What is kept, and where

Your Data & Privacy

The short version

Dork Heresy is a free, non-commercial hobby project. I collect only what the features need to work, and nothing is sold, shared or used for advertising. To the extent that I can choose, the data is kept in the EU.

What is stored

The things you create in the app, each tied to your user identifier: your character sheets, any campaigns you run as a Game Master along with their invite codes, the NPCs and encounters in them, and a log of events in those campaigns — sheet changes and, in time, dice rolls — so a group can review what happened last session.

If you upload a portrait for an acolyte or an NPC, the image file is stored too. If you enable the Discord integration, the webhook URL you paste is stored with the sheet or campaign it belongs to, and roll results are sent to that Discord channel when you choose to share them.

A Game Master can see the character sheets that players have linked to their campaign, and players can see limited information about the rest of the party. That sharing follows from joining a campaign, and ends when a character leaves it.

Deleting it

Deleting a character or a campaign in the app removes it, along with any portrait uploaded for it. If you want your account and everything attached to it removed entirely, get in touch and I will do it.

Services I rely on

I use third-party cloud services to keep a hobby project maintainable by one person. These are all well-known companies in the industry, and each has its own privacy policy.

Hosting
The site is hosted by Vercel. Serverless functions run in Frankfurt, Germany. Uploaded images are held in Vercel Blob storage.
Database
Everything described above lives in MongoDB Atlas, in Belgium (Google Cloud Platform, europe-west1).
Authentication
Sign-in is handled by Clerk. If you sign up with an email address it is stored in Clerk's database, as is anything you see about logged-in devices and the IP addresses used to sign in — all of it managed by Clerk rather than by me. With a social login (Google, Discord), Dork Heresy asks for the least it can: your email address. Your display name is shown to the other people in a campaign you have joined.
Analytics
Vercel's web analytics tells me how many people use the site, roughly where from, and how fast pages load. It is there so I notice breakage and slowness — there is no advertising or cross-site tracking.
Discord
Only if you enable it. When you share a roll, its result is posted to the Discord channel behind the webhook URL you supplied. Nothing is sent to Discord otherwise.

Questions, corrections, or a deletion request — please get in touch. Happily. :)