Last updated: March 10, 2023

This Privacy Policy describes the personal data we store, and our policies on its collection, storage, and use. We collect this personal data for exclusive usage within this website, and by using this website, you agree to the collection and use of the personal data in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. When we do, the new Privacy Policy will be posted on this page, so make sure you are reviewing this page for changes periodically.

Changes to the Privacy Policy are effective when they are posted on this page.

When using the website as an anonymous user, no personal data is collected, and none of the Privacy Policy applies in this case. However, the website does allow for you to register an account with the website. When doing so, the following personal data is collected:

• Email Address
• Username
• Password

All personal data is stored in a central database, accessible only by clients within its local network, and restricted further to only authenticated access by service accounts.

Usernames and email addresses are stored in plaintext, but passwords we collect are hashed before storage in the database. Based on the password data we do store, it is effectively impossible to determine the actual password you enter during account creation.

Your email address is directly visible only to yourself and Administrators of the website. It is used by the website in the following ways:

• To verify your account and provide you full access to all features of the website.
• To receive password reset links initiated when you forget your password.
• To allow you to receive messages from users related to campaigns you are the Owner of. This communication is facilitated by the website, and users sending you messages are not made aware of your email address.

Your username is directly visible to any user in various areas of the website. It is used by the website in the following ways:

• To authenticate your identity and log you in.
• To display to any user that you are the Owner of any campaigns belonging to you.
• To display to any user that you are playing a character in any campaign that contains a character explicitly linked to your account.

Your password is not directly visible to any user of the website. Furthermore, its hashed value is only visible to Database Administrators of the website. It is used by the website in the following ways:

• To authenticate your identity and log you in.

Your personal data is retained for as long as your account exists on the website. You can request the deletion of your account and all related personal data by logging in to the website, and visiting your User Settings, then submitting a request for complete account deletion.

No, your personal data is not shared with any other entity, company, or website. It is used solely on this website for the purposes listed above.

Yes, cookies are used on this website for the sole purpose of automating your login process. You are provided an opportunity to agree to this usage when logging in and requesting that the website remember your identity. If you do not request that the website remember you, then cookies are not used.