Privacy & Terms
Beta draft, last updated Nov 12 2026
Who we are
TableTop DownTime is a beta, made by one developer with help from an AI sidekick. Things may change or break while we build it, and this page may change too.
What we store
Your email address, so you can sign in. There are no passwords.
Sign-in codes: we keep only a scrambled (hashed) copy, and each code expires after a few minutes.
Your signed-in devices: a session cookie and your browser’s description (its user agent), so you can see and sign out your devices.
That you passed the age check and when. We do not keep your birth year.
Your maps (names, layouts, town settings, join codes), your characters and your saved games in each map.
Mail inside the game: letters between GMs and players, and loot sent with them.
Push subscriptions, only if you turn on notifications: the address your browser gives us to deliver them.
Feedback you send: your message, an optional screenshot, the app version, your screen size and your email if you’re signed in.
App error reports: if the app hits a bug, it sends the error message, the app version, which screen you were on and whether you’re on a phone or a computer. They aren’t linked to your account, no IP address is kept, and they’re deleted after 60 days.
Your browser also keeps a copy of your game and settings on your device.
To stop abuse we count requests per network and per email, using scrambled keys, not the raw IP address or email.
Why
Only to run the game: sign you in, save your maps and characters, deliver mail and notifications, fix bugs from feedback and keep the service safe.
The developer has a private, read-only admin page that lists accounts (email, sign-up date, last seen (using Sandbox while signed in counts), phone or computer, and how many maps, characters and games each has), plus overall totals such as games played, casino spins, how many people used Sandbox, how many invited people signed up, error reports and feedback, to run the beta. It never shows sign-in codes or the contents of your mail. We don’t use outside analytics or ad trackers.
How long we keep it
If an account isn’t used for about 6 months, we send one warning email. If you still don’t sign in or play within 14 days, the account and everything in it (maps, characters, saves, mail) is deleted.
A map nobody opens for about 6 months gets one heads-up email to its GM; 14 days later it rests: its code stops working until the GM restores it from My maps.
We make a backup of the database every night and keep the last 14. Deleted data can stay in those backups until they roll over, about two weeks.
Who helps us run it
The app and its database are hosted by Hostinger.
Emails (sign-in codes, inactivity warnings, and copies of feedback sent to our own inbox) go through Resend.
Notifications go through your browser’s own push service (for example Google or Apple).
What we don’t do
We don’t sell your data. There are no ads and no ad trackers.
Kids
You must be 13 or older to make an account. If you’re younger, no account is made and we don’t store your details (only a scrambled marker for a day, so the answer can’t just be changed).
Deleting your account, questions
You can delete your account any time from your account screen (Delete my account). That removes your maps, characters, saves and mail.
Questions or requests: use the Feedback button in the app.
Terms, in short
Play fair and be kind in the mail you send. Don’t try to break or overload the service. The app is free, offered as it is: we do our best to keep your saves safe, but we can’t promise it will always be available or that nothing will ever be lost.
Questions: info@tabletopdowntime.com