Privacy Policy

Last updated: May 2026

1. The short version

Tavern is a free 2014 and 2024 tabletop companion app. We only store what we need to render your character sheet and let your party share it with you. We do not sell your data. We do not run ad networks. You can export everything you've created and delete your account at any time.

2. What we collect

• Account info. Email address (for sign-in and password reset) and, if you signed in with Discord, your Discord user ID + handle so we can post combat events back to your campaign's Discord channel if you opt in.
• Character data. Everything you enter on the character sheet — name, class, abilities, inventory, notes, backstory, custom homebrew. Stored in our Supabase database and visible only to you (and party members you explicitly invite into a campaign).
• Usage events. Lightweight server-side analytics: which page you viewed, when you signed up, when you rolled your first die. We use these to measure where the app is confusing and to fix it. No personal text content, no character names, no notes. Stored in our own database (no third-party analytics vendor).
• Error reports. When the app crashes we capture a stack trace + the path you were on so we can debug. Stripped of any character data or notes before storage.

3. Cookies + browser storage

Tavern uses a small number of cookies and localStorage keys. We do not use marketing or cross-site tracking cookies.

• Authentication cookies (set by Supabase, names prefixed sb-) — keep you signed in. Required for the app to work.
• Session ID (localStorage keytavern_analytics_session_id) — random UUID per browser tab. Lets us correlate the events from one session without identifying you across sessions.
• Preference flags (localStorage keystavern_share_ack_v1,tavern_signup_at,tavern_ttfm_fired) — remember that you've seen specific notices so we don't show them twice.
• Layout cache (localStorage,tavern_layout_*) — your drag- and-drop section order for the demo character only.

The site does not currently load Google Analytics, Meta Pixel, or any other cross-site tracker. If we add one in the future, this page will be updated before the SDK ships and an in-app notice will appear.

4. Where your data lives

Account and character data is stored on Supabase (rtiuioknjqqmtixsmwoj.supabase.co), hosted in a Supabase-managed region of AWS. The web app itself runs on Vercel. Both providers see your traffic and IP address while serving requests; neither has read access to your characters beyond what's required to serve the database query you issued.

5. Sharing + party campaigns

If you create a public share link for a character (the gold share button on the sheet), anyone with that URL can view a read-only copy of your character. If you remove public sharing or delete the character, the public view stops working immediately.

If you join a campaign, the DM and other party members can see your character's HP, AC, conditions, and active buffs. They cannot see your notes, backstory, or anything outside the live-play surface.

6. Your rights — export + delete

• Export. Account settings includes an "Export my data" button that returns a JSON dump of everything tied to your account (characters, homebrew, campaign roles).
• Delete. The same settings page has an account deletion button. You'll be asked to type "DELETE" to confirm. We immediately remove your characters, homebrew, campaign memberships, and account row. Backups containing your data roll off within 30 days.
• GDPR / CCPA. EU and California residents have the same export + delete rights described above. If you'd like a manual review of an account, email support@tavernapp.gg from the address tied to your account.

7. Children

Tavern is not directed at children under 13. If you are a parent or guardian and believe your child has signed up, email support@tavernapp.gg and we will delete the account and any characters tied to it.

8. Changes

We will update this page when we add or remove a data source. Material changes will be announced on the homepage. Continued use of Tavern after a change means you accept the new policy.

Questions: support@tavernapp.gg