Privacy Policy

Monster Face is a play-by-post tool for Dungeon World. This policy explains what information we collect, how we use it, and your choices. Contact: jayhaase@gmail.com.

Children under 13

Monster Face is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact jayhaase@gmail.com.

Images are stored publicly

Any image you upload to Monster Face — including campaign art, character portraits, NPC images, and map assets — is stored in a public location and can be accessed by anyone with the URL. Do not upload images you want to keep private.

What we collect

• Account information — your email address and authentication data (for example, password hash or login tokens depending on your sign-in method).
• Campaign content — characters, NPCs, session notes, dictionary entries, and other content you create.
• Uploaded files — images attached to campaigns, characters, NPCs, or maps. These are public (see above).
• Basic technical data — logs and diagnostic data needed to keep the Service reliable and secure (for example, timestamps and request metadata).

How we use information

• To run the app and show you your campaigns and content.
• To let campaign members share content with each other.
• To maintain security, prevent abuse, and troubleshoot problems.
• We do not sell your data. We do not use it for advertising.

Cookies / local storage

The Service uses browser storage (and may use cookies) to keep you signed in and to operate core functionality. We do not use third-party advertising cookies.

Data storage

Data is stored using Supabase. Files are stored in Supabase Storage. By using Monster Face you agree to Supabase’s privacy policy as well.

Sharing

We share your information only as needed to provide the Service (for example, with infrastructure providers). Content you share with other campaign members is visible to those members. Images you upload are accessible to anyone with the image URL.

Account deletion

If you want your account removed, email jayhaase@gmail.com. We will delete or de-identify your account information where feasible. Some content you created in shared campaigns may remain to preserve campaign history (for example, attributed to a “Deleted user”).

Changes

We may update this policy as the product evolves. If we make a significant change we will update the date at the top of this page.

Contact

Questions? Email jayhaase@gmail.com.