Chronicles of Terros (“we”, “us”, “our”) is based in England. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website and services at chroniclesofterros.com, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.
The data controller responsible for your personal data is:
Chronicles of Terros
Email: support@chroniclesofterros.com
When you create an account, we collect:
When you play Chronicles of Terros, we store:
Payments are processed by Stripe. We do not store your full card number, CVV, or bank details. Stripe provides us with:
If you join the waitlist or express interest in the Charter Adventurer programme, we collect:
When you visit our website, our hosting provider (Vercel) may automatically collect:
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Providing and maintaining the game service | Performance of contract (Art. 6(1)(b)) |
| Processing payments | Performance of contract (Art. 6(1)(b)) |
| Sending transactional emails (purchase confirmations, chronicle delivery) | Performance of contract (Art. 6(1)(b)) |
| Sending development updates (if opted in) | Consent (Art. 6(1)(a)) |
| Generating AI-driven narrative content based on your game actions | Performance of contract (Art. 6(1)(b)) |
| Compiling your Chronicle Book from gameplay data | Performance of contract (Art. 6(1)(b)) |
| Applying age-appropriate content safeguards for players under 18 | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
| Preventing fraud and abuse | Legitimate interest (Art. 6(1)(f)) |
| Improving the service and fixing bugs | Legitimate interest (Art. 6(1)(f)) |
Chronicles of Terros uses Google Gemini (via Google Cloud) to generate narrative content — descriptions, dialogue, and story events. Your gameplay actions and character data are sent to this AI service as prompts to produce personalised narrative responses.
Important: All game mechanics (combat, HP, spell slots, dice rolls) are calculated by our deterministic code engine, not by AI. The AI generates narrative text only. Your game state is never directly modified by AI output.
Your date of birth is used to apply hardcoded content safeguards for players under 18. These safeguards automatically filter graphic violence, sexual content, substance abuse depictions, and self-harm themes from AI-generated narrative before it reaches the player. This filtering is enforced at the code level and cannot be overridden by the AI. Your date of birth is not shared with third parties and is used solely for this purpose.
Google’s AI services process data under their own data processing terms. We do not use your gameplay data to train AI models. Prompts are processed in real time and not retained by Google beyond the request lifecycle.
| Service | Purpose | Data Shared |
|---|---|---|
| Google Firebase | Authentication, database, hosting | Email, account data, game state |
| Google Gemini AI | Narrative generation | Game context, character data, player actions (as prompts) |
| Stripe | Payment processing | Email, payment method details |
| Vercel | Website hosting and deployment | IP address, access logs |
| Resend | Transactional email delivery | Email address, email content |
Each third-party service operates under its own privacy policy and data processing agreements. We only share the minimum data necessary for each service to function.
We use the following cookies:
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not sell or share cookie data with advertisers.
We implement appropriate technical and organisational measures to protect your data, including:
No method of electronic storage or transmission is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
Under the UK GDPR, you have the right to:
To exercise any of these rights, contact us at support@chroniclesofterros.com. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Your data may be transferred to and processed in countries outside the United Kingdom, including the United States (where Google Cloud and Stripe are headquartered). These transfers are protected by:
Chronicles of Terros is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.
We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we will notify registered users by email.
Your continued use of the service after changes are posted constitutes acceptance of the updated policy.
For any questions about this privacy policy or your personal data, contact:
Chronicles of Terros
support@chroniclesofterros.com