Privacy Policy

Last updated : 09/03/2026

Introduction

TTRPG (hereinafter "the Platform") is an online tabletop role-playing game service published by Sandrenyl. We take the protection of your personal data very seriously. This policy describes what data we collect, why, and how we use it, in accordance with the General Data Protection Regulation (GDPR).

Data Controller

The data controller is Sandrenyl, publisher of the TTRPG platform, reachable at: contact@sandrenyl.com.

Data Collected

We only collect data strictly necessary for the service to function:

  • Authentication identifier (via the Lockhart service) — no password is stored on our servers
  • User-chosen nickname
  • Avatar (uploaded image, optional)
  • User preferences (language, theme)
  • Content created within campaigns (character sheets, messages, maps, notes)
  • PayPal transaction data (transaction reference, amount) — we do not store any banking data

Purpose of Processing

Your data is used exclusively to:

  • Enable account creation and management
  • Provide platform features (games, sheets, chat, gameboard)
  • Process payments for paid plans
  • Contact you when necessary for service-related matters

Legal Basis

The processing of your data is based on:

  • Performance of a contract (terms of service accepted upon registration)
  • Your consent for optional data (avatar)
  • Legal obligation for billing data

Data Retention

Your data is retained as long as your account is active. If you delete your account, all your personal data and content are permanently deleted within 30 days. Billing data is retained for 10 years in accordance with legal obligations.

Data Sharing

Your data is never sold, rented, or shared with third parties for commercial purposes. The only third parties involved are:

  • Lockhart — authentication service (hosted by Sandrenyl)
  • PayPal — payment processing (only if you make a purchase)

Cookies

The public pages of the website (homepage, legal pages) do not use any cookies. The application itself only uses browser-side local storage (localStorage) to maintain your session and preferences. No third-party cookies, no advertising trackers, and no external analytics tools are used.

Your Rights

Under the GDPR, you have the following rights:

  • Right of access — view the data we hold about you
  • Right to rectification — correct any inaccurate data
  • Right to erasure — request deletion of your account and data
  • Right to data portability — receive your data in a structured format
  • Right to object — object to the processing of your data

To exercise these rights, contact us at: contact@sandrenyl.com.

Security

We implement technical and organizational measures to protect your data: encrypted communications (HTTPS), token-based authentication, input sanitization, and data access controls.

Changes

We reserve the right to modify this policy. In case of significant changes, users will be notified through the platform.