PRIVACY.md

# Questforge Privacy Policy

Effective date: August 12, 2026

Questforge is a skills-only plugin published by Adrián Melic. It runs within the OpenAI product surface where you install it and does not operate a publisher-controlled server.

## Data Questforge Uses

Questforge can use the campaign information you choose to provide, including character names and descriptions, story choices, table preferences, campaign notes, generated images, and optional audio. In a local Codex workspace it can also create campaign state, rules indexes, checkpoints, session logs, local analytics, visual prompts, galleries, viewer files, save manifests, and portable archives inside the project or output path you select.

Do not provide passwords, API keys, payment information, government identifiers, health information, or other sensitive personal data. Questforge does not need them.

## Purpose

This information is used only to run the requested campaign, preserve continuity, resolve game rules, generate requested table aids, and help you resume play.

## Storage And Retention

Questforge does not transmit campaign data to Adrián Melic or to a Questforge server. Local campaign files remain on your device or in the workspace you selected until you delete them. If you explicitly enable cloud saves, the OpenAI surface uses a storage connector already installed in your account to write the canonical campaign SaveSet directly to the exact third-party folder you select. Questforge records opaque folder and verification metadata in the campaign manifest, never provider passwords or access tokens. Chat and generated-media retention is controlled by the OpenAI product and account settings you use.

The optional local analytics log records game events such as checks, choices, rewards, visuals, and pacing notes. It is stored in the campaign folder and is not telemetry sent to the publisher.

## Third Parties

- OpenAI processes conversations, files, and generated media according to the terms and privacy settings of the OpenAI product you use.
- A cloud-storage provider such as Google Drive processes files only when you activate its connector, select a folder, authorize writes, and keep synchronization enabled. That provider's account, sharing, retention, and deletion controls apply. Google Drive is the first 1.3 beta target; equivalent providers may be used when the current surface exposes the required capabilities and passes acceptance.
- If you explicitly request the complete SRD setup, Questforge downloads the official SRD PDF from `media.dndbeyond.com`. The default offline setup does not make this request.
- GitHub hosts the public Questforge source repository and compatibility policy pages. The canonical product page is [adrianmelic.com/questforge](https://adrianmelic.com/questforge).
- The bundled ambience tracks were generated with Suno, but playing them is local and does not contact Suno.

Questforge does not sell personal data, serve advertising, track users across services, or share campaign data with the publisher.

## Your Controls

You can ask Questforge to show its current player-facing state, create a checkpoint, export a canonical ZIP, stop local or cloud writes, disconnect a storage connector, or continue in chat-only mode. You can delete local data by removing the campaign folder and `.questforge` cache you created, and delete cloud copies through your storage provider. Review files before publishing, sharing, or attaching them because campaign logs may contain information you entered.

## Contact

For privacy questions, email `info@adrianmelic.com`, use the [Questforge support page](https://adrianmelic.github.io/codex-questforge/support.html), or consult the current [publisher privacy policy](https://adrianmelic.com/privacy-policy).