Privacy
What is collected, why, and how to get rid of it.
Without an account
The desktop app collects nothing. Your rolls, history, profiles, bans and settings live in local storage on your own PC and are never sent anywhere. You can use every free feature without the app ever contacting a server.
Two things reach out only when you ask them to: the party relay, when you join a party, and the licence check, when you activate a key.
With an account
An account stores:
- Your email address — to sign in and to reset your password. It is not used for anything else and is not sold or shared.
- Your display name — shown on anything you publish to the gallery.
- A hash of your password — PBKDF2-SHA256 with a random salt. The password itself is never stored and cannot be recovered from the hash, by us or anyone else.
- Session tokens — stored as SHA-256 digests, so a database dump lets nobody sign in as you.
- What you sync — profiles, bans, favourites, presets, house rules, vault, pools and mastery goals, if you turn sync on.
- What you publish — gallery entries, under your display name.
- A minimal audit log — sign-ins, registrations and publishes, with a country code. No IP addresses beyond that, and no request contents.
What is not collected
No analytics, no tracking pixels, no advertising, no third-party scripts beyond Google Fonts for the typefaces on this site. No behavioural profiling. The app does not read your game files, your other processes, or anything on your PC outside its own storage.
Payments
Card details never touch this site. When checkout is wired up it will run through a payment provider who handles the transaction; all that comes back here is an order id and the email address to attach the purchase to.
Deleting it
The Account page has a Delete account button. It removes your user record and everything attached to it — sessions, entitlements, synced documents, vault, pools, tournaments and gallery entries — permanently and immediately. There is no soft delete and no recovery window, so be sure.
You can also just stop using the account: the desktop app keeps working offline with everything stored locally.
Cookies
One, dfr_session, set when you sign in. It is httpOnly, Secure and SameSite=Lax,
holds nothing but a random session token, and is cleared when you sign out. There are no
analytics or advertising cookies, which is why this site has no cookie banner.
Changes
If this notice changes in a way that affects what is collected, the change will be announced on this page before it takes effect.