Privacy Policy

Last updated: July 5, 2026

1. Introduction

Welcome to WanderingCodex (referred to as "we", "us", "our", or the "Platform"). We respect your privacy and are committed to protecting the personal data you share with us.

This Privacy Policy explains how we collect, use, store, and share your information when you register for an account, visit our website, build worlds, create characters, participate in forums/campaigns, or purchase paid subscriptions.

2. Information We Collect

We collect information directly from you, automatically through your use of the Platform, and from third-party services as outlined below:

A. Account & Registration Information

  • Email Address: Used for account creation, email verification, password resets, and optional notifications.
  • Account Credentials: Passwords are cryptographically hashed using industry-standard algorithms before storage. We never store your plaintext password.
  • Profile Details: Your chosen username, vanity handle/slug, timezone (for tracking writing streaks and post timestamps accurately), and preferences.

B. User Generated Content (UGC)

Any text, lore, map pins, timelines, characters, images, and other creative work you create or upload to the Platform. This includes:

  • Lexicon entries, stories, campaigns, campaign logs, and manuscript drafts.
  • Forum sections, threads, post text, and replies.
  • GM-only secrets and draft content, which are flagged in our database to ensure visibility restrictions are maintained.

C. Payment & Subscription Data

We use Stripe as our third-party payment processor.

  • We do not collect or store your payment card numbers, CVVs, or billing addresses on our servers. All billing transactions are handled securely by Stripe.
  • We store reference metadata, including your Stripe Customer ID, Subscription ID, billing status, and subscription tier expiry, to manage access to paid features.

D. Automatically Collected Information

  • Session Management: We use cookies (such as `wc_session`) to keep you logged in. These are stored in Cloudflare KV.
  • Local Settings: We utilize browser LocalStorage (e.g. `wc_tz`) to cache preferences locally to improve load speeds and customize your workspace.
  • Technical Logs: IP address, user-agent details, and page access timestamps collected for server security, performance monitoring, and anti-abuse checks.

3. How We Use Your Information

We process your information for the following purposes:

  • To provide, maintain, and support the Platform and its worldbuilding, roleplaying, and database features.
  • To verify your email address and authenticate your account sessions.
  • To process subscription payments and manage access to paid tiers (Supporter, Archivist).
  • To track writing streaks and level progression based on your local timezone.
  • To deliver notifications (in-app alerts and optional email updates) according to your preferences.
  • To detect, prevent, and address technical errors, security threats, or violations of our Terms of Service.

4. Third-Party Services & Hosting Infrastructure

WanderingCodex runs on Cloudflare and utilizes third-party vendors for critical operations. Our infrastructure partners include:

  • Cloudflare (Pages, D1, R2, KV): Hosts our website, stores SQLite databases, retains user session data, and stores uploaded assets/images. Cloudflare handles traffic routing and security filtering.
  • Stripe: Processes payment details and manages our billing portal. Read Stripe's privacy policy at stripe.com/privacy.
  • OAuth Providers: If you use Discord, Google, or other third-party services to log in, those platforms share basic profile info (like user ID and email) with us to set up your account.

5. Content Visibility & Privacy Settings

The Platform is designed to support both private writing and collaborative campaign environments.

  • GM Secrets & Drafts: Content explicitly marked as a "Secret" or "Draft" is restricted at the database level and is not visible to general players or public readers.
  • World Permissions: Access settings (Guest, Visitor, Player, Contributor, Moderator, Owner) dictate who can view or modify content within a world.
  • Public Worlds: If you choose to publish a world or open it to public readers, that content is accessible to anyone visiting the internet.

6. Your Rights & Data Choices

You have control over your data on WanderingCodex:

  • Access & Export: You can export your worlds and projects into standard document formats (Markdown/PDF) at any time.
  • Preferences: Modify your email notification settings, timezone, and writing goals through the Account Settings dashboard.
  • Account Invalidation: Log out of all active browser sessions by invalidating your active session watermark (available via password change or account controls).
  • Deletion: You may request the deletion of your account. Deleting an account removes your user profile, settings, and owned worlds. Some forum posts, shared replies, or campaign turns may be retained in anonymous form to avoid disrupting collaborative timelines or threads.

7. Contact Us

If you have any questions or concerns about this Privacy Policy, or want to make a data deletion request, please reach out via our support channel or open a help ticket at Help Center.