Privacy

Who is responsible

Marc Roberts runs this site as a private tool for one tabletop campaign, and is the data controller for it. Contact: marc.roberts@hey.com. There is no company behind it and no other support address.

If you think something here is wrong or unfair, you can complain to the Portuguese supervisory authority, the CNPD.

Using this site is optional

You do not have to use it to play. The campaign runs at the table; this is a convenience for people who want their sheet on a screen. Pen and paper, a spreadsheet, an app of your own — all of it works, and none of it puts you at any disadvantage in the game.

That matters for everything below: nothing here is a condition of playing, so if you would rather this site held nothing about you at all, that is a normal choice and not an awkward one.

What is stored

• Your Discord account details — the email address, username, and avatar Discord gives us when you sign in, plus when you last signed in.
• Your characters — everything on the sheet, including the player name you put on it and any notes you write.
• What you did — an activity log of changes made through the site, and which session write-ups you have read.
• Campaign write-ups — session summaries authored by the GM, which describe what happened in play and may mention you by name or by character.

The site does not store your IP address or track you across other websites. Your IP is visible to the services that host it, below, in their own logs.

Why, and on what basis

To run the campaign for the people invited to it. The legal basis is legitimate interests — you chose to use a shared tool, and it cannot work without holding the characters, the history, and enough about who you are to show you the right things.

Because using the site is optional, that balance is an easy one: nobody is asked to hand over anything in order to play, and anyone who would rather not can simply not have an account. What is held is the minimum the tool needs to do its job for the people who do want it.

It is not consent-based, because a shared campaign cannot be unpicked one player at a time without breaking it for everyone else. The real choice happens earlier — whether to use the site at all — rather than at a tick-box afterwards.

Who else sees it

Only the other members of your campaign, and the services that run the site:

• Supabase — the database and sign-in. Data is stored in Stockholm (EU).
• Vercel — hosting. Runs in Stockholm (EU), beside the database, and keeps short-lived request logs.
• Discord — sign-in, and serving avatar images.

Nothing is sold, and nothing is shared for advertising. Session write-ups are also copied to a private server on Marc's home network, which produces the printable campaign book.

Cookies

Only sign-in ones. There is no analytics, no tracking, and no advertising on this site, which is why you have never seen a cookie banner here — the rules exempt cookies that are strictly necessary for a service you asked for, and those are the only kind used.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to it being held at all. Email the address above. Requests are answered within one month.

Asking for everything to be deleted does not remove you from the campaign — you keep playing exactly as before, just without an account here. Leaving the site and leaving the game are separate things.

What “delete everything” means for your character

Worth separating, because the two are not the same thing. You are a person; your character is a fictional smuggler with a gear list.

• Everything about you goes. Your account, email, Discord identity, activity history, what you had read, and your real name wherever it appears — including the player name written on the sheet.
• The character stays by default, with your name taken off it. It has to: the party inventory points at it, and the session write-ups describe what it did. Removing it would tear holes in the other players' records of their own game.
• If you want the character gone too, ask. That is a campaign decision rather than a legal one, and the GM can do it — but it is worth knowing it takes parts of the shared history with it.

Session write-ups are the awkward case: they are prose about what happened in play, and they are also everyone else's record of the same evening. Where one names you personally, it can be rewritten to refer to your character instead — ask, and it will be.

And the honest caveat: the people you played with will always know which character was yours. Taking your name off the record protects it from everyone else, not from the four people who were at the table.

How long it is kept

Your characters and the campaign history stay for as long as the campaign runs, or until you ask for them to be removed. Two things expire on their own, nightly:

• Presence records— the “was anyone around” samples — after 90 days.
• Sign-in records and the activity log after 24 months. Sign-ins are kept longer than presence because they record which version of this notice was in force when you signed in.

Invite links expire too — 14 days from being issued — so a link that gets forgotten in a chat closes itself rather than staying open indefinitely.

Security, stated plainly

The site is invite-only: you cannot get in without a Discord account that has been invited, and sign-in is the only way through.

One qualification, because a privacy notice should not overstate this. Some campaign data — character sheets, including the player name written on them — is currently reachable directly from the database by anyone who knows how to look, independently of the login. That is a known issue being closed. It is mentioned here because you should hear it from this page rather than find out later.

Age

Signing in requires a Discord account, and Discord requires you to be at least 13. This site is not aimed at children.