MyRPG — Windows privacy

MyRPG

This policy explains how MyRPG handles room, player, AI, purchase, support, and report data. MyRPG is published by Vellora Studio One.

Effective date: 31 August 2026

1. Scope and local-first design

MyRPG is a Windows role-playing application for solo play and private groups. The person who creates a room runs the MyRPG server on their own Windows device (the “host”). Vellora Studio One does not operate a MyRPG cloud account service and does not receive a copy of locally hosted rooms merely because the app is used.

2. Data processed by MyRPG

The host device can process and store room codes, player display names, character sheets and portraits, player actions and table messages, game events and dice results, AI prompts and outputs, generated images and narration, reconnect-token hashes, application and AI-provider settings, Microsoft Store entitlement status, and diagnostic logs. A participant’s browser stores a reconnect token locally so that the same player session can be restored.

Do not enter sensitive personal information into a room. Anyone who receives a private room link may be able to see the room’s public story and player-submitted material.

3. Where data goes

• Host and participants. Room activity is sent over the local or host-accessible network to the device running the MyRPG server. The host controls that device and its locally stored room data. Participants receive public room content and any private content specifically assigned to them.
• Local AI. When Local AI is selected, supported generation runs on the host device. Downloading a model or runtime may contact its distributor, but MyRPG does not include room content in the model-download request.
• OpenAI. When Online AI is selected, MyRPG sends the prompt and relevant game context needed for the requested narration, image, portrait, or voice output to OpenAI using the host’s API credentials. OpenAI processes that data under its own terms and privacy policy. The host can stop future online-AI sharing by selecting Local AI or disabling the relevant online feature.
• Microsoft Store. Microsoft handles Premium Forever checkout and account-based licensing. MyRPG receives product and entitlement status needed to offer, verify, and restore the purchase; Vellora Studio One does not receive the user’s payment-card details through the app.
• Support and reports. Choosing Report content or contacting support opens the user’s email application. Vellora Studio One receives only the message and attachments the user chooses to send to support@vellorastudio.one. The prepared report may include a shortened room identifier when available, but it does not automatically include API keys, reconnect tokens, private prompts, private messages, or the full private-room link.

4. Why data is used

MyRPG processes data to create and reconnect private rooms, apply game rules, preserve story continuity, generate optional AI content, display and restore Store entitlements, troubleshoot failures, provide support, investigate safety reports, and protect users and the application.

5. Advertising, analytics, and sale of data

MyRPG does not contain advertising and does not send game data to Vellora Studio One for behavioral advertising or analytics. Vellora Studio One does not sell personal information obtained through MyRPG. Third-party services selected by the host, including OpenAI and Microsoft Store, process their own service data under their respective policies.

6. Retention and deletion

Room data, generated media, settings, cached entitlement information, and diagnostic logs remain on the host device until the host removes the relevant application data. The reconnect token stored by a participant remains in that browser until the participant clears the site’s local data. Vellora Studio One cannot retrieve, correct, or erase local-only data it never receives; participants should ask the room host about that data.

OpenAI and Microsoft determine retention for data they process. Support correspondence and content reports are retained only as long as reasonably needed to answer the request, investigate the report, comply with legal obligations, and maintain a record of the outcome.

7. Choices and controls

The host chooses Local AI or Online AI independently for supported text, image, and voice features and can disable optional image or narration generation. Participants decide what they submit to the host and what they include in an email report. Store purchases and account data can be managed through the user’s Microsoft account.

8. Security

MyRPG hashes reconnect tokens in the host database and does not expose configured API keys to room participants through the web interface. Online-provider requests use encrypted HTTPS connections. No system is completely secure, and protection of a locally hosted room also depends on the host’s device, network, account, firewall, and sharing choices. Never include API keys, reconnect tokens, full private-room links, or private messages in a support request.

9. Children

MyRPG is not designed to collect children’s personal information. A child who is not legally able to consent to data processing in their location should use MyRPG only with a parent or guardian. Never create, request, or share sexual content involving minors.

10. International providers

OpenAI and Microsoft may process service data in countries other than the user’s country. Review the OpenAI privacy policy and the Microsoft Privacy Statement before enabling or using those services.

11. Privacy requests and contact

For privacy questions or requests concerning information sent directly to Vellora Studio One, email support@vellorastudio.one. Identify MyRPG and describe the request without including room credentials or other secrets. For local-only room data, contact the room host. For OpenAI or Microsoft data, contact the relevant provider.

12. Changes to this policy

This page may be updated when MyRPG’s features, providers, or legal requirements change. The effective date above identifies the current version.