Privacy Policy

1. Information we collect

We collect information you provide, information created as you use the Service, and information from third parties you connect.

Information you provide:

• Account & profile — name, username, email, password, avatar, bio, your date of birth (to verify you meet our minimum age), pronouns, interests, and the games and activities on your shelves.
• Content you create — posts, comments, reactions, messages, character sheets, campaigns, journal notes, guild and forum posts, reviews, images you upload, and anything else you submit.
• Location — the location you set for discovering and hosting nearby games. You control how precisely your location is shared with others (see Privacy settings).
• Payment details — if you subscribe to a paid plan or make a purchase, our payment processor collects your payment information. We receive limited billing data (e.g., plan, status, and the last four digits of a card), not your full card number.
• Communications — messages you send us for support, and your responses to surveys or prompts.

Information collected automatically:

• Usage & device data — pages viewed, features used, approximate location derived from IP address, browser and device type, and diagnostic/performance data.
• Cookies & similar technologies — used for essential functions (sign-in, security) and, with your consent, privacy-respecting analytics. See Cookies.

Information from third parties:

• Sign-in providers — if you sign in with Google or another provider, we receive basic profile information (such as your name and email) as permitted by that provider and your settings.

2. How we use information

• Provide, operate, and improve the Service — accounts, discovery, messaging, guilds, campaigns, and toolkits.
• Match you with nearby games, players, venues, and content, and personalize your experience.
• Enable the AI Game Master and other AI features you choose to use (see AI features).
• Send transactional messages (sign-in, security, RSVPs, notifications you opt into) and, where permitted, product updates you can opt out of.
• Keep the community safe — verify age, enforce our Code of Conduct, review reports, detect abuse and fraud, and moderate content.
• Process payments, subscriptions, and payouts, and maintain records.
• Understand usage through analytics, and comply with legal obligations.

3. How we share information

We do not sell your personal information. We share it only as described here:

• With other members — your profile and the content you post are visible to others according to your privacy settings and each feature’s audience (e.g., a guild, a campaign party, or the public). Your precise location is not shown to others beyond the level you choose.
• With venue and event partners — when you RSVP to or book a partner’s session or venue, we share what the partner needs to host you (such as your name and booking details).
• With service providers — companies that process data on our behalf under contract, including cloud hosting and database (Google Cloud, Supabase), maps (Mapbox), email delivery (Resend), payments (Stripe), and AI processing for features you use (Anthropic). They may only use the data to provide services to us.
• For safety and legal reasons — to comply with law, enforce our terms, or protect the rights, safety, and property of members, the public, or Waypoint.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. AI features

Some features, such as the AI Game Master and AI-assisted content generation, send the relevant content (for example, your campaign messages, character details, or prompts) to our AI provider to generate a response. This content is processed to provide the feature to you and is not used by us to train third-party AI models. AI-generated output can be inaccurate or unexpected — treat it as entertainment, not professional advice. AI features are optional; if you don’t use them, your content isn’t sent for AI processing.

5. Location information

Because Waypoint helps people meet to play, location is central to discovery. You choose the location associated with your account and how precisely it is disclosed to others. We use it to surface nearby games, players, and venues, and to power maps and distance filters. You can adjust or remove your location, and control precision, in your privacy settings. Never share another person’s exact location or personal details without their consent.

6. Children and teens

The Service is not for anyone under 13, and we do not knowingly collect information from children under 13. We verify a minimum age at signup. For members under 18, we apply additional safeguards — for example, limiting adult–minor direct messaging, hiding minors from public discovery unless they are connected, and filtering mature-rated content. If you believe a child under 13 has provided us information, contact us at privacy@waypoint.community and we will delete it.

7. Cookies and tracking

We use strictly necessary cookies to sign you in and keep the Service secure. With your consent, we also use privacy-respecting analytics to understand and improve the product. You can manage your choice through our consent banner and your browser settings, and we honor recognized privacy signals such as Global Privacy Control.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can:

• Access and edit your profile and content in the app.
• Export your data — download a copy of your information from your account settings.
• Delete your account — permanently delete your account and associated data from your account settings.
• Manage privacy and visibility in your privacy settings.
• Control notifications and marketing messages in your notification settings.

To exercise a right not available in-app, or to ask a question, email privacy@waypoint.community. We will not discriminate against you for exercising your rights.

9. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we remove or de-identify your personal information, except where we must retain certain records to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Some content you shared publicly or with others (for example, messages sent to another member) may persist in their view of the Service.

10. Security

We use technical and organizational measures — including encryption in transit, access controls, and row-level security — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Use a strong, unique password and keep it confidential.

11. International data transfers

We operate the Service using providers that may process and store data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact us

Questions about this Policy or your information? Email us at privacy@waypoint.community or support@waypoint.community.