The Oath of Privacy
Your data is sacred. Here's how we protect it.
The Short Version: We collect only what's needed to run RPG World. We never sell your data. We never share it with advertisers. Your characters, campaigns, and content belong to you.
Our Promise to You
What We Collect
| Data | Purpose | Retention |
|---|---|---|
| Account info (email, username) | Authentication | Until account deletion |
| Character & campaign data | Core functionality | Until you delete it |
| Usage logs | Bug fixing & security | 90 days |
| Cookies | Session management | Session only |
Third-Party Services
Mailjet — Email delivery (transactional emails only)
Cloudflare — CDN and security
We use minimal third-party services and vet each one carefully.
How We Protect Your Data
- Encrypted connections (HTTPS everywhere)
- Hashed passwords (never stored in plain text)
- Regular security updates
- Role-based access controls
- Database encryption at rest
Your Rights
- Access your data
- Correct inaccuracies
- Delete your account and all data
- Export your data
Changes to This Policy
If we make changes to this privacy policy, we will post them on this page and update the "last updated" date at the top. For significant changes, we will notify you via email or an in-app notification.
Questions About Your Privacy?
We take your privacy seriously. If anything here is unclear, reach out.
Contact Us