5.5e SRD Oracle privacy notice

Play Session data

Catalog browsing requires no account. Standard MCP OAuth is required for hosted stateful play. Signed-in sessions are saved by default, belong to one account (the connected account), are available to that account and the service operator, are not shared, and expire after 90 inactive days. The service stores the fictional character and battle state needed to continue them and does not use that content for advertising. Deleting a saved Play Session is permanent.

Legacy temporary sessions from an older release are not accessible through the public tools. They expire after 7 inactive days and may be removed under capacity pressure after at least 24 inactive hours.

Authorization records

The authorization service stores OAuth client, consent, synthetic account identity, token, session, verification, and client-assertion records needed to link the MCP client and authorize account-owned sessions. These records are available to the authorization service and connected account. Expired or revoked credentials and other expiring records are pruned; client, consent, and synthetic identity records remain subject to service capacity until operator cleanup. OAuth consent can be declined, and OAuth credentials are not exposed in tool results.

Security and capacity state

The service stores hashed authorization buckets, bounded request counts, and current capacity counts for the service operator to protect availability and enforce service limits. Rate buckets older than one minute are pruned as requests are admitted; capacity counts are derived from current records. Automatic pruning and fixed capacity limits control this state.

Request observations and process metrics

Deployment stderr retention is size-capped at 10 MiB per container; no fixed time window.

For service operation and diagnosis, the service operator receives bounded route, timing, outcome, release, environment, and aggregate process measurements. Stderr retention is set by the hosting operator and must match the submission attestation. This telemetry excludes request arguments, response content, bearer tokens, Play Session identifiers, and account identifiers.

Budget monitoring

Budget monitoring is disabled for this deployment.

When enabled by the operator, aggregate request, resource, storage, network, and fixed-cost measurements are retained by calendar month and threshold alerts are sent to the configured service operator. They do not contain session content or account identifiers.

Hosting access logs

The deployment recipients are Hetzner Online GmbH. Deployment access-log retention is 14 days.

The hosting and ingress operators receive ordinary HTTP access metadata for security and service operation. Access-log retention is set by those operators and must match the submission attestation. They must not record MCP arguments, response bodies, authorization headers, or session content.