Game Master's Helper
Privacy Policy
How we handle the information entrusted to us
Effective Date: January 1, 2026
Overview
Game Master's Helper ("we," "our," or "the application") is a personal, non-commercial web application built to assist tabletop role-playing game participants. We are committed to protecting the privacy of every adventurer who passes through our gates. This policy explains what information we collect, how we use it, and what choices you have.
By using this application you agree to the practices described here. If you do not agree, please do not use the service.
Information We Collect
We collect only what is necessary to provide the service:
- Account information — your name and email address, provided when you register.
- Campaign & game data — maps, characters, areas, notes, and other content you create within the application.
- Images — map backgrounds and avatar images you upload, stored in Azure Blob Storage.
- Authentication data — a secure session cookie used to keep you signed in. No passwords are stored in plain text.
- Usage data — standard web server logs (IP address, browser type, pages visited) retained briefly for security and diagnostics.
How We Use Your Information
Your information is used solely to operate the application:
- To authenticate you and maintain your session securely.
- To store and display the campaigns, maps, and characters you create.
- To display your avatar and name in the application interface.
- To diagnose errors and maintain the security and stability of the service.
We do not use your information for advertising, analytics platforms, or any purpose beyond operating the application.
Data Sharing
We do not sell, rent, or trade your personal information. Your data is shared only with the infrastructure services required to run the application:
- Microsoft Azure — hosts the application, database (Azure SQL), and image storage (Azure Blob Storage).
- No third-party analytics — we do not use Google Analytics, Meta Pixel, or any similar tracking service.
- No advertising networks — your data is never shared with advertisers.
Cookies & Session Data
We use a single authentication cookie to keep you signed in between pages. This cookie is:
- HttpOnly — not accessible to JavaScript, reducing the risk of theft.
- Secure — transmitted only over HTTPS.
- SameSite=None — required for cross-context authentication flows.
- Removed immediately when you sign out or use "Sign Out (removes MFA)".
We do not use tracking cookies, advertising cookies, or any cookie beyond what is necessary to keep you authenticated.
Data Retention & Deletion
Your account and all associated content (campaigns, maps, characters, images) are retained for as long as your account is active. If you wish to have your data deleted, contact us using the information on the Contact page and we will remove it promptly.
Security
We take reasonable technical measures to protect your information, including HTTPS encryption in transit, HttpOnly secure cookies, antiforgery token validation on all state-changing requests, and role-based access controls within the application. No system is perfectly secure, but we take these responsibilities seriously.
Third-Party Content & IP
Dungeons & Dragons, D&D, and all related titles, characters, and logos are property of Wizards of the Coast LLC. Game Master's Helper is an independent fan tool and is not affiliated with or endorsed by Wizards of the Coast.
Changes to This Policy
We may update this policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of the application after changes are posted constitutes acceptance of the revised policy.
Your story belongs to you. We are merely the tavern keeper — here to provide the space, never to read your journal. — Game Master's Helper