Privacy Policy
Last updated: February 2026
Overview
RPG Stack ("we", "our", or "us") respects your privacy. This policy explains how we collect, use, and protect your personal information when you use our tabletop RPG companion service.
Information We Collect
Account Information
- Email address (for authentication and communication)
- Display name (shown to other users in campaigns)
- Password (stored securely using industry-standard hashing)
User-Generated Content
- Characters you create (names, stats, backstories)
- Campaign data (settings, NPCs, session notes)
- Dice roll history
- Any other content you input into the Service
Automatically Collected Data
- Device type and browser information
- IP address (for security and analytics)
- Usage patterns (pages visited, features used)
- Cookies and similar technologies
How We Use Your Information
- Provide the Service: Store and display your characters, campaigns, and game data
- Authentication: Verify your identity and secure your account
- Communication: Send important updates, security alerts, and optional newsletters
- Improvement: Analyze usage to improve features and fix issues
- AI Features: Process content for AI-assisted generation when you use these features
- Security: Detect and prevent fraud, abuse, and security threats
Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Companies that help us operate (hosting, email, analytics)
- Other Users: Campaign members can see shared characters and campaign data
- AI Providers: Content sent to AI features is processed by our AI partners
- Legal Requirements: When required by law or to protect rights and safety
Data Storage and Security
Your data is stored securely using:
- Encrypted connections (HTTPS/TLS)
- Secure database hosting with regular backups
- Password hashing and secure authentication
- Access controls and monitoring
While we implement reasonable security measures, no system is completely secure. Please use a strong, unique password for your account.
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Delete your account and associated data
- Export: Download your characters and campaign data
- Opt-out: Unsubscribe from marketing emails
To exercise these rights, contact us at privacy@rpgstack.com
Cookies
We use cookies and similar technologies for:
- Essential: Authentication, security, and core functionality
- Preferences: Remembering your settings (theme, layout)
- Analytics: Understanding how the Service is used
You can control cookies through your browser settings, but some features may not work properly.
Children's Privacy
RPG Stack is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us to have it removed.
Data Retention
We retain your data for as long as your account is active. After account deletion, we may retain certain data for a limited period for legal and operational purposes before permanent deletion.
International Users
RPG Stack operates globally. By using the Service, you consent to the transfer of your data to countries where we or our service providers operate. We take steps to ensure appropriate data protection regardless of location.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.
Contact Us
For privacy-related questions or to exercise your rights, contact us at: