Privacy Policy

1. Who We Are

RealmSwap Studio operates the RealmSwap service. We are based in British Columbia, Canada. For any privacy-related questions, please contact us at support@realmswap.site.

2. Information We Collect

• Your email address, if you create an account (for sign-in and billing).
• The photo you upload, and a Dungeon Master photo if you add one — used only for your render.
• The posters you create.
• Basic usage records (for example, how many renders you've made and a scrambled form of your IP address) so we can enforce free-trial limits and stop abuse.
• Purchase records from Stripe (what you bought and when — not your card number).

3. How Your Photo Is Used

When you press Generate, your photo is held in memory just long enough to be checked and sent, together with your poster settings, to OpenAI's image API, which creates the poster. Your original photo is not written to our storage. Under OpenAI's API data policy, OpenAI does not use data sent through its API to train its models, and may keep it for up to 30 days to monitor for abuse before deleting it, unless the law requires longer. See also OpenAI's business privacy page.

To make the high-resolution download, the finished poster (not your original photo) is sent to fal.ai, an image service that enlarges it.

4. What We Store, Where, and for How Long

• Uploaded photos (including Dungeon Master photos): never saved by us.
• Guest preview posters: stored privately in our cloud storage and deleted automatically within 24 hours. An automatic cleanup runs every hour.
• In-between files (for example, the copy of a poster before it is enlarged): deleted within 24 hours by the same cleanup.
• Signed-in users' posters: saved privately in your account until you delete your account or ask us to delete them at support@realmswap.site.
• Account and purchase records: kept while your account exists, and billing records as long as Canadian tax law requires.

Our storage and database are hosted by our cloud provider. Payments are processed by Stripe, which handles your card details under Stripe's Privacy Policy; we never see or store them.

We use Umami, a cookieless, privacy-friendly analytics tool, to see aggregate visit statistics (such as page views and how many posters are made). Umami sets no cookies and collects no personal data — never your name, email, photo or IP address. See Umami's Privacy Policy.

Bot Protection

We use Cloudflare Turnstile to protect RealmSwap from bots and abuse. Turnstile processes limited technical information such as your IP address and browser details to tell humans from bots. See Cloudflare's Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/ and Cloudflare's Privacy Policy: https://www.cloudflare.com/privacypolicy/

5. Your Rights

You may request deletion of your account and associated data at any time by emailing support@realmswap.site. We will process verifiable requests in accordance with applicable Canadian privacy law.

6. Changes to This Policy

We may update this Privacy Policy as our service evolves. The effective date at the top of this page will always reflect the latest revision.