Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how Sagarium ("we") collects, uses, and protects your information when you use Sagarium (the "Service").

1. Information we collect

Account data: username, email, and hashed password.
Content you create: campaigns, wiki articles, characters, notes, and related data.
Billing data: handled by Stripe; we store your Stripe customer/subscription identifiers and plan, but not full card numbers.
Usage & technical data: log data, device/browser information, and cookies necessary to operate the Service.

2. How we use information

To provide and maintain the Service, authenticate you, process payments, enforce plan limits, communicate about your account, provide support, and keep the Service secure. We do not sell your personal information.

3. Service providers

We share data with processors that help us run the Service, including Vercel (hosting), Neon (database), Stripe (payments), and Resend (email). These providers process data on our behalf under their own terms and safeguards.

4. Data retention

We retain your data while your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where we must retain records to comply with legal, tax, or accounting obligations.

5. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can export or delete your data from your account settings, or contact us at privacy@sagarium.io.

6. Security

We use reasonable technical and organizational measures to protect your data, including encryption in transit and hashed passwords. No method of transmission or storage is completely secure.

7. International transfers

Your data may be processed in the United States and Canada. Where required, we rely on appropriate safeguards for cross-border transfers.

8. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect their personal data.

9. Changes

We may update this Policy and will post the new effective date. Material changes will be communicated where required.