Privacy Policy

Data Controller

Sebastian König | Toni-Ooms-Str. 9 | 50226 Frechen | DE
Email: info [ at ] charakterbogen.de

What data is processed?

Using this application involves processing the following personal data:

  • Account data: email address, username, and a password hash (the password itself is never stored). The language you last used the site in is stored as well, so that emails can be sent to you in that language. If Discord or Google reports a different confirmed address when you sign in, we offer to use it instead. If you decline, we store only a hash of it so that we do not ask again.
  • Character data: the character sheets you create.
  • Session data: a cookie that keeps you logged in after signing in, plus, for each signed-in device, when it signed in, when it was last used and a coarse device label (e.g. “Firefox · Windows”). The full browser identification string is not stored. You can see this list under “Account” and sign individual devices out there; signing out deletes the entry.
  • Load balancing: a strictly necessary cookie (“cb_lb”) that routes your browser to the same server instance for the duration of your session, so a page is not loaded partly from the old and partly from the new version during an update. It contains only an identifier of that server instance, no information about you, and is deleted when you close your browser. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.

Purpose of processing

This data is used solely to provide you with a user account and your saved character sheets.

Sharing with third parties

Your data is not shared with any third parties.

Visibility within groups

If one of your characters joins a group and the game master accepts the request, that person can view and edit the full character sheet; their changes are stored with their username in the character's change log. The other members of the group are shown the character's name, race, culture and profession as well as the username of the account it belongs to. This visibility ends as soon as the character leaves the group, is removed from it, or the group is deleted. Notes you write for a group's game days are visible, depending on the visibility you choose, to all members and the game master, to the game master only, or to you only; they are shown with your username. They stay part of the group even if your character leaves it; likewise, your character's name stays recorded as present at the game days it attended, but then without your username. If you delete the character or your account, only the attendance itself stays counted, as “Deleted character” without a name. Comments on notes can be seen by everyone who may read those notes, comments and descriptions on pictures by all members and the game master; they are shown with your username and, where relevant, with who marked the comment as done. So that new comments can be marked, we store up to which comment you have read them; nobody but you sees this. Pictures you upload to a game day can be seen by all members and the game master, with your username; we remove their metadata such as location and camera before storing them. You and the game master can delete them; after you delete your account they remain without your username. If you delete your account, your private notes are deleted; your other notes and your comments remain without a username as contributions of a former member until the game master deletes them or the group is deleted. Entries in a group’s compendium can be seen and edited by all members and the game master; it shows who added an entry and who last edited it. They belong to the group and remain when your character leaves it or you delete your account, then without your username. If your email address is confirmed, you get an email when someone asks to join your group, a character is accepted, declined or removed, leaves a group, or a group is deleted; it names the group, the character and, where relevant, the username of the person who caused it. When the game master puts dates up for a vote, all members and the game master see what you answered for each of your characters on each date, with the character’s name and your username; when a date becomes a game day, we mark the characters that answered yes as present. Comments under a vote are shown to all members and the game master with your username; they are deleted once the vote ends and, if you delete your account before that, remain until then without your username. If your email address is confirmed, you also get an email when the game master starts a vote and one with the result once they end it; the result email lists, for each date, how each character answered. If you run the group, you also get an email once everyone has voted. You can switch off both kinds of email separately under “Account”.

Usage analytics

Usage is measured with Matomo, analytics software run on our own infrastructure. It sets no cookies and sends no data to third parties. The information recorded includes the page visited, the referring page, the approximate region, device type, screen size, browser, operating system and language setting. Your IP address is only used to determine that approximate region and is stored in shortened form only. While you are logged in, your user account number is sent along as well, so that usage by signed-in people can be told apart from anonymous visits. That number is a pseudonym: your name, username and email address are never passed to the analytics, but because it is linked to your account you can in principle be identified through it. No such link is made when you are not logged in. If your browser sends a "Do Not Track" signal, nothing is measured at all. The legal basis is the legitimate interest in operating this application in line with actual demand (Art. 6(1)(f) GDPR).

Your rights

You have the right to access, correct, delete, and port the data stored about you. Contact the address above to exercise these rights.