Privacy Policy

Last updated: 25 July 2026

Dungeon Master Desk ("the Service") is a web tool for tabletop game masters. This policy explains what information the Service stores, why, and what control you have over it.

Information we store

• Account details. When you create an account we store your email address and, if you sign in with Google, the display name and profile photo Google shares with us. We use these only to operate your account. We also send a verification email to new accounts so we can confirm the address reaches you.
• Username. If you choose a username we store it against your account, and we store the username on its own in a small list of claimed names. That list is what stops two people taking the same username, so any signed-in user can check whether a given name is already taken; it holds the name and the account it belongs to, and nothing else. Nobody can browse or download the list as a whole.
• Campaign content. Everything you write in the Service — notes, characters, locations, calendars, encounters, and similar — is stored in your account so it can follow you between devices. Your content belongs to you; we do not read, share, or use it for anything other than providing the Service.
• Feedback messages. If you use the in-app Feedback button we store your message, your account email and ID, the app section and version, and your browser's user-agent string (to help reproduce bugs). A copy is sent to the developer's email inbox so it can be read and acted on.
• Error reports. If the app hits an unexpected technical error while you are signed in, we store a report — the error message, where in the code it happened, your account ID, and your browser's user-agent string — so we can find and fix the bug. These reports never include your campaign content.
• Map images. Images you upload for maps are stored in your account's cloud storage (so they follow you between devices) and cached locally in your browser.
• Local data. Working copies of your campaign are stored locally in your browser (IndexedDB and localStorage) on the device you use.

Shared View (optional)

Shared View is an optional feature that turns on a public, read-only link so your players can follow along on a screen or their phones without signing in. It is off unless you switch it on, and it only ever shows what you choose to send.

• While it's on, the things you push to it — a block of text, a map or image, and a player-safe initiative order — are copied to a public link. Anyone who has the link can open it, so treat the link like a shared document: it isn't listed anywhere or search-indexed, but it isn't password protected.
• Only what you explicitly send is public. The rest of your campaign stays private to your account.
• Images you send to Shared View are copied to a separate, publicly readable location so your players' browsers can load them. Your private map images are not made public.
• You can turn Shared View off at any time (which removes the public copy) or regenerate the link (which kills the old one). Deleting a campaign or your account also removes its shared view and any images sent to it.

What we don't do

• We do not sell or share your personal information or your campaign content.
• We do not show advertising.
• We do not run third-party analytics or tracking cookies.

Where your data lives

The Service is built on Google Firebase (Authentication, Cloud Firestore, and Hosting). Your account and campaign data are stored in Google Cloud data centres (Firestore region: Australia). Google acts as our data processor; their handling of this data is governed by the Firebase privacy documentation. Page fonts are served by Google Fonts, which receives your IP address when the fonts load. Email we send you, such as a verification message, is delivered by a third-party email provider that receives your email address in order to deliver it.

Deleting your data

You can delete your account at any time from inside the app: open your account chip in the top bar, then choose Delete Account. This permanently removes your campaigns, your uploaded map images, any shared views and images sent to them, and your account from our systems. Feedback messages and error reports are kept separately from campaign data and are deleted on request. Local browser data can be cleared through your browser's site-data settings.

Data retention and backups

Your campaign data is kept for as long as your account exists. You can export a full copy of your campaigns at any time from the Settings tab.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

If this policy changes materially we will note it on this page with a new "last updated" date.

Contact

Questions or deletion requests: use the Feedback button inside the app. If a reply is needed, it will go to the email on your account.