign notes, questions, and prompts) is sent to our AI provider, OpenAI, to generate summaries, recaps, or answers. We send only what the feature needs; we do not send your password, full payment details, or unnecessary account data. OpenAI states that content submitted through its API is not used to train or improve its models unless the customer opts in, though API abuse-monitoring logs may be retained for a limited period under OpenAI's platform rules. AI portrait generation is off by default and is not part of the standard product. We will note any material change of AI provider or AI data use in this policy.

4. Content moderation and safety

We keep Inkroll safe without surveilling your games. We do not routinely read private campaign content. We act mainly on user reports, and we may use automated tools and human review to detect and remove illegal content, abuse, or serious violations of our Terms. When you report content, we record your report so we can review it, act on it, and tell you the outcome, and we keep these records to handle reports and prevent repeat abuse; we do not disclose your identity to the person you reported. Where we become aware of child sexual abuse material, we remove it, preserve the records we must, and report it to appropriate authorities or recognised reporting bodies where legally required or permitted. We are not required to, and do not promise to, proactively scan all content.

5. Processors, payment provider, and third-party services

We share personal data only as needed to run Inkroll:

We do not sell your personal data.

6. International transfers

Inkroll is currently hosted on OVHcloud infrastructure in the European Union. Because we are based in Mauritius, account administration and support may take place from Mauritius. Some providers, such as Paddle, OpenAI, our email provider, and connected third-party services, may process data in other countries. Where required, we rely on appropriate safeguards such as data-processing agreements, standard contractual clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful transfer mechanisms.

7. How long we keep it

• Account data: kept while your account is open. After you close your account, we delete or anonymize your personal data within a reasonable period (we aim for 30 days), unless we need to keep some of it longer for security, legal, tax, billing, dispute, or abuse-prevention reasons.
• Campaign content: kept while the campaign exists. Because a campaign is a shared record co-authored with other members, contributions you made may be retained as part of that campaign's history after you leave; in that case we remove or anonymize your personal data (such as your name) rather than destroy the shared record, unless the law requires full deletion.
• Invitations: kept until the invitation is accepted, cancelled, or expires.
• Waitlist sign-ups: kept until we open and notify you, or until you ask us to remove you, whichever comes first, after which we delete them.
• Backups: deleted content may remain in routine backups until they are rotated out, after which it is overwritten.
• Security and sign-in logs: kept for a limited period for security and abuse-prevention, and longer only where needed to investigate an incident or meet a legal obligation.
• Billing and subscription records: kept as long as needed for accounting, tax, refund, chargeback, and legal purposes.

8. Security

We use encryption in transit, hashed passwords, encrypted storage for integration credentials, and access controls. No system is perfectly secure, but we take reasonable measures and will notify you and the regulator of a personal data breach where the law requires.

9. Your rights

You can access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent at any time. You can edit your profile and content and delete your account directly from the danger zone in your profile settings. To request a copy (export) of your personal data, or to exercise any other right, email support@inkroll.gg and we will respond within 30 days; we may need to verify your identity before we act on a request. For content you contributed to a shared campaign, we may fulfil a deletion request by anonymizing your contributions rather than removing the whole campaign record. You may also complain to the Mauritius Data Protection Office, or, if you are in the EU or UK, your local data protection authority. You may also complain to the Mauritius Data Protection Office, or, if you are in the EU or UK, your local data protection authority.

10. Children

Inkroll is not directed to children under 13, and users under 13 may not create accounts. If you are under the age at which parental consent is required in your country, you may use Inkroll only with the involvement and consent of a parent or guardian. If we learn that we have collected personal data from a child under 13 without appropriate consent, we will delete it. Contact support@inkroll.gg with any concern.

11. Changes and contact

We may update this policy and will change the date above; we will flag material changes. Questions or requests: Blue Worlds Inventions Ltd, support@inkroll.gg.