Privacy

What we collect

• Account details — your email address and the display name you choose. We use a passwordless “magic link” sign-in, so we never store a password. If you sign in with Google or Discord instead, we receive your basic profile (name, email, avatar) from them.
• Marketing preference — whether you opted in to product update emails, and when.
• Your content — the parties, characters, notes, maps, and other campaign data you create in the app.
• An in-progress character — while you're still building a character, we keep your answers in your browser's local storage so a refresh or a closed tab doesn't lose your progress. This never leaves your device and isn't something we can see. It's cleared as soon as you finish that character or abandon it, and anything older than about a week is discarded the next time you open the app. You can also clear it yourself at any time by clearing your browser's site data.
• An edit that hasn't saved yet — if a change can't reach us right away, because your connection dropped or you closed the app mid-edit, we keep that change on your device and send it the next time you open the page. While it's waiting there it stays local, and we can't see it. It's cleared the moment it saves, when you sign out, and anything older than a day is discarded the next time you open that page. Because you can edit things other people own — a GM tidying up a player's character, or the shared steading any member can change — what's held can be someone else's content rather than yours, which is part of why signing out clears it. Deleting your account from Settings clears what that browser is holding; we can't reach anyone else's device, so if someone was mid-edit on your content when you left, their copy goes when it saves, when they next sign out, or the next time they open that page after a day. You can also clear it yourself at any time by clearing your browser's site data.
• Basic technical data — standard server logs and an essential cookie that keeps you signed in.
• Error reports — when something goes wrong we record the error, the page it happened on, and technical details about your browser, so we can fix it. To make a crash reproducible we also capture a replay of the session it happened in — only when something actually goes wrong, never of ordinary browsing. A replay reconstructs what you clicked and typed through; the text on the page is masked and images blocked, so it is a diagram of your interaction rather than a video of your campaign. We keep these only as long as we need them to diagnose the problem.
• Analytics — we use Google Analytics to understand aggregate traffic and how features are used, so we can improve Sled Dog. Outside the EEA and UK this sets analytics cookies; for visitors in the EEA, UK, and Switzerland we default those to off (Google's Consent Mode), so no analytics cookie is stored and only cookieless, aggregated measurement is collected. We don't run advertising trackers or sell your visit. If you arrive from a partner link, we also remember the referring campaign in your browser's local storage so we can credit that partner — never shared or sold. To measure supporter purchases (which complete on Polar's site) we send Google a server-side record of the transaction.

How we use it

We use your data to operate the service — to sign you in, store your campaigns, and let your party share a table. If you opted in, we may email you occasional product updates; every such email has an unsubscribe link, and you can opt out any time.

Who we share it with

We don't sell your personal data. We rely on a small set of service providers to run Sled Dog, and share data with them only as needed to operate it:

• Supabase — database, authentication, and storage.
• Vercel — application hosting.
• Resend — delivering sign-in links, support replies, and any update emails.
• Polar — payment processing, if and when you choose to become a supporter.
• Google Analytics — aggregate, privacy-respecting traffic and usage measurement (see above).
• Sentry — error tracking, so crashes reach us instead of vanishing.
• Cloudflare — DNS, and the Turnstile check on our contact form that keeps out automated spam.
• Kit — our monthly newsletter. Kit receives your email address if you subscribe, either through the form on our home page or by turning the newsletter on in your settings. That form is served by Kit, so if you scroll far enough down the home page to reach it, your browser contacts Kit directly and they receive your IP address — as with any embedded content.
• YouTube — the overview video on our home page, and any video in a help article, is played by YouTube in its privacy-enhanced mode. Nothing is loaded from YouTube until you press play. When you do, your browser contacts YouTube, so Google receives your IP address and browser details, and YouTube may store identifiers in your browser.

Your choices

You can view and edit your account and content from within the app. From Account settings you can download a copy of everything in your account, or delete the account entirely — both without asking us. Deleting removes your profile, your sign-in and the content you own, immediately and irreversibly.

You can still ask us to do it for you — you do not need an account to send that request.

Data retention & security

We keep your data for as long as your account is active. We take reasonable measures to protect it, including access controls at the database level, but no online service can promise perfect security.

Children

Sled Dog isn't directed to children under 13, and we don't knowingly collect their data.

Contact

Questions, or want your data removed? Use our contact form and pick “Delete my account or my data” — it reaches the same people a published address would, and you don't need an account to send it.