Legal

Privacy Policy

Version 0.1.0-draft · Last updated September 20, 2026

This document is a draft and is not in effect. It describes how QuestMaster works today, but it has not yet been reviewed by a lawyer and may change before it takes effect. Nothing here creates an agreement until this notice is gone.

1. Who we are

QuestMaster is run by Kyle Fischer, doing business as QuestMaster (“we”, “us”). This policy explains what we collect when you use QuestMaster, why, who else handles it, how long we keep it, and how to get a copy or have it deleted. Questions and requests go to support@questmaster.dev.

2. What we collect

Your account: the email address, name and profile picture from your sign-in, your role, plan, settings, and which version of the Terms you accepted and when.
Campaign content: campaigns, characters, session notes, NPCs, quests, maps, handouts and anything else you write or upload, including players' journal entries and messages to their DM.
Recordings and transcripts: session audio you record or upload, and the text transcript made from it.
Generated content: the summaries, recaps, suggestions and images QuestMaster makes for your campaigns.
Connected services, if you use them: your Discord id and username; a character you import from D&D Beyond; and for Smart Terrain, your board's local network address and its relay credentials, which we store encrypted.
Billing, if you buy Pro: your Stripe customer and subscription ids, plan status, and the records Stripe sends us about payments. We never receive your card number.
Usage: which features you use and how much AI work they cost, so we can apply plan limits, plus analytics events and error reports.

3. Recordings and transcripts

The audio is deleted once it has been transcribed. If transcription fails, or a recording is abandoned before it finishes, the audio is deleted automatically within two days. Only the text transcript is kept.
A transcript is deleted automatically 90 days after it is made, once the session has a written summary. A transcript whose session has no summary is kept until the DM deletes it.
The DM can choose a different period for a campaign, including keeping transcripts indefinitely, and can delete any transcript at any time. The notice shown to the table states the period that campaign actually uses.
Only the campaign's DM can read a full transcript. Players see the summary and recap the DM shares with them.
Live captions are not recorded as audio. Their text stays in the DM's browser until the DM clears it.
Before each recorded session the DM confirms that everyone at the table has been told, and we keep that confirmation, with the version of this policy in force, as a record.

4. How we use it

To run QuestMaster for you and the people you share a campaign with.
To apply plan limits, take payment, and prevent abuse.
To find and fix problems, and to understand which features are used.
To email campaign members the recaps and catch-ups their DM sends.

We do not sell your data, we do not show ads, and we do not use your content to train AI models.

5. Who we share it with

The DM decides what players can see; players never see the DM's private notes or full transcripts. Outside your campaign, we share data only with the service providers that run QuestMaster for us:

Provider	What it does with your data
Clerk	Sign-in and account identity: your email address, name and profile picture.
Neon	The database that holds your account and campaign content.
Vercel	Hosting, file storage (audio, images, handouts and data exports) and background jobs.
Anthropic	Writes summaries, recaps and suggestions from campaign content and transcripts.
OpenAI	Transcribes uploaded and recorded session audio.
Deepgram	Live captions: audio goes from your browser straight to Deepgram.
Google	Generates images from text descriptions of your campaign.
Ably	Keeps the live table in sync between the DM and players.
PostHog	Product analytics and in-app error reports, linked to your account, including your email address and name.
Sentry	Error reports, with request bodies, emails and campaign content removed before they are sent.
Resend	Sends recap and catch-up emails to campaign members.
Stripe	Takes payment for the Pro plan. Card details go to Stripe, never to us.
Discord	Only if you connect it: your Discord id and username, and the recaps, images and messages QuestMaster posts for your campaign.
Cloudflare	Only if you use Smart Terrain lighting: relays commands between QuestMaster and your board.

These providers are based in, or process data in, the United States. We may also disclose data if the law requires it.

6. How files are stored

Uploaded audio, generated images, handouts and data exports are stored at long, randomly generated web addresses. Anyone who has one of those addresses can open the file, so treat a file link like a password and do not share it. Audio is deleted after transcription and an export after 24 hours, as described above.

7. Cookies and browser storage

We use cookies and your browser's storage to keep you signed in, remember your current campaign and view, protect sign-in with Discord, and save drafts and live captions on your device. Our analytics provider also stores an identifier in a cookie and in browser storage. We do not use advertising cookies.

