Privacy

Account and sign-in data

Sign-in uses Google OpenID Connect. Google provides a stable account identifier, display name, and verified email address. Sudden Hero requests only the openid, email, and profile scopes. We do not receive your Google password, and Google access and ID tokens are discarded after sign-in.

The browser receives a secure, HttpOnly session cookie. The cookie identifies a Sudden Hero login session; application JavaScript cannot read it. Server records connect that session to your account, admission status, campaign memberships, and character seat.

Invitations

A host supplies an email address when inviting someone. We store the address with the invitation and send the message through Resend. The invitation is accepted only after Google verifies the matching email address. Raw invitation links are short-lived, are not stored in plaintext after delivery, and are never used as WebSocket credentials.

Gameplay data

We store player declarations, out-of-character table talk, character and world state, dice results, rules outcomes, narration, command receipts, and connection presence needed to run the table. Game mutations form an append-only event ledger. That ledger is the save file and audit trail, so a later session can replay the same facts.

Player text and the relevant game context may be sent to Anthropic to interpret an action, narrate a committed result, or portray the game master. The deterministic rules engine, not the model, owns dice and state changes.

Service providers

Google handles identity proof. Resend delivers invitation email. Anthropic supplies the language model for the current alpha. Google Cloud runs the application, Neon stores PostgreSQL data, and Cloudflare provides DNS, TLS, static pages, and the application edge. Each provider processes data under its own terms and privacy policy.

Retention and deletion

Short-lived authorization attempts and invitation handles expire. Temporary invitation-delivery content is deleted after delivery reaches a terminal state. Account, campaign, and gameplay records remain while they are needed to operate or recover a shared table.

To request account deletion or access revocation, email csells@sellsbrothers.com. We will remove or de-identify personal account data where practical and explain any shared campaign history that cannot be removed without breaking the other players' save and audit trail.

Security and logs

Sudden Hero uses encrypted HTTPS connections, secure cookies, server-side authorization, and database transactions. Application logs are designed to omit cookies, Google tokens, invitation links, email addresses, player prose, model output, and durable person IDs. No system is perfectly secure, but a private link alone never grants player authority.

Children

This private alpha is not directed to children under 13. Please do not invite a child or submit a child's personal information.

Changes and contact

This page will change when the service, providers, or retention practices change. The effective date above will change with it. Questions about this policy or Sudden Hero's data handling can be sent to csells@sellsbrothers.com.