Legal

Privacy Policy

Last updated July 16, 2026 · Questions? sprite@arcane.loomis.io

Arcane Academy is a small, personal project — a D&D 4th Edition campaign companion built and run by one person (Ross Nelson) for a family-and-friends game table, not a company or a commercial product. There are no ads, no analytics trackers, and nothing here is ever sold. This page explains, plainly, what the app collects and why.

What we collect

  • Account information — your email, your name, and either a password (stored as a secure hash, never in plain text) or a linked Google account, depending on how you sign in.
  • Gameplay content — the campaigns, characters, items, and armory entries you create, and the messages you exchange with the app's AI helpers (Scout, the Quartermaster, campaign shopkeepers, and the character-sheet importer).
  • Session cookies — a cookie that keeps you signed in, managed by our authentication library (Better Auth). It's session-only and isn't used to track you anywhere else.
  • Invite emails — if you invite a friend to a campaign, we store the email address you typed in so the invite can be sent and matched to their account when they accept.

How we use it

Everything collected above is used for exactly one purpose: running the service — signing you in, saving your campaigns and characters, letting the AI helpers do their jobs, and delivering invite and account emails. That's the whole list. We don't run ads, we don't use analytics or tracking tools, and we don't sell or trade your data to anyone, ever.

Who we share it with

A few outside services help run the app. Each one only ever sees the specific information it needs to do its job:

  • Google — only if you choose to sign in with Google, to verify your identity.
  • Anthropic — messages you send to the AI helpers (Scout, the Quartermaster, shopkeepers, and importers) are processed by Anthropic's API to generate responses. Character sheets you upload for import pass through the same API to be read.
  • Resend — delivers transactional email, such as campaign invites and password resets. It never sends marketing mail.
  • Hosting — the app itself runs on the operator's own private infrastructure, not a third-party cloud platform.

Keeping and deleting your data

You can delete your account at any time from your account settings, or by emailing sprite@arcane.loomis.io. When a campaign is deleted, its characters, items, and chat history are deleted along with it.

Cookies

Arcane Academy uses one cookie, to keep you signed in. It's cleared when your session ends. We don't use advertising cookies, and we don't use cookies to track you across other sites.

Children's privacy

Arcane Academy is built for a family game table, and some players are minors. A parent or guardian should create and manage the account for any player who is too young to agree to these terms on their own, and remains responsible for what that account does in the app.

Changes to this policy

If this policy changes, the update will be posted right here, with a new "Last updated" date at the top of the page.