Privacy policy

What is stored

When you sign in, Splatbook keeps:

• Your account. The name, email address and avatar image supplied by whichever provider you signed in with (Google or Discord), plus the access and refresh tokens that keep you signed in. Splatbook never sees or stores your password — it has none.
• What you make. Your characters, campaigns, dice rolls and session notes, and which campaigns you belong to.

That is the whole list. There is no analytics, no advertising, no tracking pixels, and no third-party scripts of any kind on this site. Nothing you write is read, mined or sold.

Why it is stored

Solely to make the app work: to know who you are between visits, to show your characters back to you, and to let the other players at your table see the campaign you share with them. Your characters and notes are visible to you and to the members of any campaign you join — not to anyone else, and not to the public.

Who it is shared with

Nobody. Your data is not sold, rented, or handed to advertisers or data brokers. It is not used to train machine-learning models. The only third parties involved are the ones needed to serve the site at all:

• Cloudflare, which hosts the app and its database, and which processes requests on our behalf.
• Google or Discord, whichever you chose to sign in with — they tell Splatbook who you are, and their own privacy policies govern that exchange.

The site does carry two outbound links that are commercial: a Ko-fi tip jar and a DriveThruRPG affiliate link. If you follow either, that company's cookies and privacy policy apply on their site — not here. Following them is entirely optional and nothing is shared about you when you do.

Cookies

One cookie, holding your sign-in session, so the site knows it is still you on the next page. It is essential to signing in and is not used to track you. There are no advertising or analytics cookies, which is why you are not being asked to click a consent banner.

Deleting your data

It is your data and you may have it back or have it destroyed. Email [email protected] and ask, and your account and everything attached to it will be deleted. There is no retention period and no dark pattern — asking once is enough. You may also ask for a copy of what is held about you.

Where it lives

On Cloudflare's infrastructure, which is distributed globally, so your data may be stored or processed outside your own country. It is transmitted over HTTPS in every case.

Changes, and checking my work

If this policy changes materially, the date above changes with it. Splatbook is free software and the source is public — if you would rather verify than trust, the code that stores all of the above is at https://github.com/blockbeard/splatbook.

Contact

Questions, corrections, or a deletion request: [email protected].