Privacy Policy

Account data. When you sign up we store your email address and the authentication record needed to sign you in (including with Google, if you use that).

Your content. The games, rules, art, components, playtest sessions, chat conversations and settings you create in the Service. We store this so you and your studio can access it.

Usage data. Which features you use, AI actions you run, their cost and outcome, and basic technical logs (for example, error reports that help us fix crashes).

We use your data to:

• provide the Service — show your games, run AI features, manage credits and billing;
• keep accounts secure and enforce permissions inside studios;
• improve the Service using aggregated, anonymized statistics (see below);
• respond to support requests and legal notices.

We don’t sell your personal data, and we don’t run advertising in the Service.

When you run an AI action — a design chat, rulebook draft, image generation or consistency check — the material needed for that action is sent to our AI providers solely to perform it. We don’t use your game content to train third-party models, and we don’t expose which providers we use. Generated images and drafts are stored in your studio so your team can keep working with them.

Anyone invited into your studio can see that studio’s games and activity. Public playtest feedback links expose only the specific form a tester fills in, not your full game. Exports you generate (such as a Tabletop Simulator package) contain what you deliberately included; their image links stop working when you revoke access.

We compute anonymized aggregates — for example, how playtest complexity compares across studios, or average feature usage. These are counts and averages only: no game titles, no rules text, no art, nothing that identifies you, your studio or your games.

Your content is kept while your account is active. When you delete a game or your account, its content is removed from the Service; backup copies expire on our normal schedule. Basic accounting records (for example, credit purchases) are retained as long as the law requires.

You can access, correct and export your data through the Service (including its export features), and ask us to delete it. Depending on where you live, you may have additional rights — such as access, portability or objection — which we honour as required by law. Contact us to exercise any right; we won’t discriminate against you for doing so.

We protect your data with encryption in transit, role-based access controls, and per-studio permission checks enforced on our servers. No system is perfect: if you find a security issue, please tell us so we can fix it.

Punchboard Studio is operated by River Grand. Privacy questions: email us at hello@rivergrand.us or contact us through the Service. We’ll respond as quickly as we reasonably can.