The short version
Gather & Roll stores what it needs to run your campaigns, and nothing it doesn't. We don't sell your data and we don't share it with advertisers. The one third-party script on the site is Google Analytics, and it does not load unless you've said yes to it.
What we store
Your account. Your name, email address, and a hashed password — we never store the password itself. If you use two-factor authentication or a passkey, we store what's needed to verify it.
Sign-in with Discord or Google. If you use one of those, we store the account identifier the provider gives us, your display name, and access tokens. Tokens are encrypted. We never see your password for those services.
What you write in a campaign. Your availability, answers to session proposals and the notes attached to them, feedback responses, downtime activities and their conversations, ideas and votes, and your membership of each campaign.
Messages you send us through the contact form: your name, email, and message.
Technical basics needed to keep the service working and to deal with abuse, such as the IP address a contact message was sent from.
Who can see it
Most of what you write is visible to the other people in that campaign — that's the point of a shared calendar. Some things are deliberately narrower:
- Feedback responses are visible only to the campaign's DM, never to other players.
- Downtime threads are private between you and the DM.
- Ideas are private between you and the DM until the DM shares them with the table.
Nobody outside a campaign can see anything inside it.
When you leave a campaign
Your contributions stay with the campaign, attributed to you and marked former member. This is a deliberate design decision, not an oversight: deleting a departed member's answers would tear holes in the campaign's shared history for everyone who is still there. Your availability stops counting towards scheduling immediately.
Getting your data
Every campaign has a Download my data button on its Members tab, which gives you a JSON file of everything you contributed there.
Deleting your account
You can delete your account from Settings → Profile. If you want your contributions removed from a campaign as well, speak to that campaign's DM.
We email you about things happening in your campaigns — a session being proposed, feedback being requested, and so on. These are functional messages about your own activity, not marketing, and there is no mailing list.
Cookies
A session cookie to keep you signed in, and a "remember me" cookie if you ask for one. Your light-or-dark preference is stored in your browser, not on our servers. No advertising cookies.
Anything optional is off until you say otherwise, and you can change that answer whenever you like on the cookies page. Today that means analytics: accept it and Google Analytics sets two cookies and receives the pages you visit; refuse it, or simply never answer, and its script is never loaded at all. Turning it back off expires those cookies.
Google stores that data on their servers, including outside the UK and EU. Their advertising features are switched off on our side, so it isn't used for ad targeting or joined to your Google account across other sites.
Asking us something
Questions about any of this go through the contact page.