The short version. This website runs no analytics, no advertising and no tracking cookies. If you never type your email into a form here, we never learn anything about you beyond what any web server unavoidably sees.
If you do give us your email, it goes to our mailing-list provider and is used to email you about Quill & Compass. Nothing else. Ask and it is deleted, same week.
If you make an account in the app itself, your characters and campaigns live in our database so they are there when you come back. They are yours; you can have a copy, or have the lot erased.
If you buy a licence, the payment is taken by Stripe, who sell it to you under the name Onelink, and the licence key is emailed to you through Resend. We never see your card details. We keep a record of the purchase, described below.
Who we are
Quill & Compass is an independent software project run by one developer in the United Kingdom. It is not a company with a press office; when you write to us, a person reads it.
For anything in this policy — a question, a correction, a copy of your data, or a deletion — write to:
For UK data-protection purposes, Quill & Compass is the controller of the personal data described below.
What this website collects
Four things, and only if you volunteer them.
| What | When | Why, and for how long |
|---|---|---|
| Your email address | Only when you submit one of the signup forms | To email you about Quill & Compass — when licences open, and the occasional note about what changed. Kept until you unsubscribe or ask us to delete it. |
| Which page you signed up from | At the same moment | So we know which pages are worth writing. Stored alongside the address; deleted with it. |
| Your tester answers: whether you have a Windows PC, which rules you play, how many players you have, and when you ticked the consent box | Only if you apply to test the app | To choose testers for this round and write to them. Kept until the test round ends; deleted on request. |
| The friend code you came with, and when you ticked the box | Only if you sign up on a friend-code page | So your launch email can carry your £5-off code, and so the Game Master who gave it to you can be thanked with a set of dice in the app. We never tell them who you are; they see only a count. Stored alongside your address; deleted with it. |
The two-minute survey is separate. Your answers (and the optional email, if you tick the box) are stored in our Supabase database to decide what we build and price; the email is only used to invite you to test.
The lawful basis is your consent. You give it by submitting the form; you withdraw it by clicking unsubscribe in any email, or by writing to the address above. Withdrawing is free, immediate, and does not require a reason.
We do not buy lists, we do not sell or rent addresses, and we do not pass them to anyone for their own marketing.
What this website does not collect
- No analytics. There is no Google Analytics, no Plausible, no Fathom, no pixel, and no first-party analytics of our own. Nobody here can tell you how many people read this page.
- No advertising and no tracking cookies. The site sets no cookies at all. The lost-licence-key page loads Cloudflare's Turnstile robot check, which Cloudflare says does not use cookies to store information. The buy page loads only our own script and then sends you to Stripe's hosted checkout page, which is Stripe's page, not ours; what it sets is covered by Stripe's own policy.
- No profiling and no automated decision-making.
The site does use your browser's own session storage on the homepage to remember which scene you were looking at and which class you picked, so a refresh does not throw the page away. That never leaves your device, it is not a cookie, it is not personal data to us, and closing the tab clears it.
Who else sees your data
These are the only third parties involved, and each one only gets what it needs to do its job.
| Who | What they receive | Why |
|---|---|---|
| Cloudflare | Your IP address and browser details, as part of serving any web page | They host this website and protect it from attacks. This is unavoidable for any website: a server cannot send you a page without knowing where to send it. On the lost-licence-key page only, their Turnstile robot check also sees your IP address and browser details, to tell people from bots. |
| MailerLite | Your email address, the page you signed up from, and, if you apply to test, your answers to the tester form | They store the mailing list and send the emails. Their own privacy policy governs what they do with it, and their unsubscribe link works from any email we send. |
| jsDelivr | Your IP address, on two pages only | An open-source code CDN. A Thousand Worlds and the tools page load a 3D graphics library from it. No other page on this site contacts it, and it sets no cookies. |
| Supabase | Your survey answers, if you send them, and whatever you put into the app — see the next section | They provide the database and the sign-in system behind the Quill & Compass app, and they store the answers to the survey. If you buy a licence, they also hold the purchase record described below. |
| Stripe (selling to you as Onelink) | Only if you buy: whatever Stripe's checkout page asks for, which is typically your name, email address, billing country or address, and your card or other payment details. Typed on Stripe's page, not ours | Stripe is the seller of record through its Managed Payments service. You see "Sold through Onelink" and your statement shows LINK.COM*. They take the payment, handle sales tax, send your receipt, and handle refunds and disputes. We never see your card details. Stripe tells us your email address, the order reference, the price and currency, and a notification about the payment that can include the details above. Their own privacy policy governs what they do with it, and they handle requests to delete data held for these purchases. |
| Resend | Only if you buy, or ask for a lost key: your email address and the licence email we send you, which contains your licence key | They send the licence email for us. Their own privacy policy governs what they do with it. |
Every font on this site is served from our own domain. We deliberately do not use Google Fonts, precisely because it would hand your IP address to a third party for the sake of a typeface.
Some of these providers, or their own suppliers, operate outside the United Kingdom. Where your data is transferred abroad it is protected by the standard contractual safeguards those providers publish — the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
What the app stores, if you make an account
The website and the app are separate things. You can read every page here without an account. If you do sign in to Quill & Compass, this is what is held in our database, so that it is still there next session:
- Your account: the email address you signed up with, and an encrypted form of your password. We never see your password.
