Privacy policy

[Raison sociale ou nom de l’éditeur], [Adresse postale de l’éditeur] (see the legal notice). Contact: [Adresse e-mail de contact] or the contact form (topic “Personal data”). [Délégué à la protection des données, le cas échéant].

• Account: username, e-mail address, password (stored hashed, never in clear text), role, sign-up and sign-in dates.
• Player profile (optional): alias, avatar, bio, experience level, city and country, availability.
• Game content: worlds, campaigns, sessions, events, characters, documents, images and files you publish.
• Private messages and notifications between the members of a campaign.
• AI assistant (optional): your API key, stored encrypted, and your provider settings.
• Contact form: name, e-mail address, topic and message, and your account id if you are signed in.
• Technical data: server connection logs (IP address, date, page requested), needed for security.

We do not ask for any sensitive data. Please don’t publish any in your game content.

• Creating and managing your account, running campaigns, messages and notifications: performance of the contract (the Terms).
• Sending service e-mails (sign-up confirmation, password reset): performance of the contract.
• Answering your requests through the contact form: legitimate interest in replying to you.
• Securing the Service and fighting abuse and bots (logs, reCAPTCHA, rate limits): legitimate interest.
• Keeping connection data and answering requests from the authorities: legal obligation.

No data is used for advertising, sold or used for profiling.

• Other Users, as you choose: a GM sees the profile of the players they invite; the members of a campaign see each other’s profile and character; players only see the parts of the world the GM revealed to them.
• Our processors, strictly to run the Service: the host ([Nom de l’hébergeur]) and the e-mail provider ([Prestataire d’envoi des e-mails]).
• Google (reCAPTCHA), to protect sign-up and the contact form from bots.
• The AI provider you choose (for instance OpenAI), only when you use the assistant, with your own key: it processes that data under its own terms.
• Authorities, upon lawful request.

Google and some AI providers may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

• Account, profile and content: as long as the account exists. An account inactive for 3 years is deleted, after a warning e-mail.
• After an account is deleted: erased within 30 days, backups included.
• Contact form messages: 12 months after the request has been handled.
• Connection logs: 1 year.
• Sign-ups never confirmed: deleted after 30 days.

Table of Chronicles uses no advertising cookies and no audience measurement. Your browser stores locally:

• your sign-in tokens, to keep you signed in;
• your theme (light or dark) and language choice.

These are strictly necessary to the Service and need no consent. The homepage loads Google reCAPTCHA, which may set its own cookies to tell humans from bots (see Google’s policy).

Exchanges are encrypted (HTTPS), passwords hashed, API keys encrypted, and private images and files only reachable by authorised members. In case of a data breach presenting a risk, the CNIL and the people concerned will be informed within the legal deadlines.

You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to give instructions on what happens to your data after your death. Much of this can be done from your profile; for the rest, write to us through the contact form (topic “Personal data”) or at [Adresse e-mail de contact]. We answer within one month; proof of identity may be requested if in doubt.

You can also lodge a complaint with the CNIL (cnil.fr).

The Service is meant for people aged 15 and over. Below that age, signing up requires the consent of a holder of parental authority.

This policy may change; the date of the last update is shown at the top of the page. You will be notified of any significant change.