Privacy Policy

Effective Date: September 10, 2026 | Last Updated: September 2026

Welcome to The Demon Codex — Relic Series Generator (accessible at our web application, hereinafter referred to as "The Demon Codex", "we", "us", or "our"). We respect your privacy and are committed to protecting any personal data you share with us. This Privacy Policy explains what information we collect, how we process and store it, and your rights regarding your personal information.

1. Information We Collect

We collect information in the following categories when you interact with The Demon Codex:

Google Identity & Account Information: When you choose to authenticate using Google Sign-In (Firebase Authentication), we receive your public Google profile information including your unique Google Account ID, display name, email address, and profile photo URL.
User-Generated Creative Content: Prompts, creative descriptions, aspect ratios, style modifiers, and generated card attributes that you input or forge within the application.
Cloud Storage & Relic Records: User-saved relics, prompt series, timestamps, and manifestation histories stored in Firestore or Cloud SQL for authenticated users.
Google Workspace (Google Drive) Data: If you explicitly authorize the Google Drive backup feature, our application interacts with your Google Drive strictly through the https://www.googleapis.com/auth/drive.file scope to upload user-requested prompt backups and Markdown lore files created by this app.
Technical & Session Data: Standard browser session identifiers, local storage preferences (such as audio mute toggle and active view), and anonymized diagnostic telemetry.

2. How We Use Your Information

We use the information collected solely for the following legitimate purposes:

To authenticate your identity and maintain your active session across devices.
To generate AI imagery and dark fantasy prompt sets via the Google Gemini API.
To save, organize, and retrieve your personal relic library in the Cloud Archive.
To enable automated or manual export of your prompt collections to your personal Google Drive account upon your explicit click.
To prevent abusive behavior, rate limiting violations, and ensure platform stability.

Google API Services User Data Policy Compliance:
The Demon Codex's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Limited Use Disclosure & Data Sharing Restrictions

We maintain strict boundaries regarding your Google user data:

No Sale of Data: We do not sell, rent, lease, or monetize your personal information or Google user data to any third parties or data brokers.
No Advertising: We do not transfer or disclose your Google user data to advertising platforms or data brokers.
No AI Model Training: We do not use Google user data to train generalized machine learning or artificial intelligence models without your explicit consent.
Third-Party Service Providers: We only transmit data to essential infrastructure providers (Google Cloud Platform, Firebase, and Stripe for payment processing) strictly to host and run the application services.

4. Data Storage, Retention, and Deletion

Your data is stored securely using Google Cloud Platform and Firebase enterprise-grade infrastructure:

Account & Relic Retention: Your saved relics and account profile are retained for as long as your account remains active.
Data Deletion Requests: You have the right to request permanent deletion of your account and all associated relics at any time. To request data deletion, please contact us at mod26501@gmail.com. We will verify your identity and purge your stored records within 30 business days.
Revoking Google Access: You can revoke The Demon Codex's access to your Google account at any time via your Google Account Security Permissions.

5. Security of Your Information

We implement industry-standard administrative, physical, and technical safeguards. All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS/HTTPS). OAuth authentication tokens are handled securely on the client-side via Google Identity Services and are not stored in unencrypted plain text.

6. Cookies and Local Storage

The Demon Codex utilizes local browser storage (localStorage) to save non-sensitive user interface preferences, such as audio synthesizer mute settings, active tag filters, and transient prompt inputs. You may clear your browser cache and local storage at any time.

7. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our administrator:

The Demon Codex Team
Email: mod26501@gmail.com
Website: The Demon Codex Application