Privacy policy

Last updated 11 September 2026

Dungeon Lords is a place for tabletop groups to keep their characters, campaigns and house rules, at dungeonlords.win. This page says what we keep about you, why, who sees it, and how to have it deleted. Write to privacy@dungeonlords.win with any question or request.

What we keep

• Your account: the name you choose, the email addresses you've verified, and how you sign in: with an emailed code, Google or Discord.
• From Google or Discord, if you sign in with them: your account ID there, your name, your email address and whether they've verified it, and a link to your profile picture. We never get your password, your contacts or anything else in that account.
• What you make and share: your groups and campaigns and who's in them, the email addresses you invite, your characters, the House Notes you write and every version of them, and the build codes you make.
• Activity: the days your account visits the site, but not which pages or when, and a log of what's done in each group, such as who invited whom or who edited a note.
• Sign-in safety: your sign-in sessions and emailed codes, stored only in scrambled (hashed) form, and short-lived counts of requests from each network, to stop anyone guessing codes.

Signed out, the character builder keeps your build in your own browser, and it only reaches us if you save it to an account or make a build code. When you load a D&D Beyond character sheet PDF into the builder, it's read in your browser and never uploaded.

Cookies

The site uses a few cookies, all of them needed for it to work. None follow you to other sites, and there are no advertising or analytics cookies.

• Your sign-in, for 30 days, renewed while you use the site.
• The step between asking for an emailed code and entering it, for 15 minutes.
• A Google or Discord sign-in in progress, for 10 minutes.
• A one-time notice such as “Saved”, for a minute.
• The group you last visited, for 30 days, so the site can take you back to it.

How we use it

To sign you in; to show your name and what you make to the people you share it with; to send the emails you ask for, which are sign-in codes and invitations; to keep the site secure; and to count how many people use it. We don't sell your information, show ads, or use it for anything else.

Who sees what

• People in your group see your name, the group's campaigns and who plays in them, and its House Notes, signed with the name of whoever wrote each version.
• A campaign's players see its roster: each character's name, class and level.
• Your full character sheet is seen only by you and the DM of the campaign it plays in.
• Anyone you give a build code to gets a copy of that build.
• The site's owner runs the servers, so they can reach everything we keep. They look at it only to run the site and to help people, for example when someone asks for help with an account.

Services we use

• Cloudflare runs the site and stores its data in eastern North America. Its logs of requests, which include IP addresses, are kept for a few days.
• Resend sends our emails, so it receives each email and the address it goes to.
• Google and Discord handle your sign-in, if you choose them.
• Google Fonts supplies the site's typefaces, so Google sees your IP address when your browser fetches them.

Google user data

If you sign in with Google, we use your Google account ID, name, email address and profile picture link only to sign you in and to show your name to your group. We don't use it for advertising, sell it, or share it with anyone beyond the services above. Dungeon Lords' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Keeping and deleting

We keep your information for as long as you have an account. From your account page you can change your name and email addresses, and download your account's details: your name, addresses, ways of signing in, groups and campaigns. The builder can save any character to a file.

Deleting your account, also from your account page, deletes your account, your sign-ins and addresses, your characters, your build codes and the days you visited. It also deletes any group you're the only member of, with everything in it. If you own a group with other people in it, hand it to someone else first. House Notes you wrote stay with their group without your name, and so do entries in a group's log. Expired sessions and codes are cleared out every day.

Children

Dungeon Lords isn't for children under 13. If you think a child under 13 has an account, write to privacy@dungeonlords.win and we'll delete it.

Your rights

Depending on where you live, you may have the right to see, correct, take away or delete what we keep about you, or to object to how we use it. You can do most of that from your account page. For anything else, write to privacy@dungeonlords.win and we'll reply within 30 days.

Changes

If this policy changes, we'll update this page and the date at the top.