Last updated: June 19, 2026
ScrollWright Studios ("we," "us," or "our") operates Inkwright Engine (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.
When you create an account, we collect your email address and a securely hashed password (we never see or store your plaintext password — authentication is handled by our database provider, Supabase).
We store your adventure progress, including character stats, inventory, story flags, narrative history, and token balance, so you can resume your adventures across sessions and devices.
When you purchase tokens, payment is processed entirely by Stripe, our third-party payment processor. We do not collect, see, or store your credit card number, CVC, or other full payment card details. We retain a record of the transaction (amount, token pack, date) for accounting and support purposes.
We may automatically collect limited technical information such as browser type, device type, and general usage patterns (e.g., which adventures are played) to maintain and improve the Service.
If you play without creating an account, gameplay data is stored locally in your browser (localStorage) and is not transmitted to or stored on our servers, except for the AI narrative requests described below.
We rely on the following third-party services to operate Inkwright Engine. Each processes a limited subset of data necessary for their function:
| Service | Purpose | Data Involved |
|---|---|---|
| Anthropic (Claude) | AI narrative generation | Your in-game choices and game state context (no account/payment data) |
| fal.ai | AI scene image generation | Scene description text only |
| Supabase | Authentication & database storage | Account credentials, gameplay saves, token balances |
| Stripe | Payment processing | Payment details (handled entirely by Stripe, not us) |
| Netlify | Website hosting | Standard web server logs |
Your gameplay choices and narrative context are sent to Anthropic's API solely to generate your story content. We do not sell this data, and Anthropic's processing of it is governed by their own data handling practices for API usage.
We retain your account and gameplay data for as long as your account remains active. If you delete an adventure save, it is permanently removed from our database. If you request full account deletion, we will delete your account record, saves, and associated data within 30 days, except where we are required to retain transaction records for legal or accounting purposes.
We use industry-standard security practices to protect your data, including encrypted connections (HTTPS), database-level access controls (Row Level Security), and secure credential storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
To exercise any of these rights, contact us at the email address below.
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
We use browser local storage to remember your preferences (such as guest mode status) and, for guest players, to store gameplay progress locally on your device. We do not use third-party advertising trackers or cookies.
Our servers and service providers may process data in the United States and other countries. By using the Service, you consent to the transfer of your information to these locations, which may have different data protection laws than your country of residence.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.