Effective 4 November 2026 (version 2026-11-04).
Data Dungeon is a digital toolkit for tabletop Dungeons & Dragons players. It is made and run by Built By Bean LLC ("we").
This policy says what information the app collects, why, how long we keep it, who processes it for us, and what you can do about it. We collect what the app needs to work. We do not sell your personal information. We do not track you across other apps or websites. There are no advertising networks or third-party analytics in the app.
You give us most of this directly by using the app. The rest comes from the connection your device makes to our servers.
| Data | Why we collect it | How long we keep it |
|---|---|---|
| Email address | To sign you in, reset your password, answer your support messages and send the notices this policy describes. | Until you delete your account. |
| User ID and username | To identify your account and show your name to the friends and campaign members you choose. | Until you delete your account. |
| Photos (an optional profile photo) | To show your avatar. The photo is resized and its camera metadata is removed when you upload it. | Until you remove it or delete your account. |
| Gameplay content (characters, sheets, notes, homebrew, campaign records, dice rolls) | To run the app and keep your characters the same on every device you use. | Until you delete it or delete your account. |
| Other user content (campaign chat, friend connections, shared character pages, reports you file) | To let you play with other people, and to act on reports of abuse. | Messages and connections until the campaign, the friendship or your account is deleted. Reports until they are resolved, then as part of our moderation records. |
| Purchase history (your membership state and the store's purchase identifiers; never card numbers) | To unlock the membership on every device you sign in to, and to keep our accounts. | Membership state until you delete your account. Billing records for as long as tax and accounting law requires; your account identifier is removed from them when you delete your account. |
| Customer support (the messages you send us and our replies) | To help you, and to see what breaks. | Until your request is resolved, then as part of our support records. |
| Coarse location (the country of the connection you signed up from) | To see where players sign up. It is the country Cloudflare reads from your connection. We never ask for your device's location. | Until you delete your account. |
| Crash data (error reports with personal details removed before they are sent) | To find and fix bugs. | About 90 days. |
| Performance data (how long a small sample of the app's background checks take, with no account, address or device attached) | To see when the app is slowing down before players feel it. | About 90 days. |
| Device push tokens (the identifier Apple or Google gives your phone, only if you turn notifications on) | To send the notifications you choose. | Until you log out on that phone, turn notifications off or delete your account. |
| Connection logs (IP address, browser or app version, request times) | To keep the service secure, to rate-limit abuse and to keep it running. | A short time, at our host and at Cloudflare. |
We do not ask for your contacts, calendar, microphone, camera roll beyond the photo you pick, or precise location. There is no advertising identifier and no tracking.
- To provide the service: sign you in, store and show your content, and share it with the people you choose.
- To run your membership: the free month, the subscription and its renewal, through the store you pay in.
- To keep the service secure and working: rate limits, abuse prevention, backups and bug fixes.
- To moderate: review the reports you and others file, apply blocks and bans, and, when the check is turned on, run an automated safety check on uploaded profile photos.
- To answer your support messages and to tell you about changes to the service, these terms or this policy.
- To send the push notifications you turn on, such as a new chat message in your campaign. You can turn each kind off in the app.
We do not use your information for advertising. We do not build marketing profiles. We do not use your content to train artificial intelligence models.
Where the GDPR or the UK GDPR applies, our legal bases are: performing our contract with you (providing the app and the membership); our legitimate interests (security, fixing bugs, moderation, keeping records); your consent (push notifications, which you can withdraw in the app at any time); and our legal obligations (tax and accounting records, responding to lawful requests).
