Privacy Policy
Effective October 22, 2026
This policy explains what Arrowstorm Technologies, LLC ("Arrowstorm", "we") collects through arrowstorm.xyz and DECKER, our AI text adventure (on the web at arrowstorm.xyz/decker and through its command-line client), how we use it, who we share it with, and how long we keep it. Questions or requests: contact@arrowstorm.xyz.
The short version
- DECKER is powered by AI. What you type, and DECKER's replies, are processed by Anthropic to generate the game.
- We keep server-side transcripts of your play sessions for 30 days, then delete them.
- Events from your adventures can become shared world lore that other players see. Lore is reviewed by a person before it goes live and is never shown with your name or email.
- Payments go through Stripe. We never see or store your card details.
- We don't use advertising, analytics or tracking cookies, and we don't sell your data.
What we collect
Account details. If you register: your email address and a password, which we store only as a one-way hash (bcrypt). If you play as a guest, we create an account with a random internal identifier and no email. We also keep account settings such as your chosen model tier, and account status such as bans or suspensions.
Gameplay. Each turn, your input, the recent conversation and your game state (established facts, inventory, goal) are sent to our server and on to Anthropic. Our server records the turns it serves, your input and DECKER's reply, as a transcript of that play session.
Shared world lore. When an adventure ends, short one-sentence summaries of events from it (for example, "a gate was sealed") may be extracted from the transcript, screened automatically and then reviewed by us. Approved lore can appear in other players' games and through our public lore feed, without any link to your name, email or account.
Safety records. To protect the game and other players, inputs that look like attempts to manipulate or break the game are logged with your account, along with whether they succeeded.
Purchases and shards. We keep a ledger of your shard balance: purchases (which bundle, how many shards, when), shards spent per turn, conversions, refunds and bonuses. Payment itself happens on Stripe's checkout page.
Usage and cost records. For each turn we record which model tier was used, how many tokens it took and what it cost us, so we can run and price the service.
Referrals. If you sign up with someone's referral link, we record that you were referred by them.
Technical information. Our server briefly uses your IP address in memory to limit abuse (for example, how many accounts can be created from one address). We don't store IP addresses in our database. Our hosting providers may keep standard request logs.
What stays in your browser
DECKER stores your login session and your current save game in your browser's local storage, and a service worker caches the game's files so it loads quickly. This information stays on your device unless it is sent with a turn as described above. The command-line client keeps the same kind of information in files in your user configuration folder. You can remove it at any time by clearing the site's data or deleting those files.
arrowstorm.xyz and DECKER load fonts from Google Fonts, so your browser connects to Google's servers to fetch them.
How we use it
- To run DECKER: generating turns, keeping your game consistent, and saving your progress and balance.
- To build the shared world, through reviewed lore as described above.
- To process purchases, referral rewards and refunds.
- To prevent abuse, fraud and attempts to misuse the service.
- To understand costs and improve the game.
Who we share it with
| Service | What it receives | Why |
|---|---|---|
| Anthropic | Your inputs, recent conversation and game state; DECKER's replies; lore candidates | Generates the game, screens inputs and lore. Under Anthropic's published policy, API inputs and outputs are deleted within 30 days, with exceptions such as enforcing its usage policy. |
| Stripe | Payment details you enter on Stripe's checkout page; your account ID and bundle | Processes purchases |
| Railway | Everything stored by our game server | Hosts DECKER's backend and database |
| Our web host | Requests to arrowstorm.xyz | Serves the website and game files |
| Google Fonts | Your IP address and browser details | Delivers the site's fonts |
We don't sell or rent personal information, and we don't share it with advertisers. We may disclose information if the law requires it, or to protect the rights and safety of our users and the service.
How long we keep it
| Data | Kept for |
|---|---|
| Play-session transcripts | 30 days, then deleted automatically |
| Account, shard ledger, usage records, referrals and safety records | As long as your account exists |
| A guest account after you convert it to a registered account | Up to 30 days, then deleted (your progress moves to the new account) |
| Approved shared lore | Indefinitely, as part of the shared world, without any link to you once your account is deleted |
| Save game and login in your browser | Until you clear them |
Your choices and rights
You can ask us to access, correct, export or delete your personal information by emailing contact@arrowstorm.xyz from the address on your account. Guest accounts can be deleted on request too; tell us roughly when you played. Deleting your account removes your account details, balance, transcripts and records. Approved lore stays in the shared world, unlinked from you. Depending on where you live, you may have additional rights under local law. We'll honor them, and you won't be treated differently for using them.
Children
DECKER is not intended for children under 13, and we don't knowingly collect information from them. Its stories can include violence and dark themes. If you believe a child under 13 has used DECKER, contact us and we'll delete the account.
Security
Connections to our services are encrypted, passwords are stored only as hashes, and access to our systems is limited. No system is perfectly secure. If we learn of a breach affecting your information, we'll notify you as the law requires.
Changes
If we change this policy, we'll update the effective date above. For significant changes, we'll also give notice on the site or in DECKER.
Contact
Arrowstorm Technologies, LLC
contact@arrowstorm.xyz