Privacy Policy

Effective date: July 14, 2026

Last updated: July 18, 2026

Six Axes (“Six Axes,” “we,” “us”) is operated by Kerf and Code, LLC, a Washington limited liability company, contact kncadmin@kerfandcode.com, 739 N 95th St Apt 103, Seattle, WA 98103. This policy explains what we collect, why, who we share it with, and your choices.

Six Axes is a session-analytics and campaign tool for tabletop RPG game masters (“GMs”) and their players. Some of you create an account (typically GMs); some of you join through a share link from your GM (typically players). This policy covers both, plus our website, our Discord integration, and any companion apps.

The short version

• We collect the campaign data you create, optional session audio and the transcripts and analytics derived from it, and the inputs players give us (a play-style inventory, post-session check-ins, party chat).
• We never sell your data and we do not run ads.
• We use third-party services to run the product (database, hosting, transcription, AI, payments). They process your data on our behalf and, under their commercial terms, do not use it to train their own models.
• Audio is only recorded with consent, and consent is per person: if you decline, your voice is never recorded, and the rest of your table can still record theirs. The GM is responsible for obtaining consent at their table.
• You can export or delete your data yourself, from Settings.

Information we collect

Account and identity. If you create an account or sign in, we collect your email and display name, and the basic profile your sign-in provider shares (for example, your Discord user ID and avatar, or your Google profile). Players who join only through a share link may be assigned a temporary identifier without a full account.

Campaign content you create. Campaigns, characters, rosters, codex notes, lore, locations, story threads, loot, sessions, attendance, and similar records you enter.

Session audio (optional). Audio you or your players upload or record for a session, including per-speaker tracks captured through our recorder or, where you enable it, a Discord voice channel. Audio is processed only with consent (see “Recording and consent”). A speaker who has not consented is dropped before upload, so we never receive or store their audio at all.

Derived data. Transcripts produced from session audio, the structured events our AI proposes from those transcripts and that the GM accepts, session recaps, and the analytics computed from this (engagement, spotlight balance, dispositions, and so on).

Player inputs. Responses to the Player Disposition Inventory, post-session check-ins (a satisfaction rating, a spotlight question, and an optional note), and party chat messages.

Payment information. If you subscribe, our payment processor (Stripe) handles your card details. We receive confirmation and limited billing metadata; we do not store full card numbers.

Technical and usage data. Log data, approximate location from IP address, device and browser information, and essential cookies used to keep you signed in. We do not use advertising or cross-site tracking cookies.

How we use your information

• To provide the product: store your campaign, transcribe audio, generate recaps and analytics, run dispositions, and power scheduling and chat.
• To communicate with you: session recaps, reminders, and service notices. You can opt out of non-essential email.
• To operate, secure, debug, and improve the service.
• To process payments and manage subscriptions.
• To comply with law and enforce our Terms.

We do not use your campaign content, audio, or transcripts to build advertising profiles, and we do not sell any of it.

AI processing and service providers (sub-processors)

We rely on the following providers to run Six Axes. They process your data only to perform their function for us, under contracts that restrict their use of it:

Most providers process and store data in the United States. Our AI providers (Deepgram, Anthropic) process your content to perform the service and, under their commercial terms, do not use it to train their models. The table above is our current sub-processor list. If it changes, we will update it here.

Recording and consent

Consent is per person, not per table. When a session is recorded over Discord, each speaker is captured as a separate stream. If you have not given consent, or your GM has excluded you from a particular session, your stream is discarded when the recording ends: it is never uploaded to us, never transcribed, and never used in recaps, statistics, or any analytics. One person declining does not stop the rest of the table from recording.

What declining does not do. It removes your voice, not your presence. Other people at the table who did consent may still say your name, quote you, or describe what your character did, and those references will appear in their transcripts and in any recap or analytics built from them. If you want no record of your participation at all, talk to your GM about not recording that session.

While the Discord recorder is running, the Six Axes bot is visibly present in the voice channel, and the GM can end the recording at any time with the /stop command. The GM is responsible for obtaining consent from everyone at the table and for complying with the recording laws that apply where their players are, including jurisdictions that require all parties to consent. We store consent records so it is clear who agreed. You can request deletion of audio at any time. Take particular care recording minors (see “Children’s privacy”).

How your group sees your data

Six Axes is collaborative, so some data is shared within your table by design:

• The GM can see the campaign data, accepted events, analytics, audio, and transcripts for their campaign.
• Players see what the GM shares with them, plus their own inputs.
• Party chat is private to players by default. The GM cannot read it unless a player grants a specific time-window of access, and the player can revoke that.

We also share data with the service providers listed above, when required by law or to protect rights and safety, and in connection with a merger or sale of the business (you’ll be notified). That’s it, no other sharing, and no sale.

Data retention and deletion

We keep your data while your account is active and as needed to provide the service. Session audio is deleted automatically 60 days after it is recorded, whether or not you ask. You can export everything we hold about you, and delete your account, from Settings. Deleting your account removes your recordings, your transcribed words, your self-reports, your dispositions, your notes and your check-ins. Your characters remain in their campaigns with your personal link severed, because the story your table told together is theirs as well as yours. We aim to delete or anonymize data within 30 days of an account-deletion request. Backups are purged on a rolling 7-day schedule.

Your rights and choices

Depending on where you live (for example under GDPR or the CCPA/CPRA), you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to certain uses. You can exercise these yourself in the app, under Your account → Settings, where you can export everything we hold about you and delete your account. You can also email kncadmin@kerfandcode.com. We will not discriminate against you for exercising them. We do not sell or “share” personal information for cross-context behavioral advertising.

If you are in the EEA/UK, our legal bases are: performing our contract with you, your consent (for audio recording and non-essential email), and our legitimate interests in operating and securing the service.

Children’s privacy

Six Axes accounts are intended for adults 18 and older. Tabletop games are often played by minors, so a minor may participate at a table through a GM’s share link. In that case the GM or the child’s parent or guardian is responsible for any consent, especially for audio recording. We do not knowingly collect personal information from children under 13 without verifiable parental consent as required by COPPA, and we do not knowingly direct the service to them. If you believe a child under 13 has provided us personal information without that consent, contact kncadmin@kerfandcode.com and we will delete it.

Security

We protect data with encryption in transit, row-level security in our database, scoped access controls, and least-privilege service credentials. No system is perfectly secure, so we cannot guarantee absolute security.

International users

We operate in the United States and process data there. If you access Six Axes from outside the US, you consent to that transfer and processing, subject to the protections described here.

Changes

We will update this policy as the product evolves and post the new effective date. Material changes will be communicated by email to account holders and by notice in the app.

Contact

Questions or requests: kncadmin@kerfandcode.com, Kerf and Code, LLC, 739 N 95th St Apt 103, Seattle, WA 98103.