Privacy Policy

1. Introduction

This Privacy Policy describes how we collect, use, and share information when you use the Service described in the Terms of Service.

2. Information we collect

Account and profile. We collect information you provide at registration and in your profile, such as legal name, preferred name, email address, phone number, time zone, biography, experience level, date of birth, Discord identifiers, and (for minors) parent or guardian contact details where required.

Character information. We may store character names and links you provide (for example to a character sheet provider).

Technical data. We may collect IP address, user agent, and timestamps for security, rate limiting, audit logs, and policy acceptance records.

Payment-related metadata. Payments are processed through external providers (for example Wave). We do not store full payment card numbers on our servers. We may store expected amounts, block counts, credit grants, verification status, and notes entered by you or an administrator.

3. How we use information

• To create and secure your account and to send transactional email (verification, password reset, operational notices).
• To operate campaigns: rosters, eligibility, session access rules, and administrator tools.
• To comply with law and to enforce our policies.
• To improve reliability and security of the Service.

4. Sharing

We do not sell your personal information. We share information with service providers who help us operate hosting, email, and similar infrastructure, under confidentiality obligations. Administrators and assigned dungeon masters see information according to role-based rules designed to limit sensitive data to those who need it for operations.

5. Retention

We retain information while your account is active and as needed for legal, tax, or dispute resolution. Some audit and ledger records may be retained longer where required for integrity of financial and access records.

6. Security

We use industry-typical measures such as password hashing, access controls, and prepared database access patterns. No method of transmission or storage is perfectly secure.

7. Your choices

You may update certain profile fields in the product. You may request account closure where supported; some records may be retained as described above.

8. Children and minors

Our Minor and Parental Consent Policy describes requirements for younger participants. Parent or guardian information may be collected where the product requires consent.

9. International users

If you access the Service from outside the country where it is operated, your information may be processed in that country or other locations where our providers operate.

10. Changes

We may update this policy. Material changes may be communicated through the site or email where appropriate.

11. Contact

For privacy requests, use the contact method published on the main site.