Skip to main content
Golemtek logoGolemtek

Privacy Policy

Last updated: February 7, 2026

1. Introduction

Golemtek ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our campaign management web application for tabletop RPG game masters.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Your name
  • Email address
  • Hashed password (we never store plain-text passwords)

2.2 Campaign Content

To provide our service, we store the campaign data you create, including:

  • Campaign names and settings
  • NPCs, locations, factions, and other world-building content
  • Session notes and logs
  • Plot threads and story elements
  • Uploaded images and maps
  • Player character information

2.3 Usage Data

We automatically collect certain information when you use Golemtek:

  • Device and browser information
  • IP address
  • Pages visited and features used
  • Timestamps of activity
  • Performance metrics

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate your account and secure access
  • Enable real-time collaboration features
  • Send service-related communications (e.g., email verification, password reset)
  • Respond to support requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect and prevent fraud or abuse

4. Data Storage and Security

4.1 Where We Store Data

Your data is stored using the following services:

  • PostgreSQL Database: Core application data including accounts, campaigns, and all content
  • Vercel: Application hosting and serverless functions
  • Liveblocks: Real-time collaboration state and presence data

4.2 Security Measures

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure password hashing, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Third-Party Services

We share data with the following third-party service providers who assist in operating our service:

  • Sentry: Error monitoring and application performance tracking
  • Resend: Transactional email delivery (verification emails, password resets)
  • DiceCloud: Optional character sheet integration (only if you connect your DiceCloud account)
  • Vercel Analytics: Performance monitoring and usage analytics

These services have their own privacy policies governing their use of data.

6. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Required for authentication and core functionality
  • Session cookies: Maintain your logged-in state
  • Analytics cookies: Help us understand how users interact with our application

You can control cookie settings through your browser preferences.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Export: Download your campaign data (available via Markdown and PDF export features)
  • Restriction: Request limits on how we process your data
  • Objection: Object to certain types of processing

To exercise these rights, please contact us at the address below.

8. Data Retention

We retain your account and campaign data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Backups may retain data for up to 90 days after deletion.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

Golemtek is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of Golemtek after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@golemtek.com