Last updated: September 1, 2026
1. Overview
Duality Forge is a free, fan-made tabletop RPG toolkit. Your privacy matters — we collect only what's needed to make the tool work and we never sell your data.
2. Data We Collect
Account & Profile (optional — only if you sign in)
- Account information: If you create an account, we collect your email address and authentication information necessary to provide your account. Authentication is provided by Supabase. If you sign in with Google, we may receive information from Google such as your name, email address, and profile picture, depending on the permissions associated with your Google account.
- Profile details you provide: nickname, avatar URL, country, state/region, DM experience level
Game Data (stored when you use the tools)
- Character sheet: name, pronouns, level, heritage, class, stats, HP/stress/hope/armor, thresholds, description fields, backstory, connections, level-up notes
- Cards, domain selections, gear, weapons, armor, inventory items, consumables, gold, experience entries
- DM tools: campaign name, combat tracker creatures, action counters, fear pool, vault creatures/groups, chronicle entries (chapters, NPCs, music cues)
Feedback & Error Reports
- Bug reports and feature requests you submit (message text, page URL, report type)
- Automatic JavaScript error logs (error message, source file, line/column, page URL)
- Feedback reports are stored in Cloudflare KV and automatically expire after 30 days
Technical Information
- Our hosting, security, and infrastructure providers may automatically process technical information such as IP addresses, browser information, device information, request timestamps, and other information contained in network requests for purposes such as security, reliability, fraud prevention, and service operation
Analytics
- Cloudflare Web Analytics: privacy-friendly page view analytics — no cookies, no personal data, no tracking across sites
Local Storage
- Game data may be cached in your browser's local storage to support offline access
- Theme and display mode preferences are also stored locally
- Local game data is not uploaded for cloud synchronization unless you use features that transmit it to our servers or sign in and enable cloud synchronization
3. How We Use Your Data
- To save and sync your game data across devices when signed in
- To display your profile (nickname, avatar) within the app
- To fix bugs and improve the tool using error reports and feedback
- To understand basic page usage via privacy-friendly analytics
4. Where Your Data Is Stored
- Supabase — authentication, user profiles, and cloud-synced game data
- Cloudflare Pages & KV — site hosting and temporary feedback/error report storage
- Your browser — localStorage for auto-cached game data and preferences
5. Data Sharing
We do not sell or rent your personal information. We may disclose or make information available to service providers that process data on our behalf to operate Duality Forge. These service providers include:
- Supabase — authentication, user profiles, and cloud-synced game data storage
- Cloudflare — site hosting, content delivery, temporary feedback/error report storage, and privacy-friendly analytics
6. Third-Party Authentication
If you choose to sign in using Google, Google may process information in accordance with Google's own privacy policies. Duality Forge receives only the information made available through the authentication process.
7. Data Retention & Deletion
- Game data is kept as long as your account exists
- Feedback and error reports auto-expire after 30 days
- You can delete your cloud saves at any time from within the app
- To request full account and data deletion, email us at segatto.builder@gmail.com or use the feedback form
- Local data can be cleared by clearing your browser storage
8. Security
We take reasonable measures to protect information processed through Duality Forge. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
9. Cookies
Duality Forge does not use tracking cookies. Supabase may use essential cookies/tokens for authentication sessions. Cloudflare Web Analytics is cookie-free.
10. Children
Duality Forge is not directed toward children. We do not knowingly collect personal information from children where doing so would violate applicable privacy laws. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, delete it.
11. Changes
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. We encourage you to review this Privacy Policy periodically to stay informed about how we handle information.
