Privacy

What this site collects

Apart from Google Analytics, described below, nothing. There is no sign-up and no login here, we set no cookies of our own, we save nothing in your browser except the played list described below, unless you tap Keep on this phone on an adventure (that keeps a copy of its pages and pictures on this device, never sent anywhere, and Remove deletes it), and there is no advertising tag or social pixel on any page.

Even the fonts are served from this site rather than from a font provider, so reading a page here makes no request to any company except the one hosting us and, when Google Analytics runs, Google. The dice roller does its rolling inside your browser — no roll ever leaves the device. Printables download straight from this site, and we are not told what you printed.

One thing can be sent, and only if you tap it: at the end of an adventure you may tap how it went (Loved it, It was fine, Too long, Too flat). That answer goes to our play server with the adventure and the length you played, and is kept only as a count. No name, account or device goes with it. So one page cannot send hundreds of answers, the server keeps a one-way scrambled form of your connection address for that day, and deletes it after. The library then marks the adventures tables loved most.

One list stays in your browser: when you finish an adventure, this device notes which one, the ending you reached and the date, so the library can mark it Played and suggest something new. It is never sent to us or anyone. "Forget what this device played", under the adventure list, deletes it.

What our host sees

The site is served by Cloudflare Pages. Like every web server, it handles what it needs to send you a page — the address requested, the time, your browser’s user-agent string and your IP address — and keeps short-lived logs of that for delivery, security and abuse prevention. We run no product on top of those logs and do not use them to build a picture of any individual visitor.

The live play table is a separate site

Running an adventure online happens on play.talewickquests.com, a different site at a different address. The "play online" links here take you off this library and onto it. It is ours, which is why this notice describes it — but none of it is loaded into the pages you are reading now.

Players do not need an account. Joining a table takes the invite link or code the host sends, plus a display name the player picks: no email address, no password, no sign-up. The table does keep, in its own database, what a player’s seat leaves behind: that display name and which game it was used at, the hero’s character sheet, the dice rolls, the choices the player taps, and the quick phrases they send (stored as which phrase was picked, never as typed words). It also sets a sign-in cookie in the player’s browser so it knows who is who between clicks. Players talk to the table with ready-made quick phrases. If the guide chooses to let players type, a typed line is shown to the people at the table once and never saved, and a line that looks like a phone number, email or web address is not sent at all. Everything a player’s seat leaves behind is deleted 30 days after the game was last played, unless the guide deletes the game first. The table never asks a player for a real email address, a password or an age. Trying the first scene of an adventure (preview mode) stores nothing at all: no name is typed, no account is made, no cookie is set, and the rolls and choices are gone when the last person closes the page.

The game master (called the guide on the play table) does not need an account either. The usual way to run a table is to start it on one device: no sign-up and no email address, only a birth year, as the next paragraph describes. Either way, the table stores the games they run, the character sheets at their table, and the messages typed in the table chat. Signing in by email is an optional extra, for keeping games on more than one device, and it is still in testing. A game master who uses it also gives the email address the sign-in link is sent to, plus a display name and birth year at sign-up, and the table stores those too. There is no password to store: signing in is a one-time link sent by email. Amazon Web Services sends that email for us, through its Amazon SES service in its US East (N. Virginia) region (us-east-1). To deliver it, Amazon SES receives the address the link goes to and the message itself, which carries the sign-in link, and keeps delivery records such as when it was sent and whether it arrived or bounced.

Here is the device route in full: a game master starts a table on one device with no email address. That asks only for a birth year, which must show they are 14 or over, and a name for the table; a birth year under 14 is turned away before anything is written down. The table keeps that birth year, plus the games, character sheets and chat messages described above, and a sign-in cookie on that device that lasts up to 400 days and is renewed while it is used. Signing out ends it. An email address is stored only if they later choose to add one, to keep their games on other devices. To stop tables being started in bulk, the table also keeps, for about a day, a one-way scrambled code made from the device’s IP address and the date: never the address itself.

A game master, whether they started on a device or signed in by email, can download their account’s data or delete the account at any time, on the play table’s My games page under Your data. Download my data saves a file of everything stored against the account: its details (the email address if it has one, display name and birth year), the games it runs, its seats at tables, the character sheets and chat messages it wrote, and its own quests. Delete my account erases the account, every game it runs with everything at those tables, its seats, sheets and messages at other people’s tables (the other players’ there are left alone), and its own quests, and it signs every device out. A deletion cannot be undone. Players who join with a code have no account to download or delete: what their seat leaves behind goes 30 days after the game was last played, or sooner if the guide deletes the game.

Buying a printable pack

The printable quest packs are sold for us by Dodo Payments, which acts as merchant of record. The buy button on a pack page takes you off this site to Dodo Payments’ own checkout page, and nothing about the purchase passes through this site. At checkout, Dodo Payments collects what it needs to take the payment, work out any tax and send you the file: your name, your email address, a phone number if you choose to give one, your billing details and your card or other payment details. It handles them under its own privacy policy.

Dodo Payments shares a record of each order with us: which pack was bought, the price and the date, the buyer’s name, email address, phone number if given and billing details, and the kind of card used with its last four digits. It never shares a full card number with us. We use that record only to look after that order (a problem with the download, say) and for our own bookkeeping. We do not add buyers to any mailing list, and we do not sell or share the record.

Age and accounts

Anyone can read and play the library. It asks nothing of anyone, at any age.

On the play table, every route that makes an account (signing in by email, and starting a table on a device) is open only to people aged 14 and over. A birth year under 14 is turned away before anything is written down: no email, no name, no birth year is kept. There is no guardian-approval route, so no account for anyone under 14 can exist. Players who join a table with its code make no account and are not asked their age.

We do not build profiles of anyone, and we show advertising to nobody.

What we never do

• Sell, rent or share anything about you with anyone.
• Show advertising, of any kind, to anyone.
• Load advertising trackers, pixels or third-party fonts.
• Ask a player for anything the game itself does not need.

Reaching us, and one gap we are not papering over

Talewick Quests is a working project name; there is no company behind it yet and no mailbox to write to. So this page publishes no postal address, telephone number or contact email rather than printing one that bounces. That is a real gap in this notice, named here instead of hidden. Until there is an address to publish, the only controls we can honestly offer are the ones already built in: this library needs no account at all, and a player joins a table without ever giving us an email.

Changes to this notice

When the substance of this page changes, the version and date at the top change with it. Nothing here describes a feature we are planning — only what the site does today.