Last updated: May 18, 2026
This policy explains what data Imagina ("the Service") collects, how we use it, and your rights. If you do not agree, please do not use the Service.
Information you provide to us: email address, username, password (stored as a hash, never in plaintext), world and journey text you enter, prompts and feedback you submit for world or image generation, newsletter choices, and other account preferences.
If you use optional OAuth login: we receive profile information from Google or Discord, such as your name, email address, avatar image, and provider account ID.
If you upload or generate images: we store uploaded portrait images and AI-generated title card images linked to your worlds.
Automatically collected information: IP address, browser and device information, session and security metadata, pages viewed, analytics events, and error details.
We do not sell your personal data. We also do not sell the contents of your worlds or journeys. We host that content so the Service can function.
When you play or use AI-assisted generation features, the text you submit and relevant world or journey context are sent to third-party AI providers so they can generate a response or image prompt. We do not intentionally send your email address or password to those AI providers as part of normal gameplay or generation.
We may also run automated analysis and, when needed, manual review on worlds, prompts, images, and journeys to detect content that may violate our Terms of Service or the law. That can include removing content or suspending accounts.
Please do not include sensitive personal information in journey text, prompts, or world definitions unless you are comfortable sharing it with those providers. We do not use your content ourselves to train AI models. We only use AI providers that do not use submitted content for model training, but providers may still retain data for limited operational, security, or abuse-prevention purposes under their own policies.
| Service | What it does | Data it may receive |
|---|---|---|
| Third-party AI providers | Generate narrative and image content | World definitions, journey text, prompts, and related context |
| Google / Discord | Optional OAuth sign-in | Profile information you authorize the provider to share |
| Resend | Transactional emails | Email address and message content needed to send the email |
| Sentry | Error tracking | Technical diagnostics such as IP address, browser info, and error details |
We use essential session cookies to keep you signed in. We also use localStorage to save preferences such as theme, layout, background image, and other display options on your device.
We do not set marketing or advertising cookies. We do not load third-party advertising scripts on the page.
Our product analytics uses cookieless, memory-only tracking. It does not set any cookies, use localStorage, or store persistent identifiers on your device. Analytics data is linked to your session only while the page is open; no cross-session tracking occurs through browser storage.
We count visits to world pages so creators can see how their worlds are found. If you are signed in, the visit is counted under your account. If you are not, it is counted under a one-way hash of your IP address and browser that changes every day, so it cannot follow you from one day to the next. We never store your IP address for this, and creators only ever see totals, never who visited.
We keep account, world, and journey data while your account is active.
You can delete your account yourself, at any time, from your account page. Deletion is confirmed by an email link. Once confirmed, we unpublish every world and universe you authored, permanently delete your journeys, take your profile page offline, and sign out every session and connected app.
Deletion does not erase everything. We keep an anonymised account record and your handle, so that nobody can sign up as you later. We keep unpublished copies of the worlds you authored, so that other people's journeys built on them keep working. We also keep billing, moderation, and security records, including the prompts attached to billing entries. If you ask us to delete your data by email instead, we will delete or anonymize data where feasible and may retain the same limited records where needed for legal, security, fraud-prevention, backup, audit, or accounting purposes.
Under GDPR, you can request access to, correction of, deletion of, or export of your personal data by contacting us at [email protected]. Account deletion is also self-service: the "Delete your account" section of your account page runs it for you, subject to the retention described above. Journey exports are available in the app for individual games only and are not a full account export. If you are in the EU or UK, you may also have rights to object to or restrict certain processing and to lodge a complaint with your local data protection authority.
The Service is operated from Europe. Depending on where you are located and which providers are involved, your information may be processed in Europe and in other countries where our service providers operate.
The Service is not intended for children under 13. If we learn that a child under 13 has provided personal information, we will delete it.
We may update this policy from time to time. If we make material changes, we may notify you by email or through the Service. The "Last updated" date at the top shows the latest revision.