Legal & content policy

GMProjects is a game-running toolkit that provides prep workspaces, campaign organization, resource libraries, and optional AI-assisted prep tools for tabletop RPG game masters.

By creating an account or using GMProjects, you agree to use the service responsibly. You must be at least 13 years old (or the minimum age of digital consent in your jurisdiction) to use the service.

You are responsible for maintaining the security of your account credentials. GMProjects is not liable for losses caused by unauthorized account access resulting from credential sharing or weak passwords.

We may update these terms from time to time. Continued use of the service after changes constitutes acceptance of the updated terms.

What we collect: Account email address, profile information (display name, avatar), prep/campaign/resource data you create, and basic analytics/usage data to improve the service.

Payment data: GMProjects does not store card numbers or full payment details. All payment processing is handled securely by Stripe. We receive only transaction metadata necessary to credit your account or manage subscriptions.

Private vs. public content: Private prep, campaigns, and resources are not intentionally made public. Content you choose to publish to the Community Library becomes public according to the visibility settings you select (public, unlisted, or private).

Analytics: We may collect anonymized usage data and errors to improve performance, fix bugs, and guide feature development. We do not sell personal data to third parties.

Your rights: You can request deletion of your account and associated data by contacting support. Some data may be retained as required by law or for legitimate business purposes (e.g., payment records).

GMProjects may use cookies, local storage, and similar technologies for:

• Authentication and session management
• Security protections
• Remembering preferences
• Core app functionality
• Credit, supporter, and payment state display
• Future advertising preferences
• Future non-personalized ad delivery

Strictly necessary storage: Certain cookies and local storage entries are required for the app to function (e.g., session tokens, auth state). These cannot be disabled without breaking login or core features.

Optional advertising preferences: Where supported in the future, advertising-related storage may be controlled through Privacy Choices. No live ad scripts are currently required by this update.

GMProjects may show advertising on eligible free-user routes in the future. Ads are intended to help keep the core product free for users who do not choose a supporter or ad-free subscription.

Non-personalized ads: The initial ad model is planned as non-personalized ads. This means ads are shown based on page context rather than personal profiles or behavioral tracking.

Future ad networks: If third-party ad networks are used in the future, they may receive technical data such as IP address, user agent, approximate location, device/browser data, page URL, and ad interaction data as part of standard ad delivery. We will update this policy before enabling such networks.

Ad-free users: Active supporter or ad-free subscribers will not see ads while their entitlement is active.

Ad-prohibited routes: Ads will not be shown on billing, credits, account, authentication, checkout, or Player Packet routes.

Current status: GMProjects does not currently load live third-party ad scripts unless ads are enabled in production. Before live ads are enabled, we will provide appropriate notice and privacy controls.

We work with selected service providers to run GMProjects. The processors we use may change as the product evolves. We will update this page when major processor categories change.

• Supabase — Authentication, database, storage, and backend infrastructure.
• Stripe — Payments, supporter subscriptions, and credit purchases.
• Cloudflare / hosting provider — Edge delivery, hosting, and performance.
• Lovable AI Gateway / AI provider — AI-assisted generation features, where applicable.
• Google — Advertising only when and if enabled in the future.

Depending on where you live, you may have rights under privacy laws such as the EEA/UK GDPR, the California CCPA/CPRA, or the Brazil LGPD.

Rights you may have:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection/Restriction — object to or request restriction of certain processing.
• Opt out of sale/share — where applicable, opt out of the sale or sharing of personal information for cross-context behavioral advertising.

To exercise any of these rights, contact us through the support channels listed on this page. We will respond within the timeframes required by applicable law.

• Account data: Retained while your account is active. Deleted or anonymized upon account deletion, unless legal obligations require retention.
• Campaign / library / prep records: Retained until deleted by you or as part of an account deletion process.
• Payment records: Retained as required for tax, accounting, and legal compliance.
• Published Community snapshots: May remain public until unpublished or deleted by you.
• Backups and logs: May persist for a limited period for security, debugging, and operational recovery.
• Support and legal requests: May be retained as needed to resolve disputes, enforce terms, or comply with legal obligations.

Your data may be processed in countries other than your own, including where our service providers operate (e.g., the United States, the European Union). Where required by law, we use appropriate safeguards such as standard contractual clauses to protect your data during international transfers.

GMProjects is not directed to children under 13. Users under 13 should not use the service. If we learn we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information promptly.

Player Packet pages (URLs beginning with /player-view/) are intended as read-only handouts shared with your players.

