Privacy Policy
Last Updated: March 21, 2026
1. Information We Collect
When you use Crit-Fumble, we collect the following types of information:
- Account Information: Email address, display name/handle, and authentication credentials
- Discord Information: Discord user ID and username when you sign in or use Discord Activities
- Platform Content: Campaign data, character sheets, world-building content, chat messages, dice rolls, and journal entries you create
- Uploaded Files: Images (avatars, character portraits, campaign art — converted to WebP), private documents, and ROM files stored in your personal storage quota. Files are stored in DigitalOcean Spaces.
- Technical Data: IP address, browser type, device information, and session analytics used to operate and improve the service
- Payment Data: We do not store payment card details. Stripe retains payment records; we store only a Stripe customer ID and your transaction history within the platform.
We do not collect or store your real name.The "display name" on your profile is a handle or username of your choosing — we never ask for, require, or store your legal name on the platform. If you make payments, Stripe processes and holds any identity information required for financial compliance on their infrastructure; we retain only a Stripe customer ID.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Crit-Fumble service
- Enable Discord Activity features and integration
- Authenticate your account and prevent fraud
- Store and sync your campaigns, characters, and world-building content
- Improve our services and develop new features
- Send you service-related announcements and updates
3. Data Storage and Security
Your data is stored securely using industry-standard encryption and security practices:
- Account and payment data is stored with secure PostgreSQL databases
- Campaign and RPG data is stored on secure DigitalOcean infrastructure
- All data transmission uses HTTPS encryption
- We implement appropriate technical and organizational measures to protect your data
4. Third-Party Services
Crit-Fumble integrates with the following third-party services that may receive or process your data:
- Discord: OAuth sign-in, Activities, and voice integration. Discord receives your Discord user ID and username when you authenticate or use voice features.
- Stripe: Payment processing. Stripe handles all payment card data and any identity verification required for payouts. We never see or store your card details — only a Stripe customer ID.
- DigitalOcean: Cloud hosting, managed database, and object storage (Spaces) for your uploaded files. Your data physically resides on DigitalOcean infrastructure.
- LiveKit: Real-time voice and video for VTT sessions. Audio and video are processed in real-time and are not stored by us. Streams are discarded after the session ends. If a GM opts into live streaming via Twitch, the stream passes through our egress server to Twitch; whether Twitch saves a VOD is controlled by the broadcaster's Twitch settings.
Each service operates under its own privacy policy. Authentication is handled by our own infrastructure using open-source tooling — your credentials are not passed to any third-party authentication provider.
5. Data Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations or valid legal requests
- To protect the safety of our users or the public
- With service providers who assist in operating our platform (under strict confidentiality agreements)
Platform staff and GMs may access session chat, campaign notes, and related content in the course of moderating the platform, resolving disputes, or responding to conduct reports. This access is limited to what is necessary and governed by our Community Guidelines.
6. Your Rights and Data Ownership
You own your data. All creative content, campaign data, characters, lore, and other works you create on Crit-Fumble belong to you. We store it to provide the service — we do not claim any ownership or rights over it.
You have the right to:
- Access, update, or delete your personal information at any time
- Export everything — download a full JSON dump of all your profile data, campaigns, characters, messages, transaction history, and all uploaded files via your Account → Privacy & Data page
- License, share, or publish your content under any terms you choose — no permission required from us
- Clear specific data categories (chat messages, dice rolls, journal entries, AI usage logs, spectator follows) individually at any time, from your Privacy & Data page
- Delete your account entirely — all personal information is permanently wiped. Your financial transaction history is retained for legal and audit compliance (with your ID anonymised in all non-financial contexts). Account deletion is self-service from your Privacy & Data page
- Opt out of non-essential communications at any time
All of these actions are available directly in your account settings — no need to contact us. If you need assistance, email privacy@crit-fumble.com.
7. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your login session
- Remember your preferences
- Analyze usage patterns and improve our service
You can control cookies through your browser settings.
8. Age Requirement
Crit-Fumble is an 18+ platform. You must be at least 18 years old to register or use this service. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us immediately at privacy@crit-fumble.com and we will remove the account and all associated data.
9. Conduct Records
When an account is suspended or permanently banned for a conduct violation, we retain a minimal record of the violation and the enforcement action taken. This is kept solely for platform safety — to prevent ban evasion and protect the community — and is not used for any other purpose.
Conduct records are not included in your data export and are not deleted when you delete your account, as their purpose is specifically to record that the account should not be re-admitted. If you believe a conduct record about you is inaccurate, contact us at conduct@crit-fumble.com.
10. Community Guidelines and This Policy
This Privacy Policy should be read alongside our Community Guidelines and Terms of Service. The Guidelines describe how we expect users to handle each other's personal information on the platform (e.g. no sharing of real-world identifying details). This Policy describes how we, as the platform operator, handle yours.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@crit-fumble.com