Privacy Policy

Data we store

• Email + display name + username (provided at signup)
• Password hash (Supabase auth — not the password itself)
• Auth sessions
• Game data: campaigns, characters, chat, dice rolls
• Uploaded files (images, audio, video)

Third-party services

Optional OAuth providers: Google, Twitch, Discord (only if you connect them).

Your rights

You can delete your account from /account at any time. All FK-cascaded data is removed.

Contact

For questions or data requests, reach out via the support form.

— Full GDPR-compliant policy to be drafted in Phase 3.