Who receives data

Below is everyone who receives data, as of the date above. Beyond them, nobody: no mailing lists, no ad networks, no error-reporting service, and no analytics other than what is in the list.

Anthropic

Purpose	Runs the game — powers the Game Master
What is sent	On every turn: your line, several preceding lines and a short recap of what happened earlier in the session — together with campaign state: character, equipment, location, people you know, missions, promises made
What is not sent	Email, or any other account identifier
Training on the data	No — paid tier, terms exclude it
Data processing agreement	Accepted 21 July 2026

This is the most substantive exchange in the list: what you wrote is exactly what goes. Otherwise the game would be impossible — the Game Master would have nothing to answer with.

Google

Purpose	Draws portraits and location art (Gemini)
What is sent	A description of the picture: terrain, time of day, weather, mood — or the character's appearance for a portrait
What is not sent	Email, campaign id, character name, and your lines
Training on the data	No — paid tier
Data processing agreement	Accepted 21 July 2026

Microsoft — Clarity

Purpose	Shows where the interface is awkward
When	Only if you allowed it. Until you press "Allow" the script does not load at all — "not asked" counts as "refused"
What is sent	Clicks, scrolling, window size, browser errors — and the page layout without text
What is not sent	Any text from the page: your lines, the Game Master's replies, the character's name, your email
Data processing agreement	Accepted 21 July 2026

Recordings like this normally capture the whole page, which for this game would mean sending Microsoft everything you typed. So the text is masked in the browser itself, before sending: what leaves is the shape of the page, not its content. This is not a setting in someone else's dashboard that could be quietly flipped — it is markup on our own page, and the build carries a check that stops the mask being removed by accident.

Cloudflare

Purpose	Hosts the site and carries requests to the game
What is sent	What any intermediary on the network sees: request address, IP, browser type
Data processing agreement	Accepted 21 July 2026

SMTP2GO

Purpose	Sends the invitation email when your request is approved
When	Only if you submitted a signup request through the form and it was approved. If you simply play, your address never reaches it
What is sent	Your address and the invitation itself
What is not sent	Nothing from the game: no campaigns, no lines, no character name
Where the data is	A European data centre (Amsterdam)
Data processing agreement	Accepted 27 July 2026

The company is in New Zealand, which the European Commission has recognised as providing an adequate level of data protection — so your address travelling there needs no separate legal construction, unlike a transfer to the United States.

The invitation is written by the game and sent automatically. There are no mailings of any other kind: no newsletter, no announcements, nothing you would need to unsubscribe from.

Apple

Purpose	The mailbox that receives your letters and replies to them — [email protected] and anything you write to it
When	Only if you write to us, or replied to an earlier letter. Invitations no longer go through here
What is sent	The address you wrote from and the message itself — as in any ordinary correspondence
What is not sent	Nothing from the game: no campaigns, no lines, no character name
Data processing agreement	Accepted 21 July 2026

Correspondence here is written by a person, one letter at a time. Until 27 July 2026 this mailbox also carried invitations by hand; that is now done by SMTP2GO, above.

Where all of it lives

The game itself and the database run on a home server, not in a cloud. Only what is listed above leaves it.

> Keeping this list current is enforced outside the document — see #243.