Last updated: October 14, 2026
This policy explains what Roleplayer (roleplayer.online), operated by 6ixcore LLC of Elkhart, Indiana, USA, collects, why, and the choices you have. We keep it short and we only collect what the site needs to work.
What we collect
- Account details: username, email address, password (stored hashed, never in plain text), the date you joined and whether your email is verified.
- Profile details you choose to add: display name, bio, whether you play or run games, game systems, time zone, general location, availability, Discord handle and token colour.
- Content you create: listings, characters, campaigns, session logs and notes, homebrew, events, GM reviews, party board posts and handouts. Listings, events, reviews and public homebrew are public. Characters, campaigns and homebrew follow the visibility you pick. Handout images are stored at hard-to-guess web addresses and shown only on the campaign page, but anyone who has the address can open the image.
- Messages: member-to-member messages (My Account → Messages) are stored on the site so both people can read the conversation, and we email a short notice to the person you wrote to. When you message a member about a listing, we email your message to them with your email address as the reply-to and keep a record that a message was sent. We read messages only when someone reports them or when the law requires it.
- Event seats and RSVPs: which events you signed up for and whether you can make a campaign session. The host or GM can see these.
- Payments: if you become a supporter, Stripe handles the payment. We never see or store your card number; we keep your Stripe customer ID and how long your membership lasts. Payments to game masters for paid games happen on the GM’s own payment page and are not handled by us.
- Reports and contact forms: whatever you send us, plus your account name if you are signed in.
- Technical data: our host keeps standard server logs (IP address, browser and pages requested) for security. We use your IP address briefly to rate-limit forms against spam.
- Page counts: we count how many times each page is viewed (the page address and the date only — no IP address, cookie or account is attached) to see which pages are useful.
- Cookies: sign-in cookies when you log in, and — if you follow a member’s invite link — a cookie that remembers who invited you for up to 30 days, so they can be thanked when you join. We do not use advertising or analytics cookies.
- Activity dates: the last day you used the site, so we can send an occasional “open seats” email if you have been away (you can turn these off).
- Game alerts without an account: if you leave your email on Find a Group, we keep it with the search you chose and email you only after you confirm, and only about new matching games — or monthly news if you ticked that box. Every email has an unsubscribe link.
- Member stories: if you answer “how is it going?”, we keep your answers. They appear on the site only if you tick the box allowing it and we approve them, with the name you choose; you can edit or delete your story at any time.
- Calendar address: a private link for your calendar app; you can replace it at any time.
- Exit survey: if you ask us to erase your data you can tell us why. We keep the reason and your note without your name or email.
- Your browser’s storage: the dice roller history, the initiative tracker, the character builder draft, display settings and dismissed announcements are saved in your own browser’s local storage, not on our servers.
How we use it
To run the site and show your content; to send account emails (verification, password resets, campaign and listing notices) and a few getting-started tips in your first week, which you can turn off; to deliver messages you send; to keep the community safe; and to answer you when you contact us.
Who we share it with
We do not sell your data and we do not run ads. Your data is stored with our hosting provider (MakersHost), and emails are sent through our host’s mail servers. Supporter payments are processed by Stripe under its own privacy policy. If a GM links a Discord channel to a campaign, campaign updates — which can include player names, RSVPs and big rolls — are posted to that Discord channel. We may disclose information if the law requires it or to protect members’ safety. Our fonts are served from our own server, so viewing the site does not send requests to Google Fonts.
How long we keep it
We keep your account and content while your account is active. Listings close automatically after a set number of days, and you can delete your listings, characters and campaigns at any time. When you ask us to erase your account, we delete your personal data except anything we must keep by law.
Your choices and rights
- Edit your profile and the visibility of your characters and campaigns at any time.
- Request a copy of your data, or ask us to erase it, from My Account → Privacy. We confirm these requests by email.
- Contact us through the contact page with any privacy question.
Age requirement
Roleplayer is for adults aged 18 and over. If we learn an account belongs to someone younger, we will close it.
Security
The site runs on HTTPS and passwords are hashed. No system is perfectly secure, so please use a unique password for Roleplayer.
Changes
If we change this policy we will update the date at the top of this page.