Privacy policy

This policy explains what DivineDungeoner stores about you and why. We collect as little as the site needs to work, and we never sell it.

What we store

• Account: your email address, display name, a one-way hash of your password, and when you accepted these policies.
• Sign-ins: when each of your browsers last signed in, and its browser type (to show your signed-in devices).
• Your content: campaigns you run (their progress, notes and log) and any adventure you upload.
• Security records: a keyed hash of your IP address (never the address itself) for rate limits and the security audit trail.
• Error reports: when the site breaks, technical details of the error (no passwords or message contents).

What we don't do

• No advertising, tracking pixels or third-party analytics.
• No selling or sharing your data, except where the law requires it.

Cookies

One essential cookie keeps you signed in. Your browser also keeps campaign keys in local storage so a phone or laptop can rejoin a campaign. There are no tracking cookies.

Where it lives

The site and its database run on cloud hosting providers who process the data on our behalf. Images are served from a content delivery network.

How long we keep it

• Your account and content: until you delete them.
• Expired sign-ins, used email links and rate-limit counters: removed automatically within days.
• Security audit records and error reports: up to 180 days.

Your choices

• Download all of your data from your account page.
• Delete your account from your account page. This removes your campaigns and uploads permanently.
• Questions or requests: contact the site administrator.