Isentroth Privacy Policy

Effective date: 2026-07-31

Isentroth is published by DiSabatino LLC, a Wyoming (USA) limited liability company, publishing as Schedule 3 Wizards. This policy covers the game Isentroth on Steam and this website. It's written in plain language because honesty is the house rule here: we tell you exactly what the game sends, what we keep, and why — and where something is a commitment rather than a built feature, we say so.

The one-sentence version: Isentroth's Game Master is a live AI that runs on our server, so the text you type in-game is sent to us and to our AI provider to generate the story — we keep a log of those exchanges to run and improve the game, we don't sell anything to anyone, and you can ask us to delete your data at any time.

What we collect

Isentroth is an online game: the Game Master lives on our server, not on your machine. Each time you take a turn, your game client sends our server what the GM needs to respond:

• The text you type — your message to the Game Master.
• Recent conversation history — the last few exchanges, so the GM remembers the scene.
• Your campaign context — character sheet, world facts, and game state from your save file (stats, tracks like health and momentum, vows, and similar).
• Your action, when you roll — the game sends your intent (which stat, what bonuses); the dice are rolled on our server so the outcome is fair and tamper-proof.
• Your Steam account ID — when you start a session, Steam gives the game a ticket; we verify it with Valve (that you're you, and that you own the game) and identify your session by your numeric Steam ID from then on. We never see your Steam password, email, or payment details — purchases are handled entirely by Steam.

From each turn, our server stores a log entry containing: your Steam ID, the game's App ID, a session identifier and turn number, the text you typed, the Game Master's response, which model tier answered, token counts, the server's dice result, the resolved game state after the turn, automated quality/enforcement markers, and a timestamp. We also keep a daily usage ledger per Steam ID (token counts and request counts) to enforce fair-use limits.

The conversation history and campaign context sent with each turn are used to generate the response but are not stored in the log — only the typed message and the GM's reply are kept.

What we don't collect: your real name, email address, payment information, friends list, or anything else from your Steam profile beyond the numeric ID and ownership check. We don't run ads, ad trackers, or analytics SDKs, and we don't sell or rent any data to anyone. Like nearly every online service, our hosting provider's standard server logs may briefly record connection metadata such as IP addresses; those live with the hosting provider under their retention practices, not in our game database.

One practical warning: the text box is a story, but it's also a text box. Please don't type real-world personal information (yours or anyone else's) into the game — it would be stored like any other message.

Why we collect it

1. To run the game. The Game Master cannot narrate without reading what you wrote, and server-side dice and state resolution are what keep the game honest — the rules are enforced where a modified client can't reach them. This processing is simply what the product is.
2. To operate responsibly. The usage ledger enforces daily fair-use limits, and the logs let us investigate problems, abuse, and cost anomalies.
3. To improve the game and its AI. Stored exchanges are reviewed and scored — including by an automated AI judge — to measure the Game Master's quality, find its failures, and train it to be better. This is how the GM improves between updates. Your participation in this third purpose is governed by the consent choices below.

The AI behind the Game Master

The Game Master's responses are generated by a large language model operated by Anthropic (the maker of Claude). To generate each response, the text you type — along with your conversation history and campaign context — is sent from our server to Anthropic's API. Our stored exchange logs are also sent to Anthropic's API in batches for automated quality scoring.

We use Anthropic under their Commercial Terms of Service, which state that Anthropic may not train its models on customer content submitted through the API (unlike consumer chat products, where training can be on by default). In plain terms: your game text passes through Anthropic to generate the story, but Anthropic does not use it to train Claude. You can read their terms here: Anthropic Commercial Terms of Service (effective June 17, 2025 at the time this policy was written). Anthropic processes and retains API data per those terms and their own privacy documentation.

If we ever change AI providers or the terms materially change, we will update this policy before the change affects your data.

Other service providers

We keep the list short, and we name names:

• Anthropic (USA) — generates the Game Master's responses and scores logged exchanges, as described above.
• Valve / Steam (USA) — distributes the game, processes all purchases, and verifies your session tickets and game ownership. Steam's own privacy policy governs what Valve does.
• Railway (USA) — hosts our game server and database. Your logged exchanges live in a database on their infrastructure.

No data broker, ad network, or analytics vendor is on this list, because we don't use any.

How long we keep it

• Raw exchange text (what you typed, what the GM answered): kept for 12 months from the date of the exchange. At that point the text itself is erased — what remains is the anonymous statistical residue described in the next bullet, which no longer contains anything you wrote.
• Aggregates and derived data (quality scores, enforcement markers, dice statistics, usage counts — data that describes gameplay in the aggregate rather than quoting you): kept indefinitely. This is what tells us how the GM is performing over time.
• If you opted in to improvement (see Your choices), your exchanges may be kept beyond 12 months as part of the improvement corpus — that is what opting in is for, and we'd rather say so plainly than bury it. If you did not opt in, or were never asked, your text is erased at 12 months regardless.
• One exception, in the other direction. Our moderation screen refuses a small set of categories outright — the illegal ones. For the most serious of those, we do not keep what was typed at all: we store only a one-way fingerprint of it and which rule refused it. That is enough to show that a refusal happened and of what kind, without us holding the text.
• Deletion requests override all of the above — see below.

Your choices

Playtesters: if you're in a closed playtest, contribution of your gameplay data to game and AI improvement is a condition of the invitation — it's stated in the playtest agreement you accepted, and it's the entire point of a playtest. If you're not comfortable with that, the right move is to sit the playtest out and buy the game at launch, where you get the choice below.

Players of the released game: using your exchanges to improve the game and its AI is opt-in. You'll be asked once, plainly, during the game's opening session, and you can change your answer in settings at any time. If you opt out:

• Your text is still sent to our server and to Anthropic to generate the Game Master's responses — that's how the game works, and there's no offline mode for the GM — and it is still subject to the operational logging and retention described above.
• But your exchanges are excluded from the improvement and training corpus: not used for AI training, judge calibration, or quality datasets.

Opted-out exchanges are still written to our operational log — we need them to investigate abuse, diagnose failures, and answer your own support requests — and they are excluded from the improvement corpus by a filter we test on every build.

Deletion and access

You can ask us, at any time, to delete the data associated with your Steam ID, or to tell you what we hold about it. Email matt@disabatinollc.com from any address, include your Steam ID (your profile's steamID64, or a link to your Steam profile), and say what you want. We may ask you to verify control of the account — for example, by adding a short code to your public Steam profile name or bio — so we don't delete someone's data at a stranger's request.

We commit to fulfilling verified deletion requests within 30 days. Deletion removes your stored exchanges and usage ledger entries, including anything held in the improvement corpus; anonymous aggregates that no longer reference your Steam ID are not affected. Deleting your data does not affect your ability to keep playing — a fresh log simply starts with your next session.

Age

Isentroth is an adult game and is age-gated on Steam. It is not directed at or intended for anyone under 18, and we do not knowingly collect data from anyone under 18. If we learn that we have, we delete it. If you are a parent or guardian and believe your child has played, email us and we will remove the data.

Where your data lives, and your rights elsewhere

We are a United States company and our servers and providers are in the United States; if you play from elsewhere, your data is processed in the US.

We are a very small studio, and we won't pretend otherwise: we do not currently maintain the formal compliance apparatus of large publishers (such as an EU/UK representative or certified transfer mechanisms). What we do instead is simple and real — the deletion and access rights described above are honored for every player, in every country, without your needing to cite a statute. If you believe your local law (such as the GDPR, UK GDPR, or a US state privacy law) gives you additional rights, email us and we will work through it with you in good faith.

Security

Sessions are authenticated through Steam's ticket system; connections to our server use encrypted transport; game-rule enforcement and dice run server-side so a modified client can't corrupt shared systems; and access to the stored logs is limited to the studio, behind authenticated admin credentials. No internet service can honestly promise perfect security, and we won't — if we ever discover a breach affecting your data, we will tell you what happened and what we're doing about it.

Changes to this policy

If we change this policy in a way that matters — new data collected, a new provider, a changed retention period — we'll update the effective date above and note the change on this page before it takes effect. We will never quietly expand what we collect.

Contact

DiSabatino LLC (publishing as Schedule 3 Wizards) Wyoming, USA matt@disabatinollc.com

Questions, deletion requests, or anything this page didn't answer — email. A human (the founder) reads it.