VoxDungeon is operated by Todd Lunn, an individual sole proprietor based in Ontario, Canada ("we", "us", "VoxDungeon"). For the purposes of the GDPR, we are the data controller of your personal data. You can reach us for any privacy matter at support@voxdungeon.com.
| Data | Why we process it | Lawful basis |
|---|---|---|
| Account email, display name, securely hashed password | To create and secure your account and let you sign in | Performance of a contract |
| Game saves, characters, and adventure progress | To save and restore your games | Performance of a contract |
| Text you type or speak to the Dungeon Master | To generate the game's responses | Performance of a contract / consent for microphone use |
| Microphone audio (voice input) | Converted to text so you can play by voice | Consent |
| Payment status and subscription identifiers | To provide and manage Premium. Card/bank details are handled entirely by PayPal — we never receive or store them | Performance of a contract |
| IP address, timestamps, and basic usage/abuse logs | Security, rate-limiting, fraud prevention, and keeping the service running | Legitimate interests |
| Approximate location (country/city) derived from IP | Aggregate analytics about where players come from | Legitimate interests |
When you use voice input, your speech is converted to text. If you use the browser's built-in speech recognition (for example in Google Chrome), your microphone audio is sent to your browser vendor's servers (e.g., Google) for transcription — this is a function of your browser, not VoxDungeon. We only receive the resulting text. You can always play using the keyboard instead, and your browser controls microphone permission.
We use a small number of trusted service providers to run VoxDungeon:
We do not sell your personal data, and we do not share it with advertisers.
We are based in Canada and some providers operate in the United States and elsewhere, so your data may be processed outside the European Economic Area. Where that happens we rely on appropriate safeguards (such as the providers' standard contractual clauses and equivalent protections).
Under the GDPR (and similar laws) you have the right to:
To exercise any right, use the in-app controls or email support@voxdungeon.com. You also have the right to lodge a complaint with your local data protection authority.
We use only strictly-necessary browser storage to run the game and keep you signed in. We do not use tracking or advertising cookies. See our Cookie Policy for details.
Passwords are stored hashed (bcrypt), traffic is encrypted in transit (HTTPS), and access to our systems is restricted. If a data breach affects your rights, we will notify affected users and the relevant authority without undue delay, as required by law.
VoxDungeon is intended for users aged 16 and older. We do not knowingly collect data from children under 16.
If we make material changes, we will update the version and date above and, where appropriate, ask you to re-confirm your consent.
Todd Lunn (VoxDungeon), Ontario, Canada — support@voxdungeon.com