What we keep, and why

Palimpsest is a tabletop role-playing game run by an AI game master, played in the browser and in Telegram. This page says what it keeps about you, who else sees it, and how to have it removed. Palimpsest decides what happens to this data. Write to privacy@palimpsest.gg with any question or request.

What we keep

Your account, if you make one: your email address and name (from Google, if you sign in with Google, along with Google's id for you), when you joined, and the tables you have started. A sign-in is kept as a record that expires on its own.

Your games. Everything said at a table, by you and by the game master, and the world as your play changes it: the story, your character, what the game master was asked and answered at each turn, and the engine's record of it. We keep this so your game can continue, and so we can find and fix what goes wrong in it.

In Telegram, the bot keeps the same for each chat that plays it, with the Telegram ids (numbers) of the players who take part, not their names. A problem you report with /bug is sent to us with the recent story.

The free demo on the front page keeps its table for 30 days after it was last played, then deletes it. To stop one person from taking every table, it counts tables per internet address, in memory, for the day.

The newsletter, if you sign up: your email address, with our newsletter service.

Our servers' logs hold the requests the site answers and what the game master does, for 7 days.

We use no advertising, no analytics service and no tracking cookies. The site sets one cookie to keep you signed in, one to remember the language you picked, and the demo keeps its table's key in your browser for a day.

Who else sees it

We use a few services to run the game. Each gets only what its part needs:

• Fly.io hosts the site, the bot and everything they keep, in Paris.
• Surplus Intelligence runs the AI models: what is said at your table, and the story so far, is sent to it at each turn so the game master can answer.
• Google, if you sign in with Google, tells us who you are.
• Resend sends the sign-in emails.
• Cloudflare Turnstile checks that a demo player is a person; it sees your internet address.
• Telegram carries the game when you play there.
• Buttondown sends the newsletter.

Some of these work outside the European Union. We don't sell your data, and we don't use it to train AI models.

How long, and how to have it removed

Your account and your tables stay until you delete them. On your account page you can download what the site keeps about your account, and delete the account: that deletes its tables and everything they kept, at once. The copies in our servers' backups go within 7 days.

Games played in Telegram stay until you ask us to delete them. Write to privacy@palimpsest.gg from anywhere, telling us your Telegram username or the chat, and we will.

You may also ask us for a copy of what we keep about you, ask us to correct it, or object to how we use it. If you are in the European Union you may complain to your data protection authority (in Spain, the AEPD).

We keep your data because you ask us to run the game for you. Palimpsest is not for anyone under 16.

Changes

When this policy changes, we update it here and change the date at the top; a change that matters, we tell account holders by email first.