Privacy Policy

Last updated: September 1, 2026

This policy explains what personal data the D&D Adventurers League Module Manager (“the Service”, “we”) collects, why, and what you can do about it. The Service is a small, free tool run by an individual hobbyist for tracking D&D Adventurers League play.

Information we collect

• Account information. Your email address, an optional display name, and either a password (stored only as a salted scrypt hash — never in plain text) or, if you sign in with Google, a Google account identifier and the verified email Google returns. We record the time of your last sign-in.
• Content you enter. Which modules you mark as owned, the dates you last ran them, personal notes you attach to modules, and any “please add this module” requests you submit.
• Technical data. A single session cookie that keeps you signed in (strictly necessary; not used for tracking), and standard server logs containing your IP address, request time, and browser user agent, kept short-term for security and troubleshooting.

We do not use analytics, advertising, or any third-party tracking, and we do not load third-party scripts.

How we use it

To authenticate you, to provide the Service’s features, and to keep the Service secure and working. We do not use your data for any other purpose.

Sharing

We do not sell or rent personal data, and we do not share it except with the infrastructure providers that operate the Service on our behalf: Google LLC (only if you choose “Sign in with Google”) and Oracle Corporation (cloud hosting). The shared module/item catalog is visible to every signed-in user, but your per-account data (owned status, last-run dates, personal notes) is private to your account. A module request you submit is visible to the site’s curator.

Retention

Account data is kept until you delete your account. Server logs are rotated within about 30 days. Encrypted database backups, which may contain your data, are retained for about 30 days and then deleted.

Your choices

You can view and change your display name and password, and permanently delete your account and its associated data, at any time from the Account page. Deletion is immediate and irreversible (module requests you filed are kept but detached from your identity). For anything else, contact us at the address below.

Security

All traffic is served over HTTPS. Passwords are hashed with scrypt. Access to the shared catalog is limited to a single curator account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children under 13, and we do not knowingly collect their data. Please do not create an account if you are under 13.

Where data is processed

The Service is hosted in the United States.

Changes to this policy

We may update this policy from time to time. The “last updated” date above will change, and significant changes will be noted in the app.

Contact

Questions about this policy: snelson89@gmail.com