Privacy Policy
Effective July 17, 2026
Dreamwright collects only the information needed to operate the character builder, campaign tools, account security, and support workflow.
Information we store
- Account name, email address, password hash, verification state, and security/session records.
- Characters, campaigns, rolls, notes, encounters, journals, settings, and other records you choose to create.
- Portraits, audio, PDFs, and other files you choose to upload or import.
- Feedback and support information you submit.
- Operational information needed for rate limiting, error diagnosis, backups, and service security.
How information is used
We use this information to provide and secure the service, save and synchronize your game records, send transactional account email, answer support requests, prevent abuse, diagnose failures, and recover from data loss. We do not sell personal information or use it for third-party behavioral advertising.
Service providers
Hosting infrastructure processes application data on our behalf. Resend processes transactional account email. Providers receive only the information required for their role and operate under their own security and privacy commitments.
Cookies and local storage
An HTTP-only session cookie keeps you signed in. Browser local storage remembers display preferences, workspace state, and non-secret convenience settings. The service does not rely on cross-site advertising cookies.
Retention and control
Account records remain until you delete the account or they are removed for security, legal, or operational reasons. Temporary import artifacts expire on an operational schedule. Limited encrypted backups may retain deleted records until their normal rotation completes.
While signed in, use My data to download a JSON copy of your records or permanently delete your account. You may also contact us for access, correction, deletion, or privacy questions.
Security and contact
Passwords are stored as one-way hashes, sessions use secure cookies in production, and access is limited by authentication and role checks. No system is risk-free; report suspected account or privacy issues to support@dreamwright.gg.