Privacy policy

Your account

Signing in needs an email address, through a sign-in link, Google or Discord. We store that address so the app can recognise you and so a DM can invite you to a campaign. We never receive your Google or Discord password. Both send your address and an account identifier, plus your public name and profile picture. Those are stored with your account, but the app uses only the address and the identifier.

What you create

Characters, campaigns, notes, compendium entries and any images you upload are stored so the app can show them back to you. Your DM can see the content of their own world. Anything a DM publishes on a world’s public pages is visible to anyone with the link, and everything else is not. If your DM connects a Discord channel, the public dice rolls in their world (the character's name, the roll and its result) are posted there too. A roll made with /roll in a Discord server connected to a world is saved to that world's roll feed like any other roll.

The character import extension

The extension moves one character from D&D Beyond into many.quest without a clipboard. It is built so that nothing from D&D Beyond ever reaches our servers.

• It runs on D&D Beyond character pages and on many.quest, and nowhere else.
• When you press the button it reads that one character, inside your browser, using your own D&D Beyond session. It never reads your other characters and never browses on its own.
• It hands what it read straight to the many.quest tab in your browser. That data is never sent to our servers, and the extension asks for no permission that would let it keep a copy.
• Nothing is saved until you press the create button on the import screen. What gets saved then is the character the app built, exactly as if you had typed it in yourself.

Usage statistics

To see which pages get used and how fast they load on real phones, the site counts page views and measures load times with Vercel Web Analytics and Speed Insights. Vercel is the company that already hosts the site. Neither tool sets a cookie or stores anything on your device, and nothing they record is linked to your account. Page addresses are sent with invite codes and sign-in details removed.

To see which pages get used, where visitors come from and how fast pages load on real phones, the site counts page views and measures load times with Cloudflare Web Analytics. It sets no cookie and stores nothing on your device, and nothing it records is linked to your account. Page addresses are sent without anything after ? or #, so invite codes and sign-in details never leave the site, and the table display is not measured at all.

What we never do

• We do not sell your data, and we do not share it with anyone outside the app, apart from the Discord roll feed and the usage statistics described above.
• There is no advertising on this site, and nothing on it tracks you across other sites.
• We never sign in to D&D Beyond, never contact it from our servers, and never copy its content into our own library.

Cookies

A session cookie keeps you signed in. Two more remember which world and campaign you were last looking at, so that a page load lands where you left off. There are no advertising or tracking cookies.

Deleting your data

Ask your DM to remove your seat, or write to us, and the account and the characters on it are deleted. No archive is kept afterwards.

Contact

Questions about this policy, or a request to delete an account, can go to this address:

hello@many.quest