This policy explains what we collect, why, and what you can do about it. Short version: we collect what the Service needs to work and nothing we can sell.
What we collect
Account data: your email address, display name and a hashed password (or the identity returned by your sign-in provider). Profile: your @handle, an optional bio and picture. Campaign data: the worlds, journals, notes, sessions, sheets and files you and your players create. Messages: the chats you take part in, your friends and the people you block. Recordings: only if your table turns recording on and everyone agrees; audio is deleted once voices are matched or within a day, and the transcript stays with the session. Billing data: if you subscribe, our payment processor (Stripe) handles your card; we store only a customer id and subscription status. Technical data: server logs with IP addresses and request paths, kept for 30 days for security and debugging.
How we use it
To run the Service, sync your campaign to the people you invite, bill paid plans, respond to support requests and keep the Service secure. We do not sell personal data, we do not show ads, and we do not use your campaign content to train models.
Who can see what
Your campaign: only members you invite, unless the GM publishes a public page. A public page shows only what players can already see (never GM-only notes), and journal entries only from people who chose to share theirs. Game-master notes marked as GM-only are never sent to player devices — that boundary is enforced on our servers, not just hidden in the interface. Journal entries: exactly the audience you pick for each one; “Only me” is never sent to anyone else. Messages: only the people in a chat. Your profile: your name, @handle, bio and picture are visible to other Spellquill users and may appear on public pages you’re part of. Reports: if someone reports you, our team sees the report and a copy of the reported content; you aren’t told who reported you.
Where it lives
Data is stored on servers we operate or rent. Subprocessors: our hosting provider, Stripe (payments), our email delivery provider, the AI provider that runs Pro features and handwriting reading (only the text or page being processed is sent, unless you connect your own model), and AssemblyAI (only for recordings your table chose to make).
Your rights
You can export every campaign as plain Markdown files from the app, download your account data (profile, friends, messages and journal entries) from the account page, correct your details there, and delete your account (which deletes the worlds you own and your messages) at any time. If you are in the EEA or UK you also have the right to complain to your data protection authority.
Cookies
We use a session cookie to keep you signed in. No tracking or advertising cookies.
Changes
If this policy changes in a way that matters, we will tell you in the app before it takes effect.