Privacy Policy

Overview

ttrplobby is a community project for hosting and joining tabletop RPG sessions (“Service”). This Privacy Policy explains what we collect, how we use it, and the choices you have. By using the Service, you agree to this policy.

What we collect

• Account data: email (if provided by your auth provider), display name, username, and basic profile fields. When you sign in with providers like Discord or Google, we receive limited profile data they share.
• Content you upload: avatars and game posters you choose to store (e.g., in Supabase Storage).
• Lobby/activity data: the lobbies you create or join, presence signals, and messages you send through real-time channels.
• Technical data: logs from our hosting and infrastructure (e.g., IP, user agent, timestamps) used for security and reliability.
• Cookies/local storage: primarily for authentication (e.g., PKCE verifiers, session tokens handled by the auth SDK).

How we use data

• To authenticate you and maintain your session.
• To operate core features (create/join lobbies, chat/presence, profile pages).
• To keep the Service secure, monitor abuse, and debug issues.
• To communicate important updates or policy changes.

Sharing & third parties

We rely on infrastructure and providers (e.g., Supabase for auth/database/storage, Netlify for hosting, OAuth providers like Discord/Google). These processors handle data on our behalf under their terms. Public content (like your display name, username, avatar, lobby titles) may be visible to other users as part of normal functionality.

Security

We use role-based access controls and row-level security in our database where appropriate. No online service can be 100% secure, but we work to protect your data and limit access to what’s necessary to operate the Service.

Retention

We retain account data while your account is active. You can request deletion of your account and associated profile content; some minimal logs may be kept for security, fraud prevention, or legal reasons.

Your choices

• Update your profile details (display name, username, avatar) on your profile pages.
• Control what you upload; remove images or posts you no longer want to share.
• Contact us to request account deletion or data access (see “Contact”).

Children

The Service is not directed to children under 13. If you believe a minor has provided us personal information, please contact us so we can take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and adjust the “Last updated” date. Material changes may also be announced in-app.

Contact

For privacy questions or requests, please reach out via the options listed on our About page.