Privacy Policy

Data Controller

Sebastian König | Toni-Ooms-Str. 9 | 50226 Frechen | DE
Email: info [ at ] charakterbogen.de

What data is processed?

Using this application involves processing the following personal data:

• Account data: email address, username, and a password hash (the password itself is never stored).
• Character data: the character sheets you create.
• Session data: a cookie that keeps you logged in after signing in, plus, for each signed-in device, when it signed in, when it was last used and a coarse device label (e.g. “Firefox · Windows”). The full browser identification string is not stored. You can see this list under “Account” and sign individual devices out there; signing out deletes the entry.

Purpose of processing

This data is used solely to provide you with a user account and your saved character sheets.

Sharing with third parties

Your data is not shared with any third parties.

Visibility within groups

If one of your characters joins a group and the game master accepts the request, that person can view and edit the full character sheet; their changes are stored with their username in the character's change log. The other members of the group are shown the character's name, race, culture and profession as well as the username of the account it belongs to. This visibility ends as soon as the character leaves the group, is removed from it, or the group is deleted.

Usage analytics

Usage is measured with Matomo, analytics software run on our own infrastructure. It sets no cookies and sends no data to third parties. The information recorded includes the page visited, the referring page, the approximate region, device type, screen size, browser, operating system and language setting. Your IP address is only used to determine that approximate region and is stored in shortened form only. While you are logged in, your user account number is sent along as well, so that usage by signed-in people can be told apart from anonymous visits. That number is a pseudonym: your name, username and email address are never passed to the analytics, but because it is linked to your account you can in principle be identified through it. No such link is made when you are not logged in. If your browser sends a "Do Not Track" signal, nothing is measured at all. The legal basis is the legitimate interest in operating this application in line with actual demand (Art. 6(1)(f) GDPR).

Your rights

You have the right to access, correct, delete, and port the data stored about you. Contact the address above to exercise these rights.