Privacy Policy

TaliVault is a scheduling tool for tabletop roleplaying groups. This policy explains what we collect, why we collect it, and who else can see it. We collect as little as the service needs to work.

What we collect

• Account details. Your email address, and — if you sign in with Google or Discord — the name and avatar image those services share with us. We never receive your password.
• Your profile. The D&D Name you choose, an optional display name, your timezone, and whether you have allowed others to find you by email address.
• What you create. Campaigns, their descriptions and members, scheduled sessions, and your RSVP responses and notes.
• Technical data. A session cookie that keeps you signed in, and ordinary server logs (IP address, browser, timestamps) kept by our hosting provider for security and troubleshooting.

How we use it

• To run the service: signing you in, showing your calendar, and letting your party find and invite you.
• To send email you have asked for: campaign invitations, session announcements, and reminders when you have not yet responded.
• To keep the service secure and diagnose faults.

We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.

What other people can see

Your D&D Name and display name are visible to anyone who searches for that exact name — that is what makes it useful. Your email address is only discoverable if you turn that setting on; it is off by default. Within a campaign, the other members can see your profile and your RSVP responses.

Who processes it for us

We use a small number of providers to operate the service. They process data only on our instructions:

• Vercel — application hosting
• Neon — database hosting (United States)
• Resend — sending email
• Google and Discord — sign-in, if you choose to use them

Data is stored in the United States. We may also disclose information if we are legally required to.

Cookies

We set one essential cookie, which keeps you signed in. We do not use analytics, tracking, or advertising cookies. Clearing it signs you out.

Keeping and deleting your data

We keep your information for as long as your account exists. You can ask us to delete your account at any time and we will remove your profile, your campaigns, and your RSVP history. Some information may remain in encrypted backups for a short period before being overwritten.

Your rights

Depending on where you live, you may have the right to see a copy of your data, correct it, delete it, or object to how we use it. Email privacy@talivault.com and we will action it.

Children

TaliVault is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.

Contact

Questions about this policy or your data: privacy@talivault.com.