Privacy Policy

1. Overview

Tapestry is a campaign workspace for tabletop role-playing games. This policy explains what we collect, why, and what we never do with your data. The short version: we collect only what the Service needs to run, we show no ads, we use no third-party analytics, and we never sell your data.

2. What we collect

• Account data — your email address, display name, and a securely hashed password (or your Google account identifier if you sign in with Google).
• Campaign content — the campaigns, notes, entities, maps, portraits, and other material you create or upload. This content is stored to provide the Service and shared only with the players and co-DMs you invite.
• Operational logs — basic technical logs (such as request timestamps and error reports) used to keep the Service secure and reliable.

3. What we don't do

• No advertising and no ad trackers.
• No third-party analytics scripts.
• No selling or renting of personal data — ever.

4. Cookies and local storage

Tapestry stores an authentication token and interface preferences in your browser's local storage. These are strictly necessary for signing in and remembering your settings. We do not set tracking cookies.

5. Sign in with Google

If you choose Sign in with Google, Google shares your name, email address, and profile identifier with us to create and sign in to your account. That exchange is governed by your Google consent and Google's own privacy policy. We do not receive your Google password or any other Google data.

6. Payments

Tapestry Premium memberships are processed by Patreon. Your payment details go directly to Patreon — we never see or store card numbers. When you connect Patreon, we receive the Patreon identity, membership tier, and membership status needed to activate and maintain Premium.

7. Sharing

We share data only with the infrastructure providers required to run the Service (hosting, Patreon membership processing, and Google sign-in if you use it), or when required by law. Campaign content is visible only to the people you have invited to that campaign, according to the sharing controls you set.

8. Retention, export, and deletion

• Your data is retained while your account is active.
• You can export any campaign you own as JSON at any time from Campaign Settings.
• Deleted campaigns enter a recovery window and are then permanently purged. Uploaded files are removed with them.
• You may request deletion of your account and its data at any time via the in-app feedback tool (available from the campaign menu once signed in).

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. We honor reasonable requests from any user regardless of jurisdiction — contact us via the in-app feedback tool (available from the campaign menu once signed in).

10. Changes to this policy

If this policy changes materially, we will announce it in the application before the changes take effect.