Digital DM — Privacy Policy
Draft — v0.1. Not legal advice.The part people actually need to know
**Your prompts and generations are sent to third-party AI providers, and those providers may use them to train and improve their models.**That is a term of our upstream licence, not a choice we made, and it is why this sentence is at the top of the page rather than buried in section 9.
**If you would not want a model provider to see it, do not type it into the context field.** Don't put your players' real names in there. Don't paste your campaign's private notes. Use it for what it's for.
What we collect
Everyone - Generations, the filters you chose, and the context text you typed - An anonymous session cookie (ddm_sid) — a random identifier, no personal data
- A salted hash of your IP address, for daily quota counting. We do not store
raw IP addresses.
- Basic error and performance telemetry
Account holders
- Email address
- Name and avatar, if you sign in with Google
- Your generations, favourites, and settings
We do not collect payment information, because there is nothing to pay for.
The anonymous session cookie
ddm_sid is a random identifier that lets you see the generations you made
before signing up, and lets you claim them if you make an account.
It is httpOnly (JavaScript cannot read it) and SameSite=Lax. It expires after
30 days. It contains no personal information and it is never placed in a URL.
Third parties who see your data
| Who | What they get | Why | |---|---|---| | Anthropic | Prompts, generated text | Text generation | | OpenAI | Context prompts | Safety classification | | Black Forest Labs / Replicate | Image prompts, generated images | Image generation | | DigitalOcean | All stored data | Hosting, database, file storage | | Google | Email, name, avatar | Sign-in, if you use it | | Resend | Email address | Sign-in links |
Model providers may use inputs and outputs to train and improve their models. Their terms govern that processing, not ours.Public by default when signed out
Generations made while signed out are public. They can appear on our Random and Popular pages and at a public share link. We say so at the point of generation.Sign in and you can mark generations unlisted or private.
What we don't do
- We don't sell your data. - We don't run ads. - We don't build advertising profiles. - We don't put your session id in a URL, a log line, or an analytics event.
Retention
- Generations: until you delete them or your account - Anonymous generations: retained (they are public content) - Quota counters: 90 days - Logs: 30 days
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to processing. Delete your account in settings, or email [CONTACT EMAIL].
Note: deleting your account does not retract data already sent to model providers for training. We cannot un-send it. This is another reason not to type anything sensitive into the context field.Children
Digital DM is not directed at children under 13, and we do not knowingly collect their data.
Contact
[CONTACT EMAIL]