Privacy Policy

Our Promise to You

We are firm believers in data privacy. Here's what that means in practice:

• We never sell your data

  Not to advertisers, not to data brokers, not to anyone. Period.

• We never share your data

  Your characters, campaigns, and account info stay with us.

• No tracking for advertising

  We don't track you across the web or build advertising profiles.

• You own your data

  You can export or delete your data at any time.

What We Collect

We only collect information that's necessary to provide you with the service:

We don't collect your real name, phone number, address, or any other personal information unless you choose to provide it.

Third-Party Services (Subprocessors)

To provide RPG World, we use a small number of trusted third-party services. These services only receive the minimum data necessary to perform their function.

We carefully vet any third-party service before use and ensure they have strong privacy practices. This list is kept up to date.

How We Protect Your Data

• Encryption in transit: All data is transmitted over HTTPS (TLS encryption)
• Encryption at rest: Sensitive data is encrypted in our database
• Secure passwords: Passwords are hashed using industry-standard algorithms
• Regular backups: Your data is backed up regularly to prevent loss
• Access controls: Only authorized personnel can access production systems

Cookies

We use a minimal number of cookies, only for essential functionality:

• Authentication cookie: Keeps you logged in
• Preferences cookie: Remembers your theme and settings
• Security cookie: Helps prevent cross-site request forgery

We do not use cookies for advertising, tracking, or analytics.

Your Rights

You have the right to:

• Access: Request a copy of all data we have about you
• Correction: Update or correct any inaccurate information
• Deletion: Request that we delete your account and all associated data
• Export: Download your characters and campaign data

To exercise any of these rights, contact us. We'll respond within 30 days.

Changes to This Policy

If we make significant changes to this privacy policy, we'll notify you via email and/or a prominent notice on the site. We won't reduce your rights without giving you notice and the opportunity to delete your account first.