Privacy policy
Last updated 11 November 2026
Draft: this text is still being reviewed and may change before Tableplop 2 launches.
Tableplop collects as little about you as it can. It shows no ads, uses no analytics or tracking, and never sells your data. This policy explains what is collected, why, who else handles it, how long it is kept and what your rights are.
Who is responsible
The data controller is Tableplop, a sole proprietorship (enkeltpersonforetak) registered in Norway and run by Alex Stavrinou, Granatveien 37C, 1454 Fagerstrand, Norway. For anything about your data, email privacy@tableplop.com.
What we collect and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Your account: display name, email address, password (stored only as a salted hash), profile picture and settings | To give you an account, sign you in, and send login links and password resets | Contract | Until you delete your account |
| Guest accounts: a generated name and a sign-in cookie | To let you play without signing up | Contract | Deleted after 60 days without use |
| What you create and share: campaigns, scenes, tokens, characters, documents, chat messages and dice rolls | This is the service. Other members of a campaign see what you share in it | Contract | Until you or the campaign owner delete it, or you delete your account (see below) |
| Files you upload: images, maps, audio | To store and show them in your games | Contract | Until you delete them or your account |
| Sign-in accounts: if you log in with Discord or Google, your account ID, name and email address there | To log you in. Only if you choose to use them. We never see or store your password for those services | Contract | Until you unlink the account or delete your account |
| Patreon link: your Patreon name and ID, whether you are a patron, and your tier | To give patrons their perks. Only if you choose to link Patreon. We never see or store your payment details or Patreon password | Contract | Until you unlink Patreon or delete your account |
| Session scheduler: poll titles, dates, names and answers, and an email address or Discord webhook only if you choose to give one | To run the poll and, if you asked, to tell you about it | Contract; for notification emails, your consent | Deleted 90 days after the poll's last date |
| IP address and basic request details (time, address requested, browser) in server logs and in memory | To keep the service secure and working: rate limiting, stopping abuse, fixing faults | Legitimate interest | Logs are rotated automatically and kept for a few weeks at most |
| Your IP address during voice and video calls | Calls connect your browser directly to the other people in the call | Contract | Not stored by us |
We don't use your data for advertising, profiling or automated decisions, and we don't sell it.
Who else handles your data
We use a small number of service providers, who process data only on our instructions:
- DigitalOcean (servers, database and file storage). Your account, games and uploaded files are stored with them.
- Postmark, by ActiveCampaign (sending email). Your email address and the content of emails we send you, such as login links. Postmark keeps sent emails for a limited time.
- Google (a STUN server that helps calls connect), only while Tableplop's own call server is unavailable. When you join a call, your browser may then tell Google's server your IP address; no other data is sent.
Some data goes to others because you choose it:
- Other players see what you share in campaigns you join. In a voice or video call, the other people in the call can see your IP address, because the call connects your browsers directly.
- Patreon, if you link your account or log in with it. Patreon is responsible for its own processing under its privacy policy.
- Discord and Google, if you log in with them. They tell us who you are; each is responsible for its own processing under its privacy policy (Discord, Google).
- Discord, if a poll's creator adds a Discord webhook. Updates about the poll, including the names of people who answer, are posted to that Discord channel.
We may also disclose data if the law requires it, for example to answer a valid order from a Norwegian authority.
Transfers outside the EEA
DigitalOcean, Postmark and Google are based in the United States, so your data may be processed there. These transfers rely on the EU–US Data Privacy Framework, which also covers Norway, or on the European Commission's standard contractual clauses in our agreements with these providers.
Cookies and local storage
Tableplop uses only what it needs to work, so it doesn't ask for cookie consent:
session: keeps you signed in. It expires after 60 days without use, or when you sign out.- A short-lived cookie that protects the Patreon linking step, removed when it finishes.
- Your browser's local storage remembers interface preferences such as panel positions and volume. It stays in your browser and isn't sent to us.
There are no advertising, analytics or third-party tracking cookies.
When you delete your account
You can delete your account at any time in Account settings. This immediately deletes your account, your sign-in sessions, the campaigns you own (with everything in them), your characters, your uploaded files and your Patreon link. Messages you posted in other people's campaigns remain part of their game history, but your name and picture are removed from them (messages you posted as a character keep the character's name). Extensions you published for others stay available without your name. Deleted data can stay in database backups for a short time until the backups expire.
Your rights
Under the GDPR you have the right to:
- see and get a copy of your data. Account settings has a “Download my data” button that gives you everything tied to your account in a machine-readable file;
- correct it, which you can mostly do yourself in Account settings;
- delete it, by deleting your account or asking us;
- restrict or object to how we process it;
- withdraw consent, for example with the “stop these emails” link in any scheduler email.
To use any of these rights, email privacy@tableplop.com. We will answer within a month. If you are unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority where you live.
Children
You must be at least 13 years old to use Tableplop. If you believe a child under 13 has given us personal data, contact us and we will delete it.
Security
All traffic to Tableplop is encrypted with HTTPS, passwords are stored only as salted hashes, and access to the servers is limited to the person who runs Tableplop.
Changes to this policy
When this policy changes, the date at the top changes too. If a change is significant, we will tell you in the app or by email before it takes effect.