Last updated 4 September 2026
Without an account, everything stays on your device. With an account we store your email, a hash of your password, your characters, rosters, games and the packs you publish, so they sync between your devices and reach your GM. Your email is used to sign you in, to reset a password, to send an invitation you were sent, and — only if you asked for it — the newsletter. Every change to a sheet is kept as a dated entry so a GM's edit and yours can both be shown.
We don't sell data, show ads or track you across other sites. There is no analytics script on this site or in the app. We keep server logs for 30 days to fix problems; they hold the request path and time, not the contents of your sheets.
The newsletter is optional and off unless you ask for it. The box on the sign-up screen starts unticked, it is separate from agreeing to the terms, and leaving it alone changes nothing else — the account is made either way. Say yes and we store one more thing beside your email: the moment you agreed and the IP address you agreed from, so that we can show the consent was real if we are ever asked to.
Every letter carries a link that unsubscribes you in one click, with no signing in, and the headers a mail app's own unsubscribe button reads. The same switch is in Settings, under Notifications, and both take effect at once. Your address is kept in a sending list at Resend (our email provider, EU) while you are subscribed; unsubscribing or deleting your account removes it from that list. Nothing about your characters, games or packs is in the newsletter, and we never sell or hand your address to anybody else.
A password reset, a game invitation and the outcome of a report are not newsletters. They are sent because of something you or your GM did, they carry nothing to sell, and turning the newsletter off does not stop them — the invitation and the report notice have their own switches in Settings.
Linking a phone from the web mints a short code that expires after five minutes and is stored only as a hash. Each device has its own entry so you can revoke it from Settings.
Settings → Delete account removes your synced data within 24 hours, and takes your newsletter subscription and your address off the sending list at once. Local data on your devices stays until you remove it. Packs you published stay on the registry under a "deleted author" name, because other people's characters pin them.
Questions about your data: see Support.