Privacy Policy

What we collect

Account details. If you sign in, you do so with Google or Facebook. We receive and store your name, your email address (where your provider shares one) and your provider account identifier through our authentication provider, Supabase. We never see or store a password, and we never receive your friends, posts or anything else from your social account.

Adventures and gameplay. When you play Explore With Your Ancestors we store the adventures you create: the clan, year and place you chose, the messages you write, the story the chronicler writes back, any scene images generated, and your Clan Coin balance and its history.

Payments. Purchases are processed by Stripe. We store a Stripe customer reference and your subscription status. Your card details go to Stripe directly and never touch our servers.

Submissions. If you submit or correct a family record, or register interest, we store what you send us along with the email address you provide.

Usage. We use Google Tag Manager and analytics cookies to understand how the site is used in aggregate, and session cookies to keep you signed in.

How we use it

To run the service: keeping you signed in, saving your adventures so they are there when you return, keeping an accurate coin ledger, fulfilling purchases, and answering submissions. We also use aggregate usage data to improve the site. We do not sell personal data, and we do not use your data for advertising.

AI processing. The stories and scene images in Play As Your Clan are generated by third-party AI models (currently from OpenAI and Anthropic). The messages you write in an adventure, together with your chosen setting, are sent to those providers to generate the next part of the story. We do not use your content to train models.

Google and Facebook user data. The account information we receive from your sign-in provider (name, email) is used only to create and identify your account. It is never shared beyond the service providers listed below, never sold, and never used for advertising.

Who we share it with

Only the providers that run the service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Google (sign-in and analytics), Meta (Facebook sign-in), and OpenAI / Anthropic (story and image generation). Each receives only what it needs to do its job. We never sell or rent personal data to anyone.

How long we keep it

For as long as your account exists. If you ask us to delete your account, we delete your profile, adventures, messages, generated images and coin ledger. Records we are legally required to keep (such as payment records) are retained for the required period only.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Send any of these requests through the contact form from the email address on your account, and we will act on it within 30 days. If you are in the UK or EU, these rights are backed by the UK and EU GDPR, and you also have the right to complain to your data protection authority.

Deleting your data

You can have your account and everything attached to it deleted at any time, your profile, adventures, messages, generated images, reconstructions and coin ledger. To request deletion, send a message through the contact form saying you want your account deleted, including the email address or the name on the account so we can find it. We will confirm and complete the deletion within 30 days. Records we are legally required to keep (such as payment records) are retained for the required period only.

If you signed in with Facebook, removing Clan Rising from your Facebook account’s Apps and Websites settings stops any future access, but does not delete the data we already hold, use the request above for that.

Children

The stories are written to be family-friendly, but accounts are not directed at children under 13 and we do not knowingly collect their data. Signing in requires a Google or Facebook account that meets that provider’s own age requirements.

Changes

If this policy changes in a way that matters, we will update the effective date above and note the change on this page. Questions about any of it are welcome through the contact form.