Privacy Policy · Torch & Tile

1. Who we are

Torch & Tile (the “Service”) is run by Cheyenne Cody Nolan (“we”, “us”, “our”). This policy explains what information we collect when you use the Service, why, who sees it, how long we keep it, and the choices you have. It goes with our Terms of Service. To ask us anything about it, email hello@torchandtile.com.

2. What we collect

What you put in

At a table: the name you join with, the table’s name, its tokens and their notes, chat messages, dice rolls and the turn order. A table keeps its last 200 chat messages.
Characters: what you enter for a character you save, such as its name, race, class, abilities, gear, spells and look.
Pictures and maps: tokens you make in the picture studio, pictures you upload, maps you build or upload, and monsters and plans you save to your library.
Accounts, when we offer them: your email address, the display name you choose, and your password, which we keep only as a salted hash that can’t be turned back into the password. With the account we keep when it was made and last used, your plan and how it was set, the cost of the AI helpers you used this month, and, once paid plans start, the payment processor’s customer and subscription numbers. For each browser you sign in on, we keep a hash of its session, when it started and was last used, and the browser’s name and version as it reports them.
The public game list, if a DM lists a game there: the table’s name, the DM’s display name and one-line description, how many players it has, whether anyone is playing now, when it was last played and the name of its current map. The table’s join code is never shown.
Payments, when paid plans start: our payment processor handles your card. It tells us only limited details, such as your name, email, billing country, the last four digits and expiry date of your card, and whether your plan is paid up. We never see or keep your full card number.
Messages you send us, and what is in them.

Please don’t put sensitive information about yourself or others (health, money, addresses and the like) into names, notes or chat.

3. Photos

The picture studio turns a photo into a token entirely inside your browser. The photo itself is never uploaded to us. Only the finished token is saved when you put it on a table or in your library: a small pixel-art picture, or, for a hero made from a photo, only the colours picked from it.

A pixel-art token made from a photo can still look like the person in it, so only make tokens of people who are happy for you to.

4. Your device, cookies and logs

Your browser’s storage. So that you are recognised when you come back, the Service keeps a few things in your browser’s local storage, on your own device: your sign-in session, your DM key, your player key, the name you last joined with, your seat at the tables you joined, and settings such as your dice look and graphics level. They stay in your browser and we don’t use them to follow you around other sites. Clearing this site’s data in your browser removes them, and your keys with them, so copy your keys first.
Cookies. We don’t use cookies. Staying signed in uses your browser’s storage, as above.
No trackers. There are no analytics, advertising or social-media trackers on our pages. The tabletop’s pages load their fonts from our own server.
Internet address and logs. Like every website, our server sees your internet (IP) address and basic details of each request, such as the page asked for, the time and your browser type. The Service uses your IP address briefly, in memory, to stop floods and abuse, for example by limiting how many tables one address can make in an hour. Our hosting