Privacy Policy

When you create an account, we store your email address and any profile information you choose to provide (display name, avatar). If you sign in with Google or Apple, we receive only the profile fields those services provide — we don't receive your password.

We store the content you create: campaigns, characters, NPCs, maps, session notes, and anything else you put into Candlelight. That content is yours.

We keep standard server logs (IP address, timestamp, request path) for security and debugging. These are not linked to your profile and are deleted on a rolling basis.

We use your data to:

• Create and secure your account
• Send transactional emails you request (password reset, email verification, campaign invites)
• Process subscription payments through Stripe
• Provide and improve the Candlelight service
• Respond to support requests

We don't send marketing emails unless you opt in. We don't use your content to train AI models.

We share data only where necessary to run the service:

• Stripe — payment processing. When you subscribe, your payment details go directly to Stripe. We never see your card number.
• Transactional email provider — to deliver emails you've requested (like password resets). We share only your email address and the content of that email.
• Hosting infrastructure — our servers and database providers see your data as part of storing and serving it.

We don't sell your data. We don't share it with advertisers, data brokers, or analytics platforms. We may disclose information if required by law or to protect the safety of our users.

In the future, if we add optional analytics or performance monitoring tools, we'll update this policy and note clearly what's collected and why. Any such tools will be limited to aggregate, non-personally-identifiable data.

We use cookies strictly to keep you signed in. Specifically, a session token is stored in a secure, HTTP-only cookie when you authenticate. This cookie is necessary for the service to function — without it, you can't stay logged in.

We don't use tracking cookies, advertising cookies, or third-party cookies for analytics. There are no cookie consent tiers to navigate because there's nothing to consent to beyond what's required to run the product.

Passwords are hashed using bcrypt and never stored in plain text. All data in transit is encrypted with TLS. We use access controls to limit which systems and people can reach your data.

If we become aware of a security breach that affects your personal data, we'll notify you promptly.

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated personal data
• Export your campaign content

To exercise any of these rights, email us at legal@candle-light.games. Account deletion is also available in Settings → Account (see Termination in our Terms of Service).

Candlelight is not directed at children under 13. We don't knowingly collect personal information from anyone under 13. If you believe a child has created an account, please contact us and we'll remove it promptly.

We may update this policy as the service evolves. If we make material changes — for example, if we start using new data practices — we'll notify you by email or by a prominent notice in the app before the changes take effect.

The current policy always lives at candle-light.games/privacy.

Questions, requests, or concerns about this policy — reach us at legal@candle-light.games.