Privacy Policy
Last updated: 2026-06-02
Who we are
This RuneQuest Campaign Manager is operated by The Web Factory, LLC. For privacy questions, contact admin@thewebfactory.io.
What we collect
We collect only what's needed to run the app:
- Account information. Sign-in is handled by Google Firebase Authentication. When you register, Firebase stores your email address and a securely hashed password. We never see or store your raw password.
- Profile. A display name and your role (gamemaster or player), which you control.
- Game data. The campaigns, adventurers, and related content you create — characteristics, skills, runes, possessions, notes, and so on — stored in our MongoDB database.
- Invitations. When a gamemaster invites a player, the invited email address is stored so the invite can be matched when that person signs in.
How we use it
Your data is used solely to provide the app's features: authenticating you, showing your campaigns and adventurers, and letting gamemasters and players collaborate within a campaign. We do not sell your data, and the app does not show advertising.
Who can see your data
Within the app, access is controlled by role and campaign membership: a player sees their own adventurers; a gamemaster sees the adventurers in the campaigns they run. Data is not shared with other users outside that model.
Third-party processors
- Google Firebase — authentication. See Google's privacy policy.
- MongoDB (e.g. MongoDB Atlas) — database hosting for app data.
Data retention & deletion
Your data is kept while your account is active. To delete your account and associated data, contact admin@thewebfactory.io. [Describe your actual deletion process and timeframe here.]
Your rights
Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to its processing. To exercise these, contact admin@thewebfactory.io.
Children
This app is not directed at children under 18 years of age, and we do not knowingly collect their personal data.
Changes
We may update this policy; material changes will be reflected by the "last updated" date above.