Privacy Policy

TaliVault is a scheduling tool for tabletop roleplaying groups. This policy explains what we collect, why we collect it, and who else can see it. We collect as little as the service needs to work.

What we collect

• Account details. Your email address, and — if you sign in with Google or Discord — the name and avatar image those services share with us. We never receive your password.
• Your profile. The D&D Name you choose, an optional display name, your timezone, and whether you have allowed others to find you by email address.
• What you create. Campaigns, their descriptions and members, scheduled sessions, and your RSVP responses and notes.
• Technical data. A session cookie that keeps you signed in, and ordinary server logs (IP address, browser, timestamps) kept by our hosting provider for security and troubleshooting.
• Usage data. Which pages you visit, what you click, where you came from, and your browser and device type, so we can see which parts of TaliVault work and which need fixing. We never record what you type.

How we use it

• To run the service: signing you in, showing your calendar, and letting your party find and invite you.
• To send email you have asked for: campaign invitations, session announcements, and reminders when you have not yet responded.
• To keep the service secure and diagnose faults.

We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.

What other people can see

Your D&D Name and display name are visible to anyone who searches for that exact name — that is what makes it useful. Your email address is only discoverable if you turn that setting on; it is off by default. Within a campaign, the other members can see your profile and your RSVP responses. If you invite someone by email address, the invite shows them your email address so they know who it's from.

Who processes it for us

We use a small number of providers to operate the service. They process data only on our instructions:

• Vercel — application hosting
• Neon — database hosting (United States)
• Resend — sending email
• PostHog — usage analytics (United States)
• Google and Discord — sign-in, if you choose to use them

Data is stored in the United States. We may also disclose information if we are legally required to.

Cookies

We set one essential cookie, which keeps you signed in. Clearing it signs you out. We also use PostHog to understand how TaliVault is used, which stores an anonymous identifier in your browser. We use this only to improve TaliVault. We do not use advertising cookies, and we do not sell or share usage data for advertising.

Keeping and deleting your data

We keep your information for as long as your account exists. You can delete your account yourself at any time in Settings. That removes your profile, your seats at tables, the campaigns you own, and your answers, straight away. Some information may remain in encrypted backups for a short period before being overwritten.

People who are invited by email

When a TaliVault user invites you by typing in your email address, we store that address only to send you the invite. The email tells you who sent it, including their email address. If you decline, we delete your address right away. If you don't respond within 14 days, the invite expires and we delete your address then. If you accept, we clear it from the invite, and your account uses whichever email you sign in with. We never add you to a mailing list.

Your rights

Depending on where you live, you may have the right to see a copy of your data, correct it, delete it, or object to how we use it. Email privacy@talivault.com and we will action it.

Children

TaliVault is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.

Contact

Questions about this policy or your data: privacy@talivault.com.