Draft for the owner to complete and review. Replace every [BRACKETED] value, and have it checked against the privacy law where you and your users are (for example PIPEDA, GDPR or state laws), before the public launch.
Privacy Policy
Last updated: [DATE]
[OPERATOR NAME] runs SheetCrawler. This policy says what we collect, why, and what you can do about it.
What we collect
- Account: your username and a salted hash of your password (never the password itself), and, if you give one, a recovery email address.
- Game data: campaigns, character sheets, notes, journal entries, chat messages, rolls and tables you create.
- Security data: session records, sign-in attempts and the IP address of requests, kept to protect accounts and stop abuse.
- Payments: if you buy VIP, Stripe collects your payment details. We store only a Stripe customer id and your subscription status. We never see your card number.
Who can see your data
Members of a campaign see that campaign's sheets, chat, shared journal entries and public rolls. Private journal entries are visible only to you; the DM cannot read them. Private rolls are visible to you and the campaign's DM.
Service providers
- Stripe processes payments (stripe.com/privacy).
- [EMAIL PROVIDER, e.g. Postmark] sends password reset emails to your recovery address.
- [HOSTING PROVIDER] hosts the server and backups in [COUNTRY].
We do not sell your data, and the service has no ads or tracking scripts.
Cookies
We use one cookie to keep you signed in. Your theme choice is kept in your browser's local storage.
How long we keep data
Until you delete it or your account. Deleted campaigns are removed for good after 30 days. Backups are kept for [BACKUP RETENTION] and then overwritten.
Your choices
You can export your sheets, change or remove your recovery email, and delete your account from the Account page. Deleting your account removes your account, your private notes and the campaigns you run alone; your name on old rolls and chat becomes "deleted user". For any other request, contact [CONTACT EMAIL].