Short version: we collect the minimum a game night needs, players never make accounts, almost everything about a live game deletes itself within a day, and you can download or delete your data yourself at any time from Your data. We do not sell or share personal information.
What we collect
- Host accounts (adults): your email address (you sign in with a one-time code we email you, or with Google), which of those you've used, when you last signed in, and what you build — campaigns, maps, characters, packs, monsters, props, creator listings, purchases.
- Players: a display name typed at join, the hero they build, and — only if they choose — a photo avatar. No account, no email, no tracking profile. A player's name and photo live only as long as the game.
- Heroes carried between game nights: when a hero earns experience, the host's campaign keeps that hero's sheet so the table can pick up where it left off — never the player's name or photo.
- Support messages you send us, and replies you email to our support address.
- We don't run third-party ad or analytics trackers. If that ever changes, this policy will change first.
Children
- Players of any age join only through a game an adult host runs and shares a code for. We ask hosts to get a parent's okay before a child uploads a photo.
- Photo avatars are square-cropped on the device, stripped of location metadata before upload, stored under an unguessable address, and deleted automatically after 30 days. Live game data expires after about 24 hours.
- A parent can ask us to delete a child's photo or name immediately via the support page.
How long we keep things
| What | How long |
|---|
| Live games (player names, heroes, rolls, the map on the TV) | About 24 hours, then deleted automatically |
| Player photo avatars | 30 days, then deleted automatically |
| Heroes your table played (the hero sheet — never the player’s name or photo) | In the host’s campaign until the host deletes it; if the player’s account is deleted, only the game stats stay, as “Adventurer” |
| Your account and what you make | Until you delete your account |
| Support messages, including ones you email us | Until you delete your account — or, if you have no account, until you ask us to delete them |
| The original copies of emails sent to our support address | 90 days |
| Purchase records | 7 years, with your email removed once your account is deleted (tax and payment-dispute records) |
| Admin activity log (what our staff changed, and when) | 1 year |
Who helps us run it
- Amazon Web Services — hosting, database, file storage, and the emails we send (sign-in codes, support replies).
- Stripe — payments, subscription billing for hero plans, and creator payouts. Stripe receives your email and payment details; we never see card numbers.
- Google — only if you choose "Sign in with Google": Google confirms your email address to us. Google learns only that you signed in to Couch Crawl; we send it nothing else.
- That's the whole list. We do not sell or share personal information with anyone else, and we don't use it for advertising.
Your rights
Wherever you live, you can use all of these — they're the rights European law (GDPR) and California law (CCPA/CPRA) give, and we give them to everyone:
- See your data (access, and the right to know what we collect and why) — download it from Your data.
- Take it with you (portability) — the download is a single machine-readable file.
- Fix it (rectification / correction) — edit it in the app, or ask us via the support page.
- Delete it (erasure) — delete your account from Your data. Your private content is erased; things other people depend on are kept without your name (a hero you played at someone else's table becomes "Adventurer" with only its game stats — no name, story or pictures; anything you sold stays with its buyers under "Former creator"), and purchase records are kept for 7 years without your email for tax and payment disputes.
- Object to how we use your data — tell us via the support page.
- Opt out of sale or sharing — there's nothing to opt out of: we do not sell or share personal information.
- No penalty for using any of these rights — same service, same prices.
How to use them, and how fast we answer
- Downloading and deleting are self-serve on Your data: a download is immediate; a deletion takes about a minute — if you close the page before it finishes, it finishes the next time you sign in. For anything else, send a request from the support page.
- We act on requests right away (a deletion takes about a minute; if you close the page, it finishes the next time you sign in, and we finish any it could not ourselves). The law gives us at most 30 days (GDPR) or 45 days (CCPA) — we don't intend to need them.
- Stripe keeps its own records of payments; to have your email removed there as well, ask us and we'll handle it with Stripe.
Changes
- We'll announce material changes to this policy on the site before they take effect.