Privacy Policy

This Privacy Policy tells you what personal data Armiger Gameworks, Inc. ("Armiger", "we", "us") collects when you use the Armiger website and app (the "Service"), why we collect it, who receives it, how long we keep it, and what rights you have.

• We do not sell your personal data, and we do not show ads.
• We collect usage analytics only if you allow it, and you can change your answer at any time.
• You can see, change, download and delete your data. Write to us and we answer within one month.

1. Who we are

Armiger Gameworks, Inc. is the controller of your personal data for the Service. You can reach us about privacy at [email protected].

2. What we collect

What you give us

• Your account: your email address and password. We store the password only as a salted Argon2 hash, so we cannot read it.
• Your profile: display name, pronouns, bio and profile picture, if you add them. The members of your campaigns can see them.
• Your settings: your email preferences, and the version of the Terms of Service and this Privacy Policy that you accepted, with the time.
• Sign-in with Discord, Google or Apple: your id at that service, the email address of that account, and the username and avatar if the service sends them. We never receive your password for that service.
• Your content: campaigns, characters, documents, maps and tokens, GM screens, homebrew, loot tables, images and other files that you upload, campaign chat and direct messages, dice rolls, session schedules, availability and RSVPs.
• Feedback and reports: what you write in a feedback form or a bug report, with the page you were on and the app version, and the reason that you give when you report an image.
• Email to us: what you write to us, and your email address.

What we collect automatically

• Sign-in sessions: for each session, your IP address, your browser's user agent, and when the session started and was last used.
• Time zone: from your browser, so that digest emails arrive at a sensible hour.
• Error reports: when the app or our servers have an error, we record the error, where in the code it happened, your browser and operating system, the app version and your account id. We do not record your IP address or email address in error reports.
• Security logs: our servers and our network providers log requests, with IP addresses, to protect the Service and fix problems. We also keep IP addresses in memory for a short time to limit repeated sign-in attempts.
• Usage analytics, only if you allow it: which features you use and when, the type of page (not its address), the app version, a random device id and session id, and, after you sign in, your account id. PostHog, our analytics provider, also receives your email address, display name and plan, so that we can turn features on for specific accounts.

What we get from others

• Other users: a GM who invites you by email gives us your email address. Members of your campaigns can mention you in their content.
• Polar, our payment provider: the status of your subscription, its billing period and a customer id. We do not receive your card details.

We do not ask for sensitive data such as health information. Please do not put it in your profile or content.

3. Cookies and storage on your device

• One cookie. The app sets one cookie, arbiter_session, to keep you signed in. Scripts cannot read it. It expires after 30 days, or after 7 days without use. It is strictly necessary, so it needs no consent.
• Storage the app needs. The app stores your preferences (such as theme, font size and sidebar layout), a copy of your campaign data so that it works offline, and changes that are waiting to sync. When you sign out, the app removes your data from the device and keeps the preferences.
• Analytics storage, only if you allow it. A random device id, a session id, and PostHog's own storage. When you turn analytics off, the app removes them.
• The website. armiger.io sets no cookies and has no analytics. It sends error reports to Sentry without your IP address.

We do not use advertising cookies or third-party trackers.

4. How we use your data, and our legal bases

The EU and UK General Data Protection Regulations (GDPR) require a legal basis for each use. Ours are in brackets.

• To give you the Service: your account, sync, campaigns, sharing, chat, schedules, and the emails that you set up, such as direct message notifications and schedule changes (contract).
• To manage your subscription with Polar (contract). Polar keeps tax records (legal obligation).
• To send service emails, such as password resets, invites, security notices and notices about these documents (contract, and our legitimate interest in keeping your account safe).
• To send product update emails, if you turn them on (consent). Every one has an unsubscribe link.
• To measure how features are used and to turn features on for some accounts (consent).
• To keep the Service secure and working: sign-in protection, abuse prevention, error reports, and handling reports about content (our legitimate interest in a safe and reliable Service).
• To read and act on your feedback and bug reports (our legitimate interest in improving the Service).
• To obey the law, such as answering valid legal requests and reporting child sexual abuse material (legal obligation).

We do not make decisions about you that have legal or similarly significant effects by automated means alone, and we do not profile you for advertising. We do not use your content to train AI models.

