Privacy policy
Last updated 25 September 2026
Dungeons & Bullshit collects as little as it can. There are no accounts, no cookies, no analytics and no advertising. This page explains exactly what is processed, why, and by whom.
Who is responsible
The data controller is Joan Marie Arroyo Alcón, [NIF / DNI], based in Errenteria (Gipuzkoa), Spain. Contact: [contact email].
What is processed and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| What you type in the game, your character's name and the game state | Sent to the Dungeon Master (Anthropic's Claude API) to generate each turn | Performance of the service you request (GDPR art. 6.1.b) | Not stored on our servers. Anthropic retains it under its own terms (see below). |
| A one-way keyed hash of your IP address | Making sure each connection gets one free trial, and preventing abuse | Legitimate interest (art. 6.1.f) | Deleted automatically after 30 days |
| Your Gumroad license key | Checking with Gumroad that your subscription is active | Performance of contract (art. 6.1.b) | Stored only in your own browser. Our servers check it and forget it. |
| Standard server logs (IP address, time, requested page) | Hosting, security and troubleshooting, handled by Netlify | Legitimate interest (art. 6.1.f) | According to Netlify's retention policy |
Please don't type real personal information (yours or anyone else's) into the game. It's a comedy dungeon, not a diary, and everything you type is sent to the AI provider.
On your device
The game uses your browser's local storage, not cookies, to keep your current run, your patron key and a short-lived access pass. None of it is used for tracking. You can erase it at any time by clearing this site's data in your browser, or with "Abandon run" in the game.
Who else receives data
- Anthropic, PBC (United States) provides the Claude API that runs the Dungeon Master. It receives your in-game actions and game state for each turn. Under Anthropic's commercial terms, API data is not used to train its models; see Anthropic's privacy policy for its retention periods.
- Gumroad, Inc. (United States) sells and manages subscriptions. When you buy, you deal with Gumroad directly under Gumroad's privacy policy; we never see your card details. We only send Gumroad your license key to confirm it's valid.
- Netlify, Inc. (United States) hosts the website and its server functions.
- Google Fonts serves the typefaces, which means your browser requests them from Google's servers.
These providers may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
Your rights
You can ask for access to, correction or deletion of your data, restrict or object to its processing, and ask for portability, by writing to [contact email]. Because we store almost nothing that identifies you, the most useful steps are usually clearing your browser's site data and, for purchases, contacting Gumroad. If you think your data has been mishandled, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos.
Age
The game is intended for people aged 16 and over. It contains crude humour and dark comedy.
Changes
If this policy changes, the date at the top will change and the changelog will say so.