Legal
Privacy Policy
The short version. We store the email address and name you sign up with, and whatever you put into your parties: coins, items, notes and character names. We do not run ads, we do not use tracking or analytics SDKs, and we do not sell anything to anyone. You can delete your account, and everything personal in it, from the app's settings screen.
1. Who we are
Ducats and Dragons is an app that helps a tabletop role-playing party keep track of its treasure. The controller responsible for your personal data is [LEGAL NAME], [STREET ADDRESS], [POSTCODE, CITY], the Netherlands. You can reach us at hello@ducatsanddragons.com.
This policy explains what happens to your data when you use the app or visit this website. It is written under the EU General Data Protection Regulation (GDPR).
2. What we collect
We only collect what the app needs to work. We do not ask for your contacts, your location, your photos, or your device's advertising identifier.
| Data | What exactly | Where it comes from |
|---|---|---|
| Account | Your email address, the display name you choose, and — if you sign up with a password — a cryptographic hash of that password. We never store the password itself. | You, when you register |
| Social sign-in | If you sign in with Google or Apple, we store which provider you used and the anonymous user identifier that provider gives us, plus the email address they pass along. | Google or Apple, with your consent |
| Session | A hashed refresh token per signed-in device, with its expiry date, so you stay logged in without re-entering your password. | Created by us when you sign in |
| Parties | The party name, who created it, who its members are, their role (owner or member), and when they joined. | You and your fellow players |
| Purses and content | The character name you give a purse, its coin balances (platinum, gold, electrum, silver, copper), and the items in it: name, type, rarity, attunement, quantity, value and any note you add. | You and your fellow players |
| Transactions | Every deposit and expense: the coin amounts, the note you typed, who entered it, and the date and time. | You and your fellow players |
| Invites | A hash of each invite code, who created it, when it expires and how often it has been used. | Created by us when you invite players |
| Server logs | Our server writes a technical log line for each request: the IP address, the time, the requested path and the response status. Your IP address is also used to rate-limit sign-in attempts, which is how we keep people from brute-forcing accounts. | Your device, automatically |
The notes and character names are free text. Please keep in mind that whatever you type there is stored as you typed it, so do not put anything sensitive in a note about a bag of gold.
This website
This website is static. It sets no cookies, embeds no third-party scripts, and loads its fonts and images from its own server, so no request leaves for another company while you read this page. Our web host records standard access logs, including your IP address, to keep the site running and secure.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and running your account, your parties, purses, items and transactions — that is, delivering the app you asked for. | Performance of a contract (art. 6(1)(b)) |
| Keeping you signed in across devices and letting you invite players. | Performance of a contract (art. 6(1)(b)) |
| Preventing abuse: rate-limiting sign-in attempts, spotting errors, and keeping the service available and secure. | Legitimate interests (art. 6(1)(f)) |
| Answering you when you send us an email about a bug or a question. | Legitimate interests (art. 6(1)(f)) |
| Signing you in with Google or Apple, if you choose that instead of a password. | Consent (art. 6(1)(a)) — you pick the button |
We do not profile you, we do not make automated decisions with legal effects, and we do not use your data for advertising.
4. What your party can see
A party is a shared space, and that is the point of the app. Everyone in a party you join can see:
- your display name and the character names you give your purses;
- the balance and items of the party pot, and of every character purse in that party;
- every transaction in the party, including the note and which member entered it.
Members cannot see your email address, and they cannot change or delete anything in a purse that is not theirs. Only the party owner can delete the party itself. Do not join a party with people you would not hand your character sheet to.
5. Who else sees your data
We do not sell your data and we do not share it for advertising. We use a small number of service providers who process data on our behalf, under a data processing agreement:
- Our hosting provider — [HOSTING PROVIDER, COUNTRY], which runs the server and database where your parties are stored.
- Google and Apple — only if you choose to sign in with them. They tell us who you are; we tell them nothing about your campaign. Their own privacy policies apply to the sign-in itself.
- Google Play and the Apple App Store — they distribute the app and handle its installation. We receive only aggregate, anonymous install and crash statistics from their consoles; we cannot trace those back to you.
We may also disclose data if the law requires it — a valid court order, for example. If that ever happens, we will tell you unless we are legally forbidden from doing so.
6. How long we keep it
- Your account and its content: for as long as your account exists. Delete the account and it goes, as described in section 11.
- Refresh tokens: until they expire or you sign out, whichever comes first.
- Invite codes: until their expiry date, after which they stop working.
- Server logs: a short technical retention period of up to 30 days, then they are rotated away.
- Emails you send us: up to two years, so we can pick up a conversation where it left off.
7. Where it is stored
Your data is stored on servers in the European Union. If we ever need to move processing outside the EU, we will only do so with an adequacy decision or the European Commission's Standard Contractual Clauses in place, and we will update this policy first.
8. How we protect it
- All traffic between the app and our server runs over HTTPS.
- Passwords are stored only as salted hashes, using a modern hashing algorithm. Nobody — including us — can read them back.
- Refresh tokens and invite codes are stored hashed, so a leak of the database does not hand over working credentials.
- Session tokens on your phone are kept in the operating system's secure storage: the Keychain on iOS, the EncryptedSharedPreferences keystore on Android.
- Sign-in attempts are rate-limited per IP address.
No system is perfect. If a data breach ever puts your rights at risk, we will notify the Dutch Data Protection Authority within 72 hours and tell you directly when the law requires it.
9. Children
The app is not directed at children under 13, and we do not knowingly collect data from them. Between 13 and 16, the GDPR asks for a parent's or guardian's consent in the Netherlands. If you believe a child has given us data without that consent, email us and we will delete it.
10. Your rights
Under the GDPR you can ask us to:
- Access — get a copy of the data we hold about you.
- Rectify — correct anything that is wrong. Your email address and name are editable in the app's settings.
- Erase — delete your account and its content (see section 11).
- Restrict or object — limit what we do with your data, or object to processing based on our legitimate interests.
- Port — receive your data in a machine-readable format.
- Withdraw consent — where we rely on it, at any time, without affecting what happened before.
Email hello@ducatsanddragons.com and we will respond within one month. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority in your own country.
11. Deleting your account
Open the app, go to Settings → Delete account, and confirm by typing your name. This cannot be undone. When you do:
- your account, email address and display name are removed from our database;
- your character purses disappear, along with every coin and item in them;
- entries you made in a shared party pot remain in that party's ledger, attributed to "Deleted member" instead of your name — otherwise the party's books would no longer add up for the players who are still using them;
- if you were the only player in a party, that party is deleted along with you.
Backups are overwritten on a rolling cycle, so a deleted account may persist in backup copies for a short period before it is gone for good. If you cannot reach the settings screen, email us and we will do it for you.
12. Changes to this policy
If we change how we handle data, we will update this page and move the "last updated" date at the top. For changes that materially affect you, we will also tell you in the app before they take effect.
13. Contact
Questions, requests, or something on this page that does not match what the app does? Email hello@ducatsanddragons.com. We would rather hear about it than not.