// Trust & Security Report
Auferet (legal entity name not public)
AI RPG Game Master platform with persistent memory system for solo and multiplayer storytelling. Runs on Google Gemini models with D&D 5e and Pathfinder 2e support. Free tier (10 actions/day) + paid plans ($10-75/mo).
Certifications held
0
Maturity
Startup
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 12 unconfirmed / not-held certifications
No public evidence found on auferet.com domain
No public evidence found on auferet.com domain
No public evidence found on auferet.com domain
No public evidence found on auferet.com domain
No public evidence found on auferet.com domain
No public evidence found on auferet.com domain
No explicit GDPR compliance statement found. Privacy Policy page fails to load; cannot confirm active compliance measures.
No indication this is a healthcare product; HIPAA not applicable for consumer AI RPG game.
Not applicable - payment processing delegated to Stripe/third parties; no evidence of direct PCI DSS scope.
No public evidence; not a government-focused service offering.
No public evidence found on auferet.com domain
No public evidence. Product uses Google Gemini with 'content filters off' option but no AI-specific governance certification.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
US (inferred from Gemini hosting and no explicit data residency statement)
Unknown. Product uses Google Gemini models; unclear if customer game data is used for model training or fine-tuning. Homepage states 'content filters off' for mature content but does not address training posture. Unable to verify due to inaccessible privacy policy.
// Security controls
Encryption in Transit
HTTPS on site; underlying transport assumed secure via Gemini API
Data Storage Location
Games autosave in browser (client-side) and downloadable as files. Server-side storage location and security practices not documented.
Trust Center / Security Page
None found. No dedicated security, compliance, or trust page.
Third-party Dependencies
Google Gemini (LLM backend). Payment likely via Stripe or similar (not documented). Content moderation policy delegated to Gemini with 'filters off' option.
Content Moderation
Gemini underlying model enforces block on sexual content involving minors; Auferet disables most other filters. Multiplayer moderation posture is not documented (Terms of Service page fails to load).
// Products & data scope
data: User game sessions (characters, events, world lore), uploaded PDFs/text files
10 actions per day on Gemini 3.1 Flash Lite. All features accessible. Games autosave in browser.
data: Same as Free tier
$10/mo. Unlimited actions. Gemini 3.1 Flash Lite.
data: Same as Free tier
$35/mo. Unlimited actions. More powerful Gemini model + Advanced AI Reasoning.
data: Same as Free tier
$75/mo. Unlimited actions. Gemini 3.1 Pro + Advanced AI Reasoning.
// What to watch
- Privacy Policy and Terms of Service pages fail to load on auferet.com. Technical issue or permanent unavailability means no verification of legal data handling terms possible.
- No trust center, security page, or compliance documentation found.
- No founder/team information publicly available; legal entity name not disclosed.
- Data training posture unknown: unclear if customer game data (which may include sensitive creative content or lore) is used to fine-tune Gemini or retained by Google.
- Multiplayer moderation posture undocumented: the homepage advertises real-time multiplayer, but the Terms of Service (which would carry any moderation disclaimer) fail to load, so multiplayer content-moderation terms could not be verified. No verbatim 'unmoderated multiplayer' disclaimer exists in any accessible source.
- Product feature: 'Content filters off' - Auferet disables most content moderation except Gemini's built-in block on CSAM. Allows mature/dark content.
- Third-party dependency: relies entirely on Google Gemini API. No fallback or alternative LLM stated.
- Payment processor not documented; unclear who handles payment data (PCI scope unknown).
- Android app on Google Play but no mention of app security review, sandboxing, or native data handling practices.
- No Data Processing Agreement (DPA) or GDPR-specific clause evidence found.
- No explicit data retention, deletion, or export policies documented.
// At a glance
Pricing model
Freemium: free tier with 10 actions/day, paid plans remove action limit and upgrade Gemini model.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Auferet (legal entity name not public)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
auferet.com