Last updated: March 29, 2026
This policy explains what data Imagina ("the Service") collects, how we use it, and your rights. If you do not agree, please do not use the Service.
Information you provide to us: email address, username, password (stored as a hash, never in plaintext), world and journey text you enter, prompts and feedback you submit for world or image generation, newsletter choices, and other account preferences.
If you use optional OAuth login: we receive profile information from Google or Discord, such as your name, email address, avatar image, and provider account ID.
If you upload or generate images: we store uploaded portrait images and AI-generated title card images linked to your worlds.
Automatically collected information: IP address, browser and device information, session and security metadata, pages viewed, analytics events, and error details.
We do not sell your personal data or use it for third-party advertising. We also do not sell the contents of your worlds or journeys. We host that content so the Service can function.
When you play or use AI-assisted generation features, the text you submit and relevant world or journey context are sent to third-party AI providers so they can generate a response or image prompt. We do not intentionally send your email address or password to those AI providers as part of normal gameplay or generation.
We may also run automated analysis and, when needed, manual review on worlds, prompts, images, and journeys to detect content that may violate our Terms of Service or the law. That can include removing content or suspending accounts.
Please do not include sensitive personal information in journey text, prompts, or world definitions unless you are comfortable sharing it with those providers. We do not use your content ourselves to train AI models. We only use AI providers that do not use submitted content for model training, but providers may still retain data for limited operational, security, or abuse-prevention purposes under their own policies.
| Service | What it does | Data it may receive |
|---|---|---|
| Third-party AI providers | Generate narrative and image content | World definitions, journey text, prompts, and related context |
| Google / Discord | Optional OAuth sign-in | Profile information you authorize the provider to share |
| Resend | Transactional emails | Email address and message content needed to send the email |
| PostHog | Product analytics and error monitoring | Usage events, browser metadata, page views, and error context |
| Sentry | Error tracking | Technical diagnostics such as IP address, browser info, and error details |
We use essential session cookies to keep you signed in. We also use localStorage to save preferences such as theme, layout, background image, and other display options on your device.
Our product analytics (PostHog) uses cookieless, memory-only tracking. It does not set any cookies, use localStorage, or store persistent identifiers on your device. Analytics data is linked to your session only while the page is open; no cross-session tracking occurs through browser storage. We do not use advertising cookies or third-party ad trackers.
We keep account, world, and journey data while your account is active. If you request deletion, we will delete or anonymize data where feasible and may retain limited records where needed for legal, security, fraud-prevention, backup, audit, or accounting purposes.
Under GDPR, you can request access to, correction of, deletion of, or export of your personal data by contacting us at contact@playimagina.com. Journey exports are available in the app for individual games only and are not a full account export. If you are in the EU or UK, you may also have rights to object to or restrict certain processing and to lodge a complaint with your local data protection authority.
The Service is operated from Europe. Depending on where you are located and which providers are involved, your information may be processed in Europe and in other countries where our service providers operate.
The Service is not intended for children under 13. If we learn that a child under 13 has provided personal information, we will delete it.
We may update this policy from time to time. If we make material changes, we may notify you by email or through the Service. The "Last updated" date at the top shows the latest revision.