How We Handle Your Data

What we store

The following data is stored server-side in our database:

• Your email address (used for login and invites)
• Your display name (if set)
• Campaign records you create or are invited to
• Characters, sessions, notes, maps, lore, quests, and vault items
• Collaboration records (who is in which campaign)

What stays on your device

The following is stored only in your browser's local storage and never sent to our servers:

• Your active campaign selection
• Your preferred mode (GM, Player, Creative, Explore)
• Your theme and colorblind mode preference
• First-visit onboarding state

Clearing your browser storage removes these preferences but does not affect your campaign data or account.

Who can see your data

• You always see your own content.
• Campaign members see only the content within campaigns they are invited to.
• Private notes and GM-only content are hidden from other members.
• No one outside the campaign can see your records.

Data transfer and exports

We do not currently offer a one-click export tool, but your data is yours. If you need a copy of your campaign records, contact us and we will help you retrieve it.

Deletion

To delete your account or any specific records, contact us via the Contact page. Deleting or leaving a campaign removes the campaign relationship and campaign-owned records. Independently owned characters, maps, notes, sheets, and lore are detached or archived rather than silently deleted. Destructive actions must clearly identify what will be removed before confirmation.

Security

Authentication is handled by Base44's secure infrastructure. We do not store raw passwords. All data in transit is encrypted via HTTPS.

Feedback is voluntary

The Contact page sends only the fields you choose to submit. It does not attach your campaigns, characters, notes, or in-app activity. Contact submissions are readable only by the studio administrator.

Generated features

Generated features run only when you choose them. Ask the Room sends only the prompt you type. AI Recap sends only session events already marked player-safe; GM-only events are excluded. Unrelated Binder records are not silently added to either request.

No tracking or advertising

The Binder contains no advertising, behavioral analytics, session replay, or content scraping for user profiling. Hosting and security systems may still produce essential technical logs needed to operate and protect the service.