Your data
Tabletop Aide keeps your group’s campaign organized without taking ownership of it. This page explains what we keep, who can see it, and the choices you have.
Your campaign belongs to your group. We use your data to provide Tabletop Aide, never to sell your campaign, target ads, or train an AI model. You can export your campaign in portable formats.
What we keep
Account information
We keep the email address and display name connected to your account, along with the information needed to keep you signed in and place you in the right campaigns. Supabase Auth stores a salted hash of your password so it can verify sign-in; neither Tabletop Aide nor Supabase stores or logs the readable password.
Campaign content
We keep the material your group adds to Tabletop Aide, including campaign pages, sessions, characters, templates, notes, relationships, images, and edit history. Visibility settings remain attached to the content so player-facing, GM-only, and private material stay separate.
Service records
We keep limited activity and technical records to protect accounts, explain important changes, prevent abuse, and resolve service problems. These records are kept separate from the campaign text itself.
Who can read what
| Reader | Can read |
|---|---|
| Campaign owner | Campaign and GM material, campaign settings, and membership details. Other players’ private notes remain private |
| GM | Campaign and GM material, but not other players’ private notes or owner-only membership details |
| Player | Published campaign material, published character sheets, and their own private notes |
| Anyone else | Nothing |
| An AI you connect | Only the campaigns and permissions you approve, within the same visibility rules that apply to you |
Your private notes are private from your GM too. Sharing one is something you do deliberately, and you can share it with the GM or the whole campaign separately.
How we use your data
We use it only to:
- provide the campaign, account, invitation, and export features;
- apply the visibility and editing permissions your group chooses;
- keep the service secure, reliable, and recoverable; and
- respond when you ask for help or exercise a data right.
Storage and protection
Campaign files are stored privately. Tabletop Aide checks permissions before returning campaign content or issuing temporary access to an image. Access controls are enforced in both the application service and the database, and connections to the service are encrypted in transit.
Retention and deletion
Campaign content remains available while the campaign is kept in Tabletop Aide. Edit history and archived entries remain part of that campaign so changes can be understood or restored. Campaign owners can delete a campaign, and you can contact us to delete your account or request a correction. Limited security and compliance records may be retained where needed to protect the service or meet legal obligations.
Getting your data out
A campaign owner or GM can download the whole campaign from the dashboard without asking us. The export includes portable structured data, readable Markdown, and the campaign’s original assets.
An export follows the same permissions as the dashboard. It does not add another player’s private notes simply because the person exporting is a GM.
Service providers and AI connections
We use trusted infrastructure and email providers to host Tabletop Aide, store data, authenticate accounts, deliver confirmation, recovery, and invitation emails, and operate the service. They process data only for those purposes and under their own security and privacy commitments. We do not use advertising trackers or sell personal information.
Connecting an AI application is optional. A connected application receives only the campaigns and capabilities you approve, remains bound by your Tabletop Aide permissions, and can be disconnected. AI-assisted campaign changes remain reviewable drafts until an authorized person publishes them.
Your questions and requests
For a copy of your data, deletion, a correction, or any question about this page, write to contact@ogre.se. We use the same address for privacy requests and questions about how Tabletop Aide handles your information.