• Player Packet pages are permanently ad-free.
• Player Packet pages do not load third-party advertising or behavioral-tracking scripts.
• Player Packet pages do not expose player email addresses or GM-only data.
• Invalid, revoked, or expired tokens return generic unavailable responses to avoid leaking the existence of a campaign or player.

Supporter subscriptions and future ad-free subscriptions may remove ads while active. Credits are separate from ad-free status unless explicitly stated.

If you are a current supporter subscriber, your active subscription is treated as an ad-free entitlement. This may change if separate ad-free plans are introduced in the future.

No standalone ad-free subscription plan is currently offered. Any future ad-free plan will be announced separately.

Toolkit Credits are optional digital credits used for assisted prep actions within GMProjects (e.g., polish a premise, generate a section, rework content). Manual prep, empty templates, and core workspace features can be used without spending credits.

No cash value: Credits have no cash value outside of GMProjects and are not redeemable for money. They are not transferable between accounts unless a future transfer feature is explicitly announced and supported.

No guaranteed outcome: Credits grant access to assisted prep tools, but they do not guarantee a specific creative result. Output quality depends on input quality, prompt specificity, and the nature of the request.

Failed actions: If an assisted action fails due to a technical error, the app should refund the spent credits automatically when the failure is detected. If a refund does not occur, contact support.

Abuse: Attempts to exploit, duplicate, or fraudulently generate credits may result in account restriction or termination.

Supporter subscriptions are optional monthly contributions to help sustain GMProjects and the LocalFlow toolkit. They are entirely voluntary.

No credits granted: Supporter subscriptions do not grant Toolkit Credits, special paid features, or any credit balance changes unless explicitly stated in a future announcement.

Billing: Subscriptions are billed monthly through Stripe. You can manage or cancel your subscription at any time through the Stripe billing portal accessible from your account page. Cancellation stops future billing; past payments are not automatically refunded.

Not a charitable donation: Supporter contributions are not tax-deductible charitable donations. GMProjects is not a registered nonprofit or charity.

No guaranteed features: Supporter status does not entitle you to special feature access, priority support, or custom development unless explicitly offered as part of a specific tier.

Toolkit Credit purchases: Credit purchases are digital and generally final once credits are delivered to your account or used. If you purchased credits accidentally and they have not been used, contact support for review. We do not guarantee automatic refunds.

Billing errors: Duplicate charges, failed fulfillment (e.g., payment processed but credits not granted), or clear technical billing errors may be reviewed and corrected. Contact support with transaction details.

Supporter subscriptions: You can cancel anytime to stop future billing. Past monthly supporter payments are generally not refunded except in cases of billing error or where required by law.

No limitation of rights: Nothing in this policy limits any mandatory consumer refund rights you may have under applicable law.

You retain ownership of the prep, campaigns, and resources you create. You choose whether to keep content private or publish it to the Community Library.

Visibility: Published content can be set to public (discoverable), unlisted (accessible by link), or private (not visible to others). You control the visibility of your own content.

Rights and responsibility: You must not upload, generate, publish, or sell content you do not have rights to use. Do not publish copyrighted adventures, proprietary setting text, protected characters, or third-party material without proper rights or permission.

Content removal: GMProjects may remove or restrict access to content that is reported as infringing, abusive, illegal, or in violation of these policies. Repeat violations may result in account restriction.

Attribution: Content imported or remixed from the Community Library should retain appropriate attribution to the original creator where applicable.

Creator rewards: Any future creator rewards, payouts, or revenue-sharing programs will be announced separately. Until such a program is officially launched and announced, no creator earnings or payouts are active. Do not rely on unrealized reward features.

AI-assisted, not AI-created. The user remains the author and editor of all prep material. You must review, edit, and finalize all output before using it at the table or sharing it publicly.

GMProjects provides game-running and AI-assisted prep tools. AI is a supporting engine, not the product identity. Outputs are draft prep material — they are not guaranteed to be publish-ready, mechanically correct, or appropriate for every table.

You are responsible for ensuring that AI-assisted output complies with your group's preferences, safety tools, and any publisher guidance you follow. Use your judgment.

GMProjects is not affiliated with, endorsed by, or sponsored by any tabletop RPG publisher, game system owner, or intellectual property holder. Compatibility references are descriptive only.

Users should review compatibility language and trademark guidance before publishing or distributing content publicly. GMProjects does not provide legal advice on trademark, copyright, or licensing questions.

For privacy requests, billing questions, refund inquiries, content reports, or general support, contact us through the support channels available on the site.

Please include relevant details (transaction ID, account email, description of the issue) so we can respond efficiently.