Skip to main content

Privacy policy

Last updated: February 2026

Overview

RPG Stack ("we", "our", or "us") respects your privacy. This policy explains how we collect, use, and protect your personal information when you use our tabletop RPG companion service.

Information we collect

Account information

  • Email address (for authentication and communication)
  • Display name (shown to other users in campaigns)
  • Google account identifier (when you sign in with Google), so we can recognise you on return visits

User-generated content

  • Characters you create (names, stats, backstories)
  • Campaign data (settings, NPCs, session notes)
  • Dice roll history
  • Any other content you input into the Service

Automatically collected data

  • Device type and browser information
  • IP address (for security and analytics)
  • Usage patterns (pages visited, features used)
  • Cookies and similar technologies

How we use your information

  • Provide the Service: Store and display your characters, campaigns, and game data
  • Authentication: Verify your identity and secure your account
  • Communication: Send important updates, security alerts, and optional newsletters
  • Improvement: Analyze usage to improve features and fix issues
  • AI Features: Process content for AI-assisted generation when you use these features
  • Security: Detect and prevent fraud, abuse, and security threats

Data sharing

We do not sell your personal information. We may share data with:

  • Stripe: Processes payments for subscriptions and credit packs. We don't store your card details ourselves.
  • Amazon SES (via the edgelord mail relay): Delivers account, notification, and marketing emails on our behalf.
  • Anthropic: Processes the text you submit to AI features (character generation, NPC chat, the rules assistant, and similar tools).
  • fal.ai: Generates AI portraits and scene art when you use those features.
  • Other Users: Campaign members can see shared characters and campaign data
  • Discord (optional): If you link a Discord channel to a campaign, dice rolls and NPC replies you trigger there are posted to that channel.
  • Forumera (optional): If you connect a campaign to a Forumera forum, character and thread data syncs between the two services.
  • Legal Requirements: When required by law or to protect rights and safety

Data storage and security

Your data is stored securely using:

  • Encrypted connections (HTTPS/TLS)
  • Secure database hosting with regular backups
  • Passwordless authentication (Google sign-in and single-use magic links) with signed, expiring sessions
  • Access controls and monitoring

While we implement reasonable security measures, no system is completely secure. Keep your email account secure: it is what grants access to RPG Stack.

Your rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Delete your account and associated data
  • Export: Download your profile, characters, campaigns you own (with sessions, scenes, and notes), NPCs, journal entries, and credit usage history from Settings → Security
  • Opt-out: Unsubscribe from marketing emails

To exercise these rights, use our contact form or email [email protected]

Cookies

We use cookies and similar technologies for:

  • Essential: Authentication, security, and core functionality
  • Preferences: Remembering your settings (theme, layout)
  • Analytics: Understanding how the Service is used

You can control cookies through your browser settings, but some features may not work properly.

Children's privacy

RPG Stack is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us to have it removed.

Data retention

We retain your data for as long as your account is active. After account deletion, we may retain certain data for a limited period for legal and operational purposes before permanent deletion.

International users

RPG Stack operates globally. By using the Service, you consent to the transfer of your data to countries where we or our service providers operate. We take steps to ensure appropriate data protection regardless of location.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

Contact us

For privacy-related questions or to exercise your rights, use our contact form or email us at:

[email protected]

Terms of Service · Back to Home