Privacy Policy

Effective date: July 26, 2026

This Privacy Policy explains how Dun-Gen (“Dun-Gen,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use our website, applications, and related tabletop role-playing game services.

By using Dun-Gen, you acknowledge the practices described in this policy.

1. Information we collect

We may collect the following categories of information:

Information you provide

• Account and contact information you provide to us.
• Prompts, instructions, preferences, and other content submitted when using Dun-Gen’s creative or AI-assisted features.
• Communications you send to us, including support requests and feedback.

Authentication information

If you sign in using Google or Microsoft, the identity provider may provide us with information associated with your account, such as:

• A stable account identifier.
• Your email address.
• Your name and profile image, when made available.
• The identity provider and token issuer.
• Portable interface preferences such as studio lighting, text size, and Wiki interaction choices. Device-specific layout dimensions stay on that device.

Dun-Gen uses this information to authenticate you, associate you with your Dun-Gen account, prevent duplicate accounts, and protect the service from unauthorized access.

Authentication tokens are sent to our backend for validation. We verify their signatures and relevant security claims before trusting the identity information they contain. We do not rely on merely decoding a token.

Payment information

Payments are processed by Stripe. Dun-Gen may receive transaction identifiers, payment status, subscription or purchase information, and related event data from Stripe.

Dun-Gen does not directly receive or store your complete payment-card number or card security code.

Technical and usage information

We and our service providers may process technical information such as IP address, browser and device information, request timestamps, diagnostic logs, security events, and interactions with Dun-Gen features.

Optional bug reports

If you choose to submit an in-app bug report, Dun-Gen sends only the fields shown on the report review screen: your description, optional contact email, optional screenshot, and the listed version, view, browser, operating system, viewport, connectivity, and correlation ID. Dun-Gen does not automatically add campaign content, authentication tokens, cookies, API keys, email content, or unrelated logs.

2. How we use information

We use information to:

• Create, authenticate, and manage user accounts.
• Provide Dun-Gen’s tabletop role-playing game services.
• Process user requests and generate requested content.
• Process purchases, credits, and payment events.
• Prevent fraud, abuse, and unauthorized access.
• Diagnose errors and maintain service reliability.
• Respond to support requests and communications.
• Comply with applicable legal obligations.

3. Google user data

Dun-Gen accesses Google user data only to provide authentication and account-related functionality requested by the user.

We do not use Google user data to:

• Serve targeted or personalized advertising.
• Sell information to data brokers or information resellers.
• Determine creditworthiness or make lending decisions.
• Train generalized or non-personalized AI or machine-learning models.

We do not intentionally send Google ID tokens or Google profile information to AI service providers used to generate content.

Optional Google Drive sync

If you explicitly connect campaign sync while signed in with Google, Dun-Gen requests the limited Google Drive application-data permission. Your browser writes a Dun-Gen library file directly to the private, hidden application-data folder in your Google Drive. The sync file is not sent to or stored by Dun-Gen’s servers, and this permission does not allow Dun-Gen to access unrelated Drive files.

Dun-Gen’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including its Limited Use requirements.

4. AI-assisted features

When you use an AI-assisted feature, the prompts, instructions, and related content needed to fulfill your request may be sent to one or more third-party AI service providers. These may include providers of models, inference, routing, embeddings, search, optical character recognition, transcription, moderation, and related services.

We use this information to generate the result you requested, operate the feature, detect abuse, and troubleshoot service failures. You should not submit sensitive personal information that is unnecessary for your request.

The providers, models, and routing used by Dun-Gen may change without advance notice. We do not publish a current provider list or backend routing details unless disclosure is required by applicable law. A provider change does not expand the purposes described in this policy.

5. Optional user-owned cloud sync

Campaign cloud sync is optional. When you connect it, your browser stores the complete campaign library in the private application folder supplied by the identity provider you selected: Google Drive or Microsoft OneDrive. Campaign notes, artwork, cards, Folios, maps, and standees travel directly between your browser and that provider. Dun-Gen’s servers do not receive or store the sync payload.

Dun-Gen stores limited sync metadata on your device, such as the provider, last synchronized content hash, provider file revision, and last sync time. Stopping sync removes that local connection metadata but does not delete your provider copy.

6. How we share information

We do not sell your personal information. We may share limited information with service providers that help us operate Dun-Gen, including:

• Cloudflare, for application hosting, networking, security, and database services.
• Google and Microsoft, for user authentication and, only when you enable it, direct storage in your private provider app folder.
• Stripe, for payment processing.
• AI service providers, when necessary to provide an AI-assisted feature you choose to use.

We may also disclose information when reasonably necessary to comply with law, enforce our agreements, investigate abuse, protect users, or defend the rights and security of Dun-Gen and others.

If Dun-Gen is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

7. Data retention and deletion

We retain personal information only for as long as reasonably necessary to provide the service, maintain security, resolve disputes, meet legal obligations, and enforce our agreements.

Account identifiers and associated service data may be retained while your account remains active. Payment and transaction records may be retained for longer periods when required for accounting, fraud prevention, or legal compliance.

Submitted bug reports and screenshots are kept in a private maintainer inbox and scheduled for automatic deletion after 30 days. Automated cleanup runs every 30 minutes, and reports may be deleted sooner after triage. Draft reports remain only in your browser until you explicitly submit or remove them; they are not included in campaign cloud sync.

You may request deletion of your Dun-Gen account and associated personal information by contacting us at dungenttrpg@gmail.com. We may retain limited information when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or enforcing our agreements.

8. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information. These measures may include encrypted network connections, access controls, secured credentials, token-signature validation, and restricted database access.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Cookies and local storage

Dun-Gen may use cookies, browser storage, or similar technologies that are necessary for authentication, security, preferences, and core application functionality. We do not use Google authentication data for targeted advertising.

10. Children’s privacy

Dun-Gen is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

11. International processing

Dun-Gen and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws.

12. Changes to this policy

We may update this Privacy Policy as Dun-Gen changes. We will post the revised policy on this page and update the effective date. If a change materially affects how we use previously collected information, we will provide additional notice when required.

13. Contact us

For privacy questions, requests, or concerns, contact:

Dun-Gen
Email: dungenttrpg@gmail.com