Privacy Policy

Vessel is a narrative roleplay service operated by Muni Software. We believe you should know exactly what we do with your information — clearly, and without equivocation. This policy describes what we collect, why we collect it, and how it is handled. By using Vessel, you agree to the practices described here.

We collect the following categories of information:

• ·Email address — provided during account registration for authentication.
• ·Payment information — processed by our payment provider, Polar. We do not store your credit card number, expiration date, or CVC on our servers.
• ·Game session data — your in-game choices, character state, story progression, and session history.
• ·Device and browser information — browser type, operating system, and general usage patterns to maintain and improve the service.

We process your information on the following legal bases: performance of our contract with you (authentication, payments, game state), legitimate interests (service improvement, abuse prevention), and compliance with legal obligations.

• ·Account authentication and session management.
• ·Processing subscription payments through Polar.
• ·Persisting your game state, character progression, and story history.
• ·Improving the service, diagnosing technical issues, and preventing abuse.
• ·Sending transactional emails related to your account (sign-in links, billing confirmations). We do not send marketing emails.

Vessel uses third-party AI providers to generate narrative content. When you play, your in-game actions, choices, and relevant session context are sent to these providers to produce story responses. Your inputs are used solely for generating your story in real time.

We do not use your gameplay inputs to train AI models. As of the date of this policy, our AI providers contractually commit to not using API inputs for model training. We cannot guarantee the downstream data practices of all model providers in every circumstance.

Vessel uses cookies and browser local storage for authentication session management. These are strictly necessary to keep you signed in and are not used for advertising or cross-site tracking.

We do not currently use third-party analytics, advertising trackers, or similar tracking technologies. If this changes, we will update this policy and notify you.

We share your information only with the service providers necessary to operate Vessel:

• ·Polar — payment processing and subscription management.
• ·Supabase — hosting, database, and authentication infrastructure.
• ·AI providers — story generation (gameplay inputs and session context only).

We do not sell, rent, share, or trade your personal information to third parties, as those terms are defined under applicable privacy laws including the California Consumer Privacy Act. We may disclose information if required by law or to protect the rights and safety of our users.

Our service providers are based in the United States. If you access Vessel from the European Economic Area or other regions with data transfer regulations, your data may be transferred to and processed in the United States. Such transfers rely on appropriate safeguards, which may include Standard Contractual Clauses or other mechanisms recognized under applicable law.

Your account data and game history are retained for as long as your account remains active. Game session data is preserved to support features like the Chronicle, which lets you revisit completed stories.

You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, your data will be permanently removed from our systems within 30 days.

You have the right to:

• ·Access the personal data we hold about you.
• ·Correct inaccurate or incomplete data.
• ·Request deletion of your account and data.
• ·Request a portable copy of your data.

To exercise any of these rights, email us at hello@playvessel.app.

European Economic Area residents: Under the General Data Protection Regulation (GDPR), you also have the right to restrict processing of your data, to object to processing based on legitimate interests, and to lodge a complaint with your national data protection authority.

California residents: Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale or sharing of personal information. We do not sell or share your personal information. We will not discriminate against you for exercising your privacy rights.

Vessel is not intended for users under the age of 13, or such higher age as required by applicable law in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has created an account in violation of this policy, please contact us and we will promptly delete the account.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a notice within the application. Your continued use of Vessel after such changes constitutes acceptance of the updated policy.

In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to request account deletion, contact us at hello@playvessel.app.