What we keep, and why

Sitting down at somebody else’s table takes a code and nothing else. No account, no name, no email. If that is all you ever do, the only thing kept about you is what happens at that table — your piece, your rolls, what you type in the table’s chat — and it belongs to that table rather than to you.

An account is for keeping things: your characters, your tables, your dice, your name following you between screens.

• A username and a display name, both chosen by you.
• Your password, stored only as a scrypt hash. We cannot read it and neither can anybody who steals the database.
• A one-time recovery code, also hashed. It is the way back into an account whose password is lost.
• An email address only if you add one on the Security tab, for getting back in. Today no mail service is set up, so nothing is ever sent to it — the account page says so where you type it — and the recovery code is still the way back.
• Whatever you make: characters, adventures, dice sets, journals, notes, pictures you upload or have drawn for you.
• Your page at /u/your-name, if you fill it in: a line about you, pronouns, favourite rulesets, and which heroes you chose to show.
• The people side: who you follow, your friends and asks to be friends, who you have muted or blocked, your direct messages, and the notifications sent to you.
• A list of the browsers you are signed in on (a browser name and when), so you can sign one out from the Security tab.

No email address is required to make an account, and none is asked for.

Signing in with Google or Discord means that service tells us a permanent account identifier, your email address, and the name on that account (only ever used to suggest a name here, which you choose before the account is made). We keep the identifier and the email address. The identifier is what actually recognises you on the way back; the email address is kept alongside it, for getting back in.

Your email address is never shown to other people, and there is no setting that would show it: it is never on your page.

Signing in this way never opens an account that already exists, even when the email matches one exactly. It makes a new account. Joining the two together happens only from inside an account you are already signed in to, under Security. This is deliberate: matching people to accounts by email address is one of the most common ways apps like this get broken into.

We do not ask either for anything else — not your contacts, your calendar, your files, which Discord servers you are in, or anything else in those accounts. You can take Google or Discord off your account under Security at any time, as long as it leaves you another way in.

What we receive from Google is used only to sign you in, and its use follows the Google’s policy for data from its APIs, including its Limited Use requirements.

This is the part worth reading twice.

DnD Max uses outside AI services to narrate, to draw pictures and to make voices. When somebody at a table asks the AI dungeon master for something, what is happening at that table is sent to one of those services so it can answer. That can include what players have typed, the state of the game, and the names and descriptions of characters.

The services are:

• Anthropic (narration and writing)
• Google (narration, pictures, voices)
• OpenAI (pictures)
• ElevenLabs (voices, sound and music)

Each has its own privacy policy and its own terms, and your content is subject to them once it arrives. If you would rather keep a table’s content away from this entirely, do not use the AI features — the game itself works without them, and the rules and the dice never leave this app.

You can also bring your own key, in which case the asking goes to that provider under your own account rather than ours.

The site runs on Vercel. Game and account data is stored in Upstash Redis; pictures, voice lines and other files are stored in Cloudflare R2 and Vercel Blob. Those companies hold the data on our behalf and have their own security and privacy terms.

Cookies, all of them ours and all of them only for working the app:

• one to keep you signed in;
• one per table you sit at, so that screen keeps its seat;
• two that last a few minutes while you sign in with Google or Discord, to check the answer coming back is the one this browser asked for;
• and, on older browsers that made characters before accounts were required, one that still holds those characters until they are claimed.

Your light or dark choice and page width are remembered in your own browser’s storage and never sent to us.

There is no analytics, no tracking, no advertising and no third-party scripts watching what you do. Nothing about you is sold or shared with anybody for marketing, because there is nothing of the sort here to sell it to.

Things you publish — an adventure on the shelf, a dice set in the pool — can be seen by anybody, and that is the point of publishing them. Things you do not publish are seen by you, and by the people at a table you are playing at, where the table’s own rules apply: a table sees what happens at it.

Your page shows your name, when you joined and what you have already published. The rest is yours to set under Account → Privacy, and starts closed: the line about you is for people signed in, and your heroes, your friends list and whether you are at a table right now are shown to nobody until you change that. “At a table now” is not stored at all while it is off, and lapses by itself within minutes when it is on, so no history of your evenings builds up.

Direct messages are seen by the two people in them. Telling somebody about a message never quotes it. Muting or blocking somebody is never shown to them.

The site administrator can see reported content in order to act on reports, and can see account records in order to run the site.

You can delete your account from your account page. Deleting it removes the account and what it holds, including your page, your friends and blocks, your conversations and your notifications. The other person in a conversation loses it too.

Two honest caveats. Things you published and other people have taken copies of do not come back from those copies. And what happened at a table — the log of a night you played in — belongs to that table, so it stays with the table rather than leaving with you.

DnD Max is not aimed at children under 13, and accounts are not knowingly made for them.

Use the feedback form, which reaches the person who runs the site. If you want something deleted and cannot do it yourself, say so there and it will be done.

If this page changes, the date at the top changes with it. It is kept alongside the app’s own code, so every change to it is on the record rather than something we ask you to take on trust.