These companies process data for us so the app can run. Each one receives only what its job needs, under a contract that limits what it may do with it. We do not share your personal information with anyone else, except when the law requires it or to protect the service and its users.
| Processor | What it receives | Where |
|---|---|---|
| Railway (hosting and database) | Everything the app stores. | United States |
| Cloudflare (network, security, email routing) | Connection data such as your IP address and country; emails sent to our support address on their way to us. | Global network; United States company |
| Sentry (crash reporting and performance timing) | Error reports, with passwords, tokens, emails and cookies removed before they are sent, and timings of a small sample of the app's background checks, with no account, address or device attached. | United States |
| Resend (email delivery today) and Postmark (email delivery, ready to take over) | Your email address and the content of the emails we send you: password resets, support replies and notices. | United States |
| Apple (App Store payments; push notifications to iPhones) | Your purchase, which you make with Apple under Apple's terms; the push token of your iPhone when notifications are on. | United States |
| Google (Google Play payments; push notifications to Android phones through Firebase; Google Vision SafeSearch when the photo check is turned on) | Your purchase, which you make with Google under Google's terms; the push token of your Android phone when notifications are on; an uploaded profile photo for the automated safety check, when that check is on. | United States |
| Stripe (web membership payments) | Your email address and the payment details you enter on Stripe's pages. Card numbers never reach our servers. | United States |
| RevenueCat (membership state across the App Store, Google Play and the web) | Your account identifier and purchase history, so the membership works on every device. Never card numbers. | United States |
The rules content in the app comes from Open5e and the openly licensed documents it serves. Open5e receives nothing about you; our servers fetch the content.
- Access and export. Open Account and use Export to download a copy of your account and everything in it.
- Correction. Change your email, username, profile photo and profile details in the app at any time.
- Deletion. Open Account and use Delete my account. This permanently deletes your account and everything in it. You can also email us from the address on your account and we delete it for you. A membership bought in a store must be cancelled in that store.
- Objection and restriction. You can turn off each kind of push notification in the app. For anything else, email us and we will stop or limit the processing where the law gives you that right.
- Portability. The export is a plain data file you can take anywhere.
- Complaint. If you are in the EU, the EEA or the UK you can complain to your data protection authority. We would rather hear from you first.
California and other US states. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for anything other than providing the service. You have the right to know what we collect, to correct it, to delete it, and not to be treated differently for exercising these rights. To exercise a right, use the controls in Account or email us; we answer within the time the law sets, and within 30 days when no law sets one. We may ask you to confirm the request from the email address on the account.
Data Dungeon is not directed at children under 13, and you must be 13 or older to create an account. We do not knowingly collect personal information from anyone under 13. If we learn that an account belongs to a child under 13 we delete it and the information in it. If you are a parent or guardian and believe your child has an account, email [email protected].
- Session cookie. One cookie keeps you signed in. It is strictly necessary and ends when you log out, or after 30 days if you chose to stay signed in.
- Push cookie. On a phone that has turned notifications on, a cookie names that phone so logging out forgets it.
- Preferences. Your theme, layout choices and roll log are kept in your browser's local storage under
dd.keys. They stay on your device and never reach our servers.
There are no advertising cookies and no analytics cookies, so there is no cookie banner.
The app is hosted in the United States and the processors above are United States companies. If you use Data Dungeon from the EU, the EEA, the UK or elsewhere, your information is transferred to the United States. Our processors rely on the safeguards the EU and the UK accept for these transfers, such as the standard contractual clauses or the Data Privacy Framework.
Your data travels encrypted between your device and our servers. Passwords are stored only as salted hashes. Access to the systems that hold your data is limited to the people who run the service. No system is perfectly secure; if a breach affects your information we tell you and the authorities the law requires, without undue delay.
When we make a material change to this policy we give at least 30 days' notice by email and in the app before it takes effect, and we update the effective date and version at the top. Signed-in players are asked to agree to the new version once. If you do not agree, stop using the app and delete your account before the effective date. Smaller changes, such as a clearer sentence, take effect when posted.
Questions about this policy or your data: email [email protected], or use the in-app feedback option. Built By Bean LLC is the controller of the personal information described here.
Version 2026-11-04, effective 4 November 2026. It replaces the version of 28 June 2026. See also the Terms of Use.