Privacy Notice

Who is responsible

Dungeon DJ is operated by Cody Peterson, an individual based in Florida, United States. Contact us through in-app Support, at support@dungeondj.app, or by mail at 9 Maplewood Ave., Clearwater, FL 33765, United States. Email support is available without an active account.

This notice covers the website, accounts, guest encounters, communications, support, and billing. It describes our practices rather than requesting blanket consent. New paid subscriptions currently serve the United States; services and legal requirements will be reviewed before expansion.

Information we receive

Account information includes email, identifiers, verification status, names, profile images you supply, and account history. Supabase handles authentication credentials. An enabled third-party sign-in provider supplies basic identity information needed for sign-in under its own practices.

We store campaigns, queues, custom locations, favorites and hidden items, ambiance and mixer choices, playback preferences, sharing settings, and related history. Requested settings may also be stored in your browser. We receive supported uploads, messages, support requests, reports, and attachments. Messages are not end-to-end encrypted; authorized systems and staff can read them for legitimate service, safety, and support purposes.

Stripe collects payment details. We receive customer, invoice, subscription, payment and referral identifiers, amounts, currency, status, and related dates. Our application database does not store full card numbers. Stripe also processes information for payment security and its legal obligations.

Device and security records may include browser and operating-system information, device labels, protected trusted-device credentials, timestamps, authentication events, and derived network identifiers used against abuse. Hosting and authentication providers receive connection information such as IP addresses. We do not request precise GPS location.

New service statistics use aggregate technical measurements to understand playback reliability, load, compatibility, and feature use, without adding account identifiers or persistent analytics-only browser identifiers to those aggregates. Distinct account, billing, security, and support records may identify you. Legacy diagnostic records may remain during retention review; we do not describe those records as anonymous.

How we use and receive information

We use information to create and secure accounts, register devices, deliver audio, remember requested preferences, support chosen sharing and messaging, process subscriptions and referrals, investigate failures and abuse, provide support, and meet legal duties. Information comes from you and your use, authentication and payment services, other users who communicate or report, and operational providers.

Required account or billing information is needed for the requested feature. Optional profile content and deliberate sharing are your choices. Necessary service, security, billing, and policy communications are part of account operation. If marketing is introduced, it will have required choices and an unsubscribe route. We do not sell personal information or share it for cross-context behavioral advertising.

Who receives information

We use Supabase for authentication, Stripe for billing and payments, Sites hosting and Cloudflare infrastructure for application delivery and storage, and Zoho for the support mailbox. Providers receive information needed for their services and may process information for their own legal or security duties under their notices. Connections and provider processing may occur outside your state or country.

Your profile information and deliberately shared content are visible according to the feature's access settings. Message recipients receive what you send. Public share links or encounters may be usable by people who receive the link; private campaigns are not made public by subscribing.

We may disclose limited information when reasonably necessary for valid legal process, safety, rights protection, fraud prevention, or abuse investigation. Copyright complaints may be shared with the affected parties. Information may transfer with a sale or reorganization subject to confidentiality, existing commitments, and required notices.

An optional Creator tool sends an entered description to OpenAI for track-tag suggestions, rather than sending the audio recording. Avoid unnecessary personal information in prompts. We do not use private messages or uploads to train general-purpose AI models. Materially different AI uses will receive separate notice.

Retention, closure, and review

We retain information for as long as reasonably needed for its purpose, considering account activity, sensitivity, billing and legal duties, support and disputes, security, and verification of closure requests. Limited retained records are restricted to their continuing purpose. We review retained information and delete or irreversibly anonymize it when no longer needed; a manual review is not permission to retain everything indefinitely.

Account deletion disables ordinary access, stops future renewal, and starts a tracked closure and deletion review. We may reasonably verify identity or investigate suspected accidental or unauthorized closure. Manual review does not extend applicable legal deadlines because staff are busy. We explain applicable exceptions. This is not a promise that every record is immediately or automatically erased.

Restricted backups, financial and consent records, documented legal or security evidence, recipient-held messages, and independently adopted shared content can have different retention requirements. We assess these categories separately. Anonymous aggregates may remain while useful only when they no longer allow a person to be identified.

Controls, rights, and security

Use account controls to manage profiles, devices, preferences, sharing, and subscriptions. Email support@dungeondj.app, even without signing in, to request access, correction, deletion, or a portable copy, or exercise other applicable privacy rights. We verify requests proportionately, respond within applicable deadlines, and explain lawful extensions and exceptions. Applicable appeals and regulatory complaints remain available.

We do not offer a switch to stop processing genuinely needed for requested features, security, or legal obligations. Operational aggregate measurements are part of the service. This does not make every possible form of analytics necessary or replace choices required by law. If a future measurement requires consent or an objection right, we provide it or omit that activity.

We use reasonable safeguards, including protected connections and restricted access, without guaranteeing perfect security. We investigate incidents and provide required notices. The service is for adults and is not directed to children under 13. If we learn that children's information was improperly collected, we take appropriate action, including deletion when required.

We update this notice as practices change, identify its effective date, and notify account holders of material changes through an appropriate service or email notice. We request consent where legally required; a new notice does not silently authorize incompatible use of previously collected information.