Privacy Policy

1. Who is responsible

ForeverDungeons.com is operated by Nomabond, reachable at nomabond@foreverdungeons.com. The operator is responsible for the account and plan information described here. We are independent of Blizzard Entertainment and Wowhead.

This policy covers our app. Following a link to another website is subject to that website’s policy. A local Studio installation keeps accounts and saved plans on the computer running Studio; connecting a hosted service does not automatically upload existing local accounts or plans.

2. What the app uses, and why

The app does not currently include advertising, embedded payment processing, marketing emails, or third-party analytics. Its performance panel measures loading and rendering in your browser; those measurements are not sent as analytics by the app.

We use account and plan data to provide the service you request; operational data to maintain security and reliability; and limited records when necessary to meet legal obligations. Where privacy law requires a legal basis, these correspond to performance of the service contract, legitimate interests in operating a secure service and administering voluntary support, and compliance with legal obligations. Optional processing requiring consent will be presented separately.

3. Who can see a plan

Private plans are restricted to their owner for ordinary app access. Unlisted plans can be read by anyone who receives the link. Public plans can be read without signing in. Share only information intended for that audience.

The service does not provide end-to-end encryption. Authorized operators and providers may process stored data to run the service, investigate faults or abuse, and meet legal obligations. We do not sell personal information or share it for targeted advertising. Changing visibility or deleting a plan cannot remove exports, screenshots, or copies already made by other people.

4. Hosting and external services

Supabase: provides account authentication and plan storage, with the database in the U.S. West (Oregon), us-west-2 region. Supabase processes application data on the operator’s behalf under its Data Processing Addendum. Its Privacy Policy describes its separate business activities.

Cloudflare: delivers the website and dungeon assets and provides network protection. It processes connection and request information to deliver those services. See its Privacy Policy and Data Processing Addendum.

Fly.io: hosts the navigation service that calculates routes and landing positions. Navigation requests contain the dungeon and coordinate data described above. See Fly.io’s Privacy Policy and processing and retention information.

Resend: delivers confirmation and password-recovery emails sent by Supabase. It processes the recipient email address, message content, authentication links, and delivery information. See its Privacy Policy and Data Processing Addendum. Support correspondence also passes through the email services used by you and the operator.

These providers may process data in the United States and other countries. Selecting a database region does not mean every delivery, support, or security operation stays there. Their linked notices and processing agreements describe international processing and safeguards, including standard contractual clauses where applicable. Contact us for information about safeguards relevant to your data.

Wowhead item details: inspecting an item in local Studio or the hosted website sends an on-demand request directly from your browser to nether.wowhead.com. Wowhead receives the item identifier and ordinary connection information such as IP address and browser information. This request omits credentials and the referring page URL. No item-detail request is made until you hover, focus, or open an item tooltip. Item and spell icons come from the dungeon package. Tooltip results are cached temporarily in browser memory. Wowhead’s handling of request data is described in Fanbyte’s Privacy Policy.

Buy Me a Coffee: the optional support link takes you away from ForeverDungeons to our external support page. We do not embed its scripts, and it receives no request from our app until you follow the link. Buy Me a Coffee and its payment provider handle checkout; ForeverDungeons does not handle card details. Their collection of payment and connection information, and the supporter details made available to Nomabond, are described in Buy Me a Coffee’s Privacy Policy. Review its visibility settings before leaving a name or message.

We may disclose data when required by law or when reasonably necessary to investigate abuse, protect users, or address a rights complaint. We do not make a public copy of private plans for those purposes.

5. Browser storage and local Studio

Browser local storage remembers preferences such as movement controls and dismissed guidance, and can retain the identifier of your last opened plan. Hosted authentication also keeps session and refresh tokens in local storage so you can remain signed in between visits. Local Studio uses its own session cookie. Sign out on a shared computer. Clearing site data removes stored browser preferences and sessions; it does not delete an account or saved plans on a server.

Dungeon files and icons can remain in your browser’s HTTP cache. Unsaved plan edits are held in the current page and can be lost when it closes. Local Studio saves accounts and plans in its local database and keeps launcher-created backups on that computer. These local backups are not automatically uploaded to Supabase.

6. Keeping and removing information

Account information and saved plans are retained while needed to provide your account, until deletion is requested or the service is closed, subject to limited legal and security requirements. Deleting a hosted plan removes its active record and share link. Deleting a hosted account removes the active account, saved plans, and associated sharing links. There is no plan revision archive in this preview; revision numbers prevent conflicting saves. A plan export is a separate file under the recipient’s control.

Operational and authentication logs support security, abuse prevention, fault diagnosis, and delivery. Provider-managed logs and backup copies follow the retention settings and policies of the service that holds them; there is no single deletion period covering every provider. Deleting an active account does not immediately erase those separate records or backup copies. Longer retention may be necessary for an unresolved security incident, legal obligation, or dispute.

The navigation service keeps a bounded memory cache for performance, with a five-minute validity period for responses; it does not save navigation requests as account history. Routine application access logging is disabled. Fly.io describes its separate platform log handling in the processing information linked above. Resend’s published retention information describes email and delivery-log retention, including a 30-day period on its standard plans.

Support correspondence is kept for handling the request, follow-up, and any necessary record of its resolution or related legal obligations. You can request deletion of correspondence. Contact us for the current provider settings or to make a deletion request; backup expiry and provider records are considered separately from active account deletion.

Optional tip records are kept only as needed to administer support and meet applicable accounting, legal, or dispute-resolution requirements. Deleting a ForeverDungeons account does not delete Buy Me a Coffee records; requests concerning records held by that provider must also be made to it.

Local Studio’s launcher backups have no automatic expiry in the current local build. The person operating that computer controls those files. Deleting a local database or clearing a browser is not a request to delete a separately created hosted account.

7. Your choices and requests

You can explore without signing in, edit a plan you own, export a plan, change its sharing setting, and sign out. Hosted accounts provide Delete my account in the account menu. This requires your current ForeverDungeons password and an explicit deletion confirmation. Export any plans you want to keep first; account deletion is permanent. The password is used to verify the deletion request and is not stored in a plan.

For access, correction, deletion assistance, or another privacy request, contact the operator below. Identity verification may be necessary; never send your password by email. Local Studio uses its own account and backup files rather than the hosted account deletion service.

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of personal information; restrict or object to certain processing; withdraw consent where processing relies on it; and complain to your local data-protection authority. Requests will be handled according to applicable law.

This preview is intended for people aged 16 and over. We do not knowingly invite children under 16 to create accounts. Contact us if you believe a child has provided personal information so we can review and address it.

8. Contact and updates

Operator: Nomabond
Privacy requests: nomabond@foreverdungeons.com

We will update this page when the service or its data practices change. Material changes will be highlighted in the app or through an appropriate account notice. Any consent required for a new use will be requested separately.