QuestMaster
These pages are provided for transparency and are a good-faith template, not legal advice. Questions? Reach out.

Privacy Policy

Last updated: June 15, 2026

Summary

QuestMaster, operated by Ascended Entertainment, collects the minimum needed to run your account and your campaigns. We do not sell your data, we do not run third-party advertising trackers, and you can export or permanently delete everything from your account settings at any time.

1. What we collect

  • Account data. Your email address and, if you set one, a display name. Authentication is handled by our provider (Supabase Auth); if you sign in with a third party, we receive your email and basic profile from them.
  • Your campaign content. The campaigns, worlds, modules, characters, NPCs, notes, encounters, and similar material you create, plus files you upload (maps, character portraits, item and scene images, generated continent maps).
  • Billing data.If you subscribe, our payment processor handles your card details. We never see or store full card numbers; we keep your plan, status, and the processor’s customer reference.
  • AI provider keys. If you bring your own AI key, we store it encrypted (AES-256-GCM) and never expose the plaintext to the browser. We keep a non-sensitive hint (the last few characters) so you can recognize it.
  • Operational data. Basic logs and error reports needed to keep the Service running and secure.

2. How we use it

  • To provide, maintain, and secure the Service and your account.
  • To store and display your campaigns and uploaded files back to you.
  • To process subscriptions and prevent fraud or abuse.
  • To send service messages (for example, important account or security notices), and marketing email only where you consented.
  • To respond to your support and feedback requests.

We do not use Your Content to train our own models, and we do not sell or rent your personal information to anyone.

3. AI providers and your prompts

AI features are optional. When you use them with your own provider key, the prompts and the relevant campaign content are sent to the AI provider you chose (for example, Anthropic, OpenAI, or Google) so they can return a result. That processing is governed by that provider’s terms and privacy policy. We pass through only what is needed for the request and do not retain a separate copy beyond what is saved as part of your campaign.

4. Who we share with

We share data only with the service providers that make QuestMaster work, and only as needed:

  • Hosting and database (Supabase, Vercel).
  • Payment processing (our payment provider), when you subscribe.
  • The AI provider you choose, when you use AI features.
  • Error and uptime monitoring, to keep the Service reliable.

We may disclose information if required by law, or to protect the rights, safety, and security of QuestMaster, our users, or the public.

5. Storage and security

Files you upload are stored in access-controlled buckets; private assets (such as battle maps and continent maps) are served only through short-lived signed URLs. AI keys are encrypted at rest. No system is perfectly secure, but we take reasonable measures to protect your data.

6. Data retention

We keep your account and campaign data for as long as your account is active. When you delete your account, we permanently remove your campaigns, uploaded files, AI keys, and account record (see your rights below).

7. Your rights and controls

  • Export. Download a full copy of your account and campaign data as JSON from Account › Security.
  • Deletion. Permanently delete your account, campaigns, and uploaded files from the same place. Deletion is immediate and irreversible.
  • Marketing opt-out. Withdraw marketing consent at any time by emailing us or using the unsubscribe link.
  • Access and correction. Update your profile in your account settings, or contact us for help with any other request.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. Email us and we will honor applicable requests.

8. Children

QuestMaster is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

9. Changes

We will update this policy as the Service changes and revise the “last updated” date above. Material changes will be highlighted in-app or by email where appropriate.

10. Contact

Privacy questions or requests? Email questmaster@ascendedent.com.