- Your characters: names, sheets, inventories, spells, notes — everything you write on a character.
- Your campaigns: the campaign, who is in it, invite codes, and the settings for it.
- Your sessions: live session state — maps, tokens, initiative, combat — so a dropped connection does not lose the table's evening.
- Your journals and world notes: whatever you write in them.
- Error reports. When the app crashes or hits an error it did not expect, it sends us a short technical note: what went wrong in our code, which version you were running, which screen was open, and your browser or operating system name. Only the error's fixed wording is kept; any other text inside it is blanked out before it leaves your computer. It never includes anything you or your players wrote — no names, notes, maps or hidden monsters. It is linked to your account so we can find it if you write to us, and it is deleted after 90 days. You can turn it off in the app: ⋯ → Privacy → Error reports.
- Your purchase: only if you buy a licence. Your purchase email address, the payment provider's order reference and customer reference, which tier you bought (founder or standard), the amount and currency, the licence's status (active, refunded and so on), which account the licence is attached to once you use it, and when the licence email was sent. We also keep a copy of each notification Stripe sends us about the payment, as Stripe sent it, which can include your name and billing details. We never store card details; Stripe holds those. The licence key itself is stored only as a one-way scrambled form (a hash) plus its last five characters, so we can find your licence but cannot read your key back. The key is made when you buy and goes into the email; we do not keep a readable copy.
- Friend codes. If you hold a licence, the app gives you a code to share. We keep the code, how many friends joined our list or bought with it, and when. We never store a friend's email address against your code: while a friend has not yet confirmed their address we keep only the reference MailerLite gave their sign-up, for at most 30 days. If you buy with a friend code, we note which code your licence used, and remove that link after 12 months, leaving only the count.
- Usage statistics. Which screens and features get used and how long things take, so a one-person team knows what to fix. Linked to your account; never what you write. Kept until you ask us to delete them. Off in the app: ⋯ → Privacy → Usage statistics.
The lawful basis for your account and campaigns is performance of a contract — you asked us to run a campaign tracker, and it cannot do that without keeping the campaign.
The lawful basis for your purchase record is performance of a contract (your licence, including finding it again if you lose the email and handling a refund) and legal obligation, because tax law requires us to keep sales records.
The lawful basis for friend-code records depends on whose they are. If you sign up to the launch list with a friend code, it is your consent, given by ticking the box on the friend page; you withdraw it by clicking unsubscribe in any email, or by writing to the address above. For the Game Master's own code and its counts, it is performance of a contract: their licence comes with the friend-code offer, and we cannot keep its promise of a set of dice without counting. If you buy with a friend code, the discount is part of your purchase, and the note of which code you used is kept under legitimate interests, so the Game Master who referred you is credited; we keep only a licence id for 12 months, and you can ask us to remove it.
We send error reports because we have a legitimate interest in keeping software you paid for working; the switch lets you object at any time.
Other players in a campaign you join can see the things a campaign is meant to share: your character's name, class, race, level, hit points, armour class and avatar. They cannot see your email address, your private journal entries, or any campaign you are not in.
We do not read your campaigns. Nothing you write is used to train any AI model, ours or anyone else's.
How long we keep it
- Mailing-list address: until you unsubscribe or ask for deletion.
- Account and campaign data: for as long as your account exists.
- Purchase record: for as long as the licence exists and six years after that, for refunds, disputes and tax records. If we delete your account at your request, the purchase record stays but is no longer linked to the account. Stripe and Resend keep their own records on their own schedules, not ours.
- Friend codes: a friend's unconfirmed sign-up reference, 30 days at most; the link between a purchase and the code it used, 12 months; the code and its count of friends, for as long as the licence it belongs to exists.
- Error reports: 90 days from the last time that error was seen.
- Server logs: Cloudflare keeps these briefly for security and abuse prevention, on their own schedule, not ours.
The app does not yet have a "delete my account" button. Until it does, email us and we will delete the account and everything attached to it — within 30 days, and usually the same week. We will tell you when it is done.
Your rights
Under UK data-protection law you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- hand it over in a portable format, or send it to someone else;
- stop or limit what we do with it, including objecting to marketing.
Ask at hello@thequillandcompass.com. It is free, and we will answer within one month. We will not ask you why.
If you think we have got this wrong, you can complain to the UK's Information Commissioner's Office at ico.org.uk. We would rather you told us first, but it is your right either way.
Children
Quill & Compass is not aimed at children, and accounts are for people aged 13 and over. If a younger child has made an account, write to us and we will remove it.
Security, honestly stated
Data is encrypted in transit, passwords are hashed by our sign-in provider and never stored by us in readable form, and database access is restricted per account so one player cannot read another's private data. No system is perfect. If we ever discover a breach that puts you at risk, we will tell you and the Information Commissioner's Office within the time the law allows.
Changes to this policy
If this changes, the date at the top changes with it. If a change actually affects you — a new provider, a new category of data — we will say so in an email rather than quietly editing the page.