Data Privacy & Security

1. Encryption at Rest

All game design content — documents, sections, wiki collections, and wiki items — is encrypted using AES-256-GCM before being stored in our database. The encryption key is not stored alongside the data.

If someone gains access to a database backup, your content is unreadable ciphertext.

2. Access Audit Trail

Every access to your account data by administrative personnel is logged in an append-only audit trail. This includes which admin accessed what data, and when.

You can view your own access log at Account Settings > Access Log. If you see an access you do not recognize, contact support immediately.

3. Your Content Belongs to You

We do not train AI models on your game design documents. Your content is never shared with third parties. The AI assistant processes your content only during your active session to generate suggestions.

You can permanently delete your account at any time from Account Settings, which removes all your data after a 30-day grace period.

4. Server Security

Our infrastructure enforces HTTPS for all data in transit. Database access is restricted to the application tier. We maintain regular security patches and dependency updates.