Privacy Policy

Herald.ink ("Herald", "we", "us") is an AI-assisted campaign management tool for tabletop role-playing games, run by a solo independent developer. This policy explains what personal data we collect, why we collect it, and the choices you have. We keep it deliberately short and plain.

Who is responsible for your data

Herald is operated by its sole developer as the data controller. For any privacy question or request, write to [email protected].

What we collect

• Account information. When you sign up we store your email address, display name, and avatar. Authentication is handled by our identity provider, Clerk, which manages your credentials — Herald never sees or stores your password.
• Campaign content. The worlds you build — NPCs, monsters, locations, factions, lore, quests, notes, images, and the prompts you write to generate them — are stored so your tome persists between sessions.
• Usage records. We record generation activity (such as token counts) to enforce plan limits and to keep the service running.
• Billing information. If you subscribe to a paid plan, payment is processed by our payment provider. We receive confirmation of your subscription and plan tier, but we do not store your full card details.
• Technical data. Standard server logs (IP address, browser type, timestamps) generated when you use the service, kept for security and debugging.

How we use it

• To provide the service — store your campaigns and generate content on request.
• To authenticate you and secure your account.
• To enforce plan limits and process subscriptions.
• To operate, debug, and improve Herald.
• To contact you about your account or material changes to the service.

We do not sell your personal data, and we do not use your private campaign content to train our own models or advertise to you.

AI processing

When you generate content, the prompts and relevant campaign context you provide are sent to third-party AI providers (via OpenRouter, including model providers such as Anthropic for text and Google for images) solely to return the generated result to you. These providers process the data as our subprocessors. We do not permit your content to be used to train their models where that option is available to us.

Who we share it with

We share data only with the service providers that make Herald work, acting on our behalf:

• Clerk — authentication and account management.
• OpenRouter and its model providers — AI text and image generation.
• Scaleway — cloud hosting and storage (data hosted in the EU).
• Cloudflare — content delivery, DNS, and security.
• A payment processor — for paid subscriptions.

We may also disclose data if required by law, or to protect the rights and safety of Herald and its users.

Where your data lives

Herald's data is hosted in the European Union. Some subprocessors may process data outside the EU; where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account and campaign content for as long as your account is active. If you delete your account, we delete your personal data and campaign content, except where we are required to retain certain records (for example, billing records) by law. Backups are rotated on a regular schedule.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with your local data protection authority.

Children

Herald is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy as Herald evolves. When we make material changes we will update the date above and, where appropriate, notify you. Continuing to use Herald after a change means you accept the revised policy.

Contact

Questions about privacy? Write to [email protected].

See also our Terms of Service.