Privacy Policy

Last updated: October 3, 2026

Key Commitment: RollSolo does not sell your personal information, does not track you across other websites, and treats your private campaign journals and character sagas with strict confidentiality.

1. Data Controller

RollSolo is the data controller responsible for the processing of your personal data under the European General Data Protection Regulation (GDPR) and applicable privacy laws.

2. Data We Collect

Account Credentials: Username and securely salted/hashed passwords (using Argon2/bcrypt standards). We never store plaintext passwords.
Game & Saga State: Campaign metadata, character sheets, progress tracks, active encounters, and turn journal prose.
Technical & Security Logs: IP addresses and timestamps for authentication rate limiting, abuse prevention, and error diagnostics.

3. Cookies & Storage Hygiene

We use strictly necessary httpOnly session cookies to authenticate API requests. We do not store authentication tokens in browser localStorage, mitigating token theft risks from cross-site scripting. We do not use third-party tracking or advertising cookies.

4. Your GDPR & Privacy Rights

We provide self-service tools for your statutory data rights:

Right to Portability (Art. 20): You can download a complete structured JSON archive of all your campaigns, characters, vows, and turn journals at any time via GET /api/user/export.
Right to Erasure (Art. 17): You may permanently erase your account, all associated campaigns, and all turn snapshots at any time via POST /api/user/erase.
Crypto-Shredding (ADR-0013): When you request erasure, all personal identifiers, character records, and campaign journals are immediately purged or rendered mathematically unrecoverable.

5. AI & Third-Party Processors

When you play a turn, your player action text and relevant recent mechanical context are transmitted to our inference partners (e.g. OpenRouter / Anthropic / Meta) strictly for real-time intent parsing and saga narration. Your inputs are not used to train public foundation models.