Effective Date: 2 May 2026
Last Updated: 2 May 2026
FableForge is a product of Forgeworks Labs PTY LTD ("Forgeworks Labs", "we", "us", "our"). We are committed to protecting your privacy and handling your personal information with care and transparency.
This Privacy Policy explains how we collect, use, store, and protect your information when you use the FableForge website and AI-powered interactive role-playing game platform (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.
We collect information in the following categories:
When you create an account, we collect:
- Email address
- Username or display name
- Profile avatar (if provided)
- How you arrived — the campaign link or referring site, and the first page you landed on
Account authentication is handled by Clerk, a third-party authentication provider. We do not store your password directly.
When you use the Service, we collect and store:
- Characters you create (names, attributes, customisations)
- Session and game state data
- In-game interactions, choices, and prompts
- Character memories and narrative history
- Progress, achievements, and gameplay statistics
This data is essential for providing persistent gameplay experiences where your choices and progress are remembered.
We automatically collect:
- IP address (which may indicate general location)
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Date and time of access
If you make purchases, payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card or bank account details. Stripe may collect information necessary to process your payment in accordance with their privacy policy.
We do not collect:
- Phone numbers
- Contact lists or address books
- Location data beyond what IP address may indicate
- Biometric data
We use the information we collect to:
We do not manually review or analyse your individual gameplay data. Your adventures are private to you.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
We share information only in limited circumstances:
We work with trusted third-party providers who help us operate the Service:
We select partners who maintain appropriate privacy and security standards.
To generate interactive storytelling content, we transmit your gameplay prompts and inputs to third-party AI providers. This is essential for the Service to function. AI providers process this data to return generated content and are bound by their own privacy policies and our contractual requirements. See Section 4A below for detailed information about AI data processing.
We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect the rights, property, or safety of Forgeworks Labs, our users, or others
- Investigate potential violations of our Terms of Service
If Forgeworks Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We may share information with your explicit consent for purposes not covered by this policy.
The Service uses artificial intelligence and large language model (LLM) technology to generate gameplay narration, dialogue, and game responses. This section provides specific details about how your data interacts with AI systems.
When you play the game, the following data may be transmitted to our AI service providers:
- Your gameplay inputs (character actions, dialogue choices, free-text prompts)
- Character information (names, attributes, current game state context)
- Relevant game world context (location, NPCs, quest state) needed to generate coherent responses
Our AI service providers process your data solely to generate and return gameplay content. They are bound by Data Processing Agreements (DPAs) and their own privacy policies. We select providers that:
- Process data on our behalf, not for their own purposes
- Maintain appropriate security and privacy standards
- Do not use your individual gameplay data to train their general models without separate consent
AI providers may temporarily retain your prompts and responses for service delivery and abuse prevention, in accordance with their own retention policies. We do not control the retention practices of third-party providers, but we select partners whose practices align with our privacy commitments.
The AI content generation is integral to the Service — it cannot function without it. By using the Service, you acknowledge that your gameplay inputs will be processed by AI service providers as described above and in our Terms of Service.
We use cookies and similar technologies for:
Required for the Service to function, including:
- Session management
- Authentication (via Clerk)
- Security features
These cookies are strictly necessary and do not require your consent.
With your consent we use two analytics tools, which set cookies and store data in your browser to help us understand how the Service is used:
This list describes the analytics tools we use today; it is not a guarantee that no other cookie is ever set by them, and we will update this policy if we add or change providers.
Nothing above is loaded until you give your explicit consent through our cookie consent banner. Before you choose, and if you decline, no analytics cookies are placed, no session replay is recorded, nothing is stored durably in your browser, and Google Analytics, PostHog and Sentry do not collect anything. If you later withdraw consent, the identifiers already stored are cleared.
When you first visit the Service, you will be presented with a cookie consent banner offering you the choice to accept or reject non-essential cookies. You can change your preference at any time by clicking the "Cookie Settings" link in the footer of the website. If you reject non-essential cookies, only strictly necessary cookies will be used.
Most browsers also allow you to control cookies through their settings. However, disabling essential cookies may prevent the Service from functioning correctly.
We retain your information as follows:
When you delete your account, we delete all associated gameplay data. Some information may be retained if required by law or for legitimate business purposes (such as fraud prevention).
Accounts that remain inactive for an extended period may be considered dormant. We may delete data associated with dormant accounts after providing reasonable notice.
We implement appropriate technical and organisational measures to protect your information, including:
However, no system is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the security of your account credentials.
You have the following rights regarding your personal information:
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following additional rights under the General Data Protection Regulation:
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. If we need additional time due to the complexity of your request, we will notify you within the initial 30-day period and may extend by up to 60 additional days.
We will not charge a fee to process your request unless it is manifestly unfounded or excessive.
You may also have additional rights under your local laws. We will honour requests in accordance with applicable legal requirements.
If you are a parent or legal guardian and wish to exercise rights on behalf of a minor in your care — including access to, correction of, or deletion of the minor's data, or closure of their account — please contact us at [email protected] with reasonable evidence of your relationship to the minor and your identity. We will respond to verified parental requests within the same 30-day timeframe described above.
Forgeworks Labs is based in Australia. The Service is hosted on infrastructure that may be located in the United States or other countries.
If you access the Service from outside Australia, your information may be transferred to, stored in, and processed in Australia, the United States, or other locations where our service providers operate.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure that transfers of your personal data to countries outside the EEA are protected by appropriate safeguards, including:
You may request a copy of the safeguards we use for international transfers by contacting us at [email protected].
We take steps to ensure that your information receives appropriate protection in accordance with this Privacy Policy and applicable law.
The Service may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with.
The Service admits users aged 13 and over globally, and aged 16 and over in the European Economic Area, the United Kingdom, and any other jurisdiction where the digital age of consent under GDPR Article 8 (or equivalent law) is above 13.
Mature content within the Service is gated behind an account-level opt-in that requires self-attestation that you are at least 18 years of age (or the local age of majority, where higher). Users between 13 and 17 cannot enable the mature-content option and we do not knowingly process mature content for them.
We do not knowingly collect personal information from anyone below the applicable minimum age — 13 globally, or 16 in the EEA, UK, and other jurisdictions where the local digital-consent age is above 13. If we learn that we have collected personal information from a user below the applicable minimum age, we will take steps to delete that information promptly and close the account.
If you believe your child has provided us with personal information without your consent, or if you wish to request that we close a minor's account or delete their data, please contact us at [email protected]. We will action verified requests promptly. See also Section 8 ("Rights of minors and parental requests").
When creator tools become available, additional privacy considerations will apply to user-generated Universes and Experiences. We will update this Privacy Policy to address how creator content is handled, including options for public, private, and draft visibility states.
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page.
For material changes, we will make reasonable efforts to provide notice through the Service or via email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
Email: [email protected]
Company: Forgeworks Labs PTY LTD
We aim to respond to all enquiries within a reasonable timeframe.
Your privacy matters to us. Thank you for trusting FableForge with your adventures.