Privacy Policy

DragonInit is in beta. The app is under active development and this policy may change as features are added. If anything here is unclear, please reach out before creating an account.

Last updated: September 2026

DragonInit is a tool for tracking Dungeons & Dragons campaigns and combat. This page explains what information we store and how it is used. We aim to collect only what the app needs to work. Your use of the app is also covered by our Terms of Service.

What we store

Account information. When you register, we store your email address and the credentials needed to sign you in (managed by ASP.NET Core Identity; passwords are stored only as salted hashes, never in plain text).
Content you create. The campaigns, parties, characters, battles, moves, and stats you enter are stored so the app can show them back to you and to the other members you invite to a campaign.
Sign in with Google (optional). If you choose to sign in with Google, Google tells us your email address, your name and whether Google has verified that address, and we store those to create or match your account. We never see your Google password, and we ask Google for nothing else — no contacts, no calendar, no files. Google's own privacy policy covers what Google records about the sign-in.
Basic operational logs. Routine technical logs (for example errors and request traces) may be recorded to keep the service running and to diagnose problems.
Basic usage analytics. We record simple account-activity events — sign-ins and new registrations — so we can understand how the app is being used. These are stored on our own servers, are not shared with third parties, and use no advertising or cross-site tracking cookies.

What we do not store

No payment or card data. Billing is not live during the beta, so we do not collect or store any credit-card or payment information. If paid features are added later, payments will be handled by a dedicated payment provider and this policy will be updated first.
No recordings of your voice. The combat tracker's microphone is an experimental feature that is off unless a campaign's owner or DM switches it on in that campaign's settings. When it is on, it turns what you say into text using your browser's own speech recognition. When your browser has its offline speech model installed (the tracker offers “Use offline speech”), the words are recognized on your device and the audio never leaves it. Otherwise your browser sends the audio to its maker's speech service — Google, for Chrome — to be turned into text, under that company's own privacy policy. Either way, DragonInit receives only the text. We keep the words recognized for each sentence you speak to the tracker, with what the tracker did with them, for 180 days, so we can find and fix what it gets wrong; only the site's owner can see them. We never receive or store audio. If you switch on Listen to the table, the microphone hears everyone at the table until you switch it off — tell your table first. It only runs with the speech recognition on your own device, so the audio never leaves it, and the words of each turn are kept in the same way, for the same 180 days.
We do not sell your data, and we do not use it for advertising.

How your content is shared

Content is visible to you and to the members you add to a campaign. It is not shared publicly except where you explicitly choose to make something public.

Where your data lives

Data is stored in a SQL Server database on a private server. Traffic to the site is served over HTTPS. As a beta, DragonInit is not yet a suitable place for sensitive personal information — please only enter game content.

Deleting your data

You can delete a campaign you own from within the app. To remove your account and its associated data during the beta, contact us using the details below.

Contact

Questions about this policy or your data? Reach out at support@dragoninit.com.