Privacy Policy

Last updated: 11 August 2026

This policy explains what Tavernbard (the "Service") collects, why, and the choices you have. We keep the data we hold to the minimum needed to run the Service.

What we collect

• Account details: your email address and the identity from the sign-in method you choose (email and password, Google, or Discord). If you sign in with Discord, we store your Discord identity so channel setup works.
• Campaign content: the campaigns, characters, combat state, histories, and save points you and your players create through the Service.
• Usage events: a record of tool calls and similar actions, used to enforce plan limits, keep the Service reliable, and prevent abuse.
• API keys: only a hashed form of each bard_live_ key is stored. The raw key is shown once at creation and never stored or logged.
• Basic technical logs: limited request and error logs needed to operate and secure the Service.

What we do not collect

• No payment card data. Card numbers and payment details are handled entirely by our payment processor and never reach Tavernbard. We store only a customer and subscription reference and a coarse plan status.
• No raw API keys, and no advertising or cross-site tracking profiles.

Why we use it

We use the data above to provide the Service, keep your campaigns separate and secure, enforce the limits of your plan, bill paid plans through the payment processor, prevent abuse, and answer your support requests.

Service providers

We rely on a small number of processors to run the Service, each acting on our instructions: an authentication and database host, an application host that also provides privacy-friendly, cookieless traffic analytics, and a payment processor for paid plans. They process data only to deliver these functions. The current list is available on request.

Cookies

We use only the essential cookies needed to keep you signed in. Our traffic analytics do not use advertising cookies and do not build a profile of you across sites.

Retention

We keep account and campaign data while your account is active. When you delete a campaign, its content is removed. You can request deletion of your account and associated data at any time by emailing us. Some minimal records may be kept where the law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to the processing of your personal data, and to withdraw consent. To exercise any of these, email contact@tavernbard.com. You may also have the right to complain to your local data protection authority.

International processing

The processors above may store and process data in the European Union and the United States under appropriate safeguards. Using the Service means data may be processed in those regions.

Children

The Service is not directed to children under the age at which they can consent to online services where they live, and we do not knowingly collect their data.

Changes

We may update this policy. When we do, we will change the date above and, for material changes, give notice through the Service.

Contact

For any privacy question, or to reach the party responsible for your data, email contact@tavernbard.com. See also our Terms of Service.