Privacy policy

JustADnd (a hub of adventurers) is a free service for tabletop D&D games: characters, a bestiary, fights and a talking room at a shared table. This policy explains what information JustADnd collects, including Google user data, how it is used, with whom it is shared, how it is protected, how long it is kept and how you can delete it.

Information we collect

• Your account: login, the name you use at the table and the sign-up date. The password and the recovery code are kept only as one-way hashes.
• If you sign in with Google — the Google user data listed in the next section.
• What you create: hubs, characters, creatures, fights, talking-room messages, uploaded portraits.
• A character you made a public link for is open to anyone who has the link: the sheet and the portrait — without the backstory and without your name. You can switch the link off at any time.
• Sign-ins: a session cookie in your browser (up to 180 days) and the program tokens you issue yourself; only their hashes are stored.
• The server's technical log: address, time and path of a request, the browser's language and name.
• Site counters: how many times the home page and the builder were opened, how many accounts and tables were made — and by which link people came: if a link to the site carries a label (say, ?utm_source=telegram), the steps are counted with it. These are numbers only — no names or addresses.
• Database backups once a day, each kept for 14 days.

What Google user data we access

Signing in with Google is optional. If you use it, JustADnd uses Google Sign-In (OpenID Connect) with the basic scopes openid, email and profile and receives only: your Google account identifier, your name and your e-mail address. JustADnd does not access any other Google data or Google APIs (no Gmail, Drive, Contacts, Calendar or similar).

How we use Google user data

Only to create your JustADnd account and sign you in to it: the Google account identifier links your Google account to your JustADnd account, the name becomes the name you use at the table, and the e-mail address is used once to make your login (the part before «@») and is not stored. Google user data is not used for advertising, not sold, not used for profiling or credit decisions, and not used to develop, improve or train AI or machine-learning models.

How we share, transfer or disclose Google user data

We do not sell, share, transfer or disclose Google user data to third parties. Within the service, your name is shown to the people at the tables you join — that is how they know who you are.

JustADnd's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use other information

Only to run the service: to keep and show your table, to fend off abuse (the log) and not to lose data in a failure (backups). Nothing is used for advertising, sold, used for profiling or used to train AI models.

Who can see your data

The GM of a hub and the people at their table see what is in that hub: characters, talking-room messages, names at the table. If the GM issued a viewer link, the table's talking room can be watched through it. Nothing is passed on or sold to anyone else; there are no ads. The hub's page loads fonts from Google Fonts, so your browser contacts Google's servers for them.

Cookies

The ones the service needs: the sign-in cookie and a short-lived cookie while signing in with Google. If you came by a link with a label, a cookie holding that label and nothing else stays for 7 days, so the counters know which link you came by (above). Interface settings (bestiary filters, dice) stay in your browser. A character you build without an account also stays only in your browser until you save it: it reaches the server when you sign in and save. Analytics cookies are set only if you allow them (below).

Analytics

To understand how many people visit and which sections they use, JustADnd counts visits with Google Analytics. It receives the addresses of the JustADnd pages you open, information about your browser and device, and your approximate location derived from your IP address. Until you allow cookies on the banner, analytics stores nothing in your browser and does not recognise you on your next visit. If you click «Sure», Google Analytics sets its own cookies and tells new visitors from returning ones. The content of your hubs — characters, messages — is not sent to analytics; invitation, viewer and public character pages are not counted. Analytics is not linked to Google Sign-In data.

How we protect your data

All traffic is encrypted with HTTPS (TLS). Passwords, recovery codes, sessions and program tokens are stored only as one-way hashes. Each hub's data is separated in the database and is available only to the people of that table; the server and its backups are accessible only to the operator of JustADnd.

Data retention and deletion

We keep your data, including Google user data, only while your account exists. You can delete your account at any time: the menu under your name → «Удалить учётку» (delete the account). This deletes the account with its hubs and everything in them, its sign-ins, tokens and the stored Google account identifier and name; at other people's tables your characters stay with their GMs. Deleted data disappears from backups within 14 days. You can also ask us to delete your data or tell you what is kept about you — write to hvalick2111@gmail.com.

Children

JustADnd is not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

If this policy changes, the new version will be posted on this page with its date; changes in how JustADnd uses Google user data will also be shown in the app.

Contact

Questions about this policy or your data — hvalick2111@gmail.com.

Last updated November 12, 2026.