8. Your choices and rights

Get a copy: Settings, Exports builds a file of your profile, your characters and private writing, your usage, and the full content of campaigns you created. The download link works for 24 hours.
Delete your account: Settings, Account. It happens 30 days after you confirm, and you can cancel until then. See the next section for what that removes.
Correct or remove content: edit or delete it in the app. A DM can delete any transcript at any time.
Stop recap emails: use the unsubscribe link in any recap email.
Anything else, including a request under the privacy law where you live: email support@questmaster.dev.

9. What deleting your account removes

Deleted: your sign-in, your characters, your journal entries and messages to DMs, your usage records, your Smart Terrain devices and credentials, your billing records, and any campaign you choose to delete or that only you belonged to. Any Pro subscription is cancelled.
Kept, with your name removed: content you added to campaigns other people still use, shown as written by “Deleted user”, and the recording confirmations other people at the table may rely on.
Deleted data can remain in the database's recovery history for up to 6 hours.
Analytics and error records held by PostHog and Sentry, and Stripe's own payment records, are not deleted automatically. Email us and we will ask PostHog and Sentry to delete yours; Stripe keeps payment records as the law requires.

10. Children

QuestMaster is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, email support@questmaster.dev and we will delete it.

11. Changes

When this policy changes in a way that matters, we update the version and date at the top of this page and tell you in the app. Recording confirmations note which version was in force when they were made.

12. Reference content

QuestMaster includes System Reference Document 5.2 content under CC-BY-4.0. The required attribution is on the SRD Attribution page. The Terms of Service cover how you may use QuestMaster.

2. What we collect

Your account: the email address, name and profile picture from your sign-in, your role, plan, settings, and which version of the Terms you accepted and when.

Campaign content: campaigns, characters, session notes, NPCs, quests, maps, handouts and anything else you write or upload, including players' journal entries and messages to their DM.

Recordings and transcripts: session audio you record or upload, and the text transcript made from it.

Generated content: the summaries, recaps, suggestions and images QuestMaster makes for your campaigns.

Connected services, if you use them: your Discord id and username; a character you import from D&D Beyond; and for Smart Terrain, your board's local network address and its relay credentials, which we store encrypted.

Billing, if you buy Pro: your Stripe customer and subscription ids, plan status, and the records Stripe sends us about payments. We never receive your card number.

Usage: which features you use and how much AI work they cost, so we can apply plan limits, plus analytics events and error reports.

3. Recordings and transcripts

The audio is deleted once it has been transcribed. If transcription fails, or a recording is abandoned before it finishes, the audio is deleted automatically within two days. Only the text transcript is kept.

A transcript is deleted automatically 90 days after it is made, once the session has a written summary. A transcript whose session has no summary is kept until the DM deletes it.

The DM can choose a different period for a campaign, including keeping transcripts indefinitely, and can delete any transcript at any time. The notice shown to the table states the period that campaign actually uses.

Only the campaign's DM can read a full transcript. Players see the summary and recap the DM shares with them.

Live captions are not recorded as audio. Their text stays in the DM's browser until the DM clears it.

Before each recorded session the DM confirms that everyone at the table has been told, and we keep that confirmation, with the version of this policy in force, as a record.

4. How we use it

To run QuestMaster for you and the people you share a campaign with.

To apply plan limits, take payment, and prevent abuse.

To find and fix problems, and to understand which features are used.

To email campaign members the recaps and catch-ups their DM sends.

We do not sell your data, we do not show ads, and we do not use your content to train AI models.

6. How files are stored

7. Cookies and browser storage

8. Your choices and rights

Get a copy: Settings, Exports builds a file of your profile, your characters and private writing, your usage, and the full content of campaigns you created. The download link works for 24 hours.

Delete your account: Settings, Account. It happens 30 days after you confirm, and you can cancel until then. See the next section for what that removes.

Correct or remove content: edit or delete it in the app. A DM can delete any transcript at any time.

Stop recap emails: use the unsubscribe link in any recap email.

Anything else, including a request under the privacy law where you live: email support@questmaster.dev.

9. What deleting your account removes

Deleted: your sign-in, your characters, your journal entries and messages to DMs, your usage records, your Smart Terrain devices and credentials, your billing records, and any campaign you choose to delete or that only you belonged to. Any Pro subscription is cancelled.

Kept, with your name removed: content you added to campaigns other people still use, shown as written by “Deleted user”, and the recording confirmations other people at the table may rely on.

Deleted data can remain in the database's recovery history for up to 6 hours.

Analytics and error records held by PostHog and Sentry, and Stripe's own payment records, are not deleted automatically. Email us and we will ask PostHog and Sentry to delete yours; Stripe keeps payment records as the law requires.