Privacy
Last updated: July 19, 2026
The short version
We store your email address and the game content you create. Nothing else. No ads, no analytics, no trackers, no selling or sharing data with anyone.
What we store
- If you sign in: your email address, a display name, and login session records.
- Game content: characters (with a short revision history), campaigns, notes, NPCs, party vehicles, and GM prep material (adversaries and session plans) you create. Visibility rules are enforced server-side: private notes are visible only to their author, and GM prep material only to the GM — not to players, not to the operator's tooling.
- Operational: transient rate-limit counters (an IP address kept briefly to prevent abuse), and standard web-server logs kept by our hosting provider (DreamHost).
What we never do
- No advertising, no third-party analytics, no tracking pixels, no social embeds.
- No selling, renting, or sharing your data with anyone.
- No password storage — sign-in links replace passwords entirely.
Cookies & local storage
One cookie, used solely to keep you signed in. Browser local storage holds your theme choice and an offline autosave of your in-progress character; signing out clears the local autosave. If you add opening-crawl music, the audio file you choose is stored in your own browser (IndexedDB) on that device only — it is never uploaded to our servers.
We send only two kinds of email: the sign-in links you request, and session-scheduling notifications to members of your campaign when your GM proposes or confirms a session date. No newsletters, no marketing. Contact-form messages and in-app feedback are stored in the site database (not emailed); if you're signed in when you send feedback, your account email is recorded with it so the operator can reply to you, visible only to the operator, and used only to respond to you and improve the tools.
Backups & deletion
The database is backed up routinely (short rotation). Deleting a character soft-deletes it immediately and it leaves backups as they rotate out. To delete your whole account and its data, use the contact form.
Children
The service is intended for users 13 and older.