Privacy

In short: we keep only what the game needs, never sell or share data for advertising and use no trackers.

Who is responsible

The service is run by a private person — Andrei Brazhnikov, Greece. Contact:

What we keep and why

Data	Why
Username, display name, password (only as a hash)	So that you can log in
E-mail, if you gave one	Confirming the address and resetting a forgotten password
Google account ID, if you sign in with Google	Google sign-in
Campaigns, characters, NPCs, rolls, notes, uploaded pictures	This is your game
IP address and time of logins and failed attempts	Protection against password guessing and break-ins

The legal basis is the contract with you (so that the service works) and our legitimate interest in security (the login log).

Who else sees the data

Members of your campaigns — what the campaign’s rules allow them (players never see GM notes, for example).
The hosting provider — the server in the European Union that runs the app.
The e-mail service — only to deliver a confirmation or password-reset letter.
Google — only if you choose to sign in with Google.

Nobody else receives the data.

How long

Account and game data — as long as the account exists.
The login log — 90 days.
Links from letters — until they expire, plus one day.
Backups — up to 14 days; after an account is deleted its data leaves the backups when they expire.

Cookies and browser storage

We use one technical cookie to keep you logged in (up to 30 days) and the browser’s storage for your language and theme. No advertising or analytics cookies.

Your rights

You can ask for a copy of your data, a correction, or the deletion of your account and all its data — write to

[email protected] from the address on your account, or include your username. We answer within 30 days. You may also complain to the data protection authority of your country.

Changes

If this page changes, we update it here and write about important changes to the e-mail on your account, if there is one.