Your account and your adventure

Privacy Policy

Effective October 19, 2026

This policy covers DnDGPT's official hosted campaign service and this project website, maintained by Deon Holo. Independently hosted copies have their own operators and data practices.

What we access and store

• Sign-in information. Auth0 handles DnDGPT authentication. If you choose Google, Google provides your basic identity information, such as your name, email address, profile picture, and a unique account identifier, to Auth0. DnDGPT's Google connection requests only basic sign-in scopes: email, profile, and OpenID identity. It does not request access to Gmail messages, Google Drive files, calendars, contacts, or other Google content.
• Campaign information. The hosted service stores the character sheets, abilities, companions, inventory, quests, world notes, updates, rolls, and saved versions sent through DnDGPT's tools. Your full ChatGPT transcript is not automatically imported into the campaign database.
• Account and operational information. Campaigns are associated with an account identifier derived from your verified sign-in identity. Display preferences, request metadata, and provider security or service logs may also be stored to operate the service and investigate failures or abuse.

How information is used

Sign-in information identifies your account and controls access to its saves. Campaign information lets you continue your adventure, display your dashboard, and retain a consistent history. Operational information supports reliability and security. DnDGPT does not use Google account information for advertising, sell it, or use it to train an AI model.

DnDGPT's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Services involved

Auth0 processes authentication and may retain your identity profile and security logs. Appwrite hosts the campaign service and database. ChatGPT processes the messages you send and the DnDGPT tool results returned to it, under your OpenAI account's terms and data settings. DnDGPT's backend does not independently call a model inference API.

This static website is hosted by GitHub Pages and has no added analytics, advertising scripts, or tracking cookies. GitHub may log connection information, including IP addresses, for security. The homepage loads its Cabinet Grotesk font from Fontshare, which receives ordinary web requests including your IP address. Its animation scripts and artwork are served from this site. The connected dashboard may store display preferences in your browser and account.

Providers process data under their own policies: Google, Okta/Auth0, Appwrite, OpenAI, and GitHub. Information may be processed where these providers operate. The maintainer may access information when necessary to provide requested support, investigate security or service issues, or meet legal obligations.

Retention and deletion

Campaign records remain until you delete them or the service's data is otherwise removed. In the dashboard, choose your saved game and select Delete campaign…. Review the scope, type the campaign name, and confirm permanent deletion. If cleanup requires several batches, use Continue cleanup until it finishes.

Deletion removes that campaign and its linked saved versions, events, updates, and detailed linked roll data. Other campaigns, account preferences, unlinked historical roll receipts, a small deletion record, and compact retry receipts are retained. The confirmation screen explains this before deletion. Deleting a campaign does not delete your Auth0 account, ChatGPT conversation, provider logs, or copies you have shared. Provider backups or operational records can remain under the applicable provider's retention practices; immediate erasure from every backup is not guaranteed.

Your choices and contact

You can disconnect DnDGPT in ChatGPT and revoke Google sign-in access in your Google Account connections. Revoking access or disconnecting does not itself erase existing saves. Google and email identities are not automatically linked; use the same sign-in method to reopen your campaigns.

For help, deletion of account information, or another privacy request, contact Deon Holo through the project support page or the support address shown on DnDGPT's Google consent screen. Do not post passwords, tokens, private campaign content, or other sensitive information in a public issue. Account requests may require proof of ownership.

Policy changes

Changes will be published here with an updated effective date. Check this page before connecting if you want to review the current data practices.