Privacy Policy

• Google account: your email address, name, and profile image when you sign in with Google. This is how we know who you are.
• Chat messages: the messages you send to Terra and her replies. We keep these so the service works (conversation history), so we can debug problems, and so we can review for abuse and safety.
• Server data: your server's name, status, join address, settings (difficulty, whitelist, seed), and world snapshots/backups. Snapshots are stored so your world can be restored.
• Billing identifiers: Stripe customer and subscription IDs, and subscription status. Full card numbers are handled entirely by Stripe — we never see or store them.
• Operational logs: basic request logs (timestamps, error traces) used to keep the service reliable and investigate incidents.

We use this information to authenticate you, process your $14.99/mo subscription, provision and operate your Minecraft server, respond to support requests, and keep the service safe and reliable. We do not sell your personal data, and we don't use it for advertising.

Terra is powered by AI models from OpenAI. The messages you send in chat are transmitted to OpenAI to generate replies and to call the server-management tools you ask for. OpenAI processes this data as our service provider under their terms; we do not allow them to use it to train models on their consumer products. See our AI disclosure for more on how Terra works.

• Stripe — payment processing and subscription billing.
• Google — sign-in (OAuth).
• OpenAI — the AI models behind Terra's chat.
• Fly.io and Hetzner — cloud infrastructure hosting the app and game servers.

These providers process data on our behalf under their own privacy policies and contractual obligations.

Dripstone uses a small number of strictly necessary cookies: a session cookie that keeps you signed in (set by our NextAuth authentication) and a CSRF token cookie that protects forms and sign-in from forgery. These are required for the service to work. We do not set advertising or cross-site tracking cookies.

We keep account and server records while your account is active and as needed for billing, security, or legal obligations. Chat history is retained so your conversations persist across sessions. World snapshots are kept until you delete them or your account is deleted. If you delete your account, we remove your personal data within 30 days except where we must retain records (for example, billing records required by law).

If a security incident exposes your personal data, we will notify you at your account email without unreasonable delay, describe what happened and what data was involved, and tell you what we are doing about it.

Dripstone requires a Google account to sign in and a paid subscription to create a server, and is intended for the account holder. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

You can ask us what data we hold about you, ask for corrections, ask for deletion, or export your world snapshots. If you're in California, this includes your CCPA/CPRA rights to know, delete, and opt out of any sale or sharing of personal information (we don't sell personal information). Email hello@playdripstone.com from your account email and we'll handle it.

This policy will evolve as Dripstone grows beyond soft launch. We'll update the date above and, for material changes, notify you in the app or by email.