5. Who receives your data

Other users

• Members of your campaigns see your display name, profile picture, pronouns, bio, characters, campaign messages, dice rolls, availability and RSVPs. A private message or roll to the GM is visible to the GM.
• The people in a direct message conversation see its messages.
• Anyone who has the address of an image or file that you uploaded can open it. Anyone who has a calendar feed link can see that campaign's sessions.

Our service providers

These companies process data for us, only to provide their service to us:

• DigitalOcean: our servers and database.
• Cloudflare: network protection, content delivery and file storage.
• Mailgun: sending account and notification emails.
• Sendy: a newsletter tool that we run ourselves, and the email service that it sends through, for product update emails if you turn them on.
• Sentry: error reports.
• PostHog (United States): usage analytics and feature flags, only if you allow analytics.
• Linear: tracking the bug reports that you send us.
• Discord: posting your feedback to our team's channel, with your display name but not your email address.

Companies that you choose

• Polar sells Pro subscriptions as our merchant of record. It receives your payment details directly and uses them under its own privacy policy.
• Discord, Google and Apple receive your sign-in request when you choose to sign in with them.

Others, when necessary

• Authorities, when the law requires it, and the National Center for Missing & Exploited Children (NCMEC) for reports of child sexual abuse material.
• A buyer or successor, if Armiger is part of a merger, an acquisition or a sale of assets. We tell you before your data becomes subject to a different privacy policy.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising or targeted advertising.

6. International transfers

Armiger is based in the United States, and we and our service providers process your data in the United States and other countries. When EU, UK or Swiss law requires a safeguard for a transfer, we rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) when the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses.

7. How long we keep data

• Your account and content: while your account exists.
• A deleted account: when you delete your account, we sign you out on every device and stop your subscription from renewing. We keep the data, so that you can restore the account by signing in again. To erase it for good, email [email protected] from the email address of the account. We then erase it within 30 days. The erasure also deletes what you added to other people's campaigns, such as your characters, messages and dice rolls. We keep only what the law requires us to keep.
• Sign-in sessions: until they expire, after 30 days at most.
• Password reset links: they expire after one hour.
• Usage analytics: no longer than 25 months.
• Error reports: Sentry deletes them after 90 days at most.
• Feedback, bug reports and content reports: as long as we need them to act on them and to keep a record of our moderation decisions.
• Backups: erased data leaves our backups as they expire on a rolling schedule.

8. Your rights

Wherever you live, you can:

• get a copy of your personal data, in a format that you can move to another service;
• correct it. You can change most of it yourself in Settings;
• delete it;
• withdraw your consent at any time: turn off usage analytics in Settings → Privacy, and product updates in Settings → Notifications or with the unsubscribe link. This does not affect what we did before;
• object to our use of your data based on our legitimate interests, or ask us to restrict it.

Email [email protected]. We answer within one month. For a complex request we can take two more months, and we tell you if we do. We may ask you to write from the email address of your account, so that we know the request is yours. We do not charge for requests.

The EU, the UK and Switzerland

You can complain to the data protection authority where you live or work. In the UK, that is the Information Commissioner's Office (ico.org.uk). We ask that you contact us first, so that we can try to fix the problem.

United States

Residents of California, Colorado, Connecticut, Virginia and other states with privacy laws have the rights above: to know, access, correct and delete their data, and to get a copy that they can move. We do not sell or share personal data, use it for targeted advertising, or use it for profiling, so there is nothing to opt out of. We do not treat you differently for using your rights. An authorized agent can make a request for you with your written permission. If we refuse a request, you can appeal by replying to our answer. If you disagree with the result of the appeal, you can contact your state's attorney general.

9. Children

Armiger is for people who are 16 or older. We do not knowingly collect data from anyone younger. If you think that a child under 16 gave us personal data, email [email protected] and we delete it.

10. Security

The Service uses encrypted connections (HTTPS), stores passwords as salted hashes, keeps the session cookie away from scripts, and limits who at Armiger can access data. No system is perfectly secure. If a breach puts your data at risk, we tell you and the authorities as the law requires.

11. Changes to this policy

When we change this policy in a way that matters, we tell you by email or in the app before the change takes effect, and we ask you to accept the new version when you next sign in. The date at the top shows the last change.

12. Contact

Armiger Gameworks, Inc.
Privacy: [email protected]
Other questions: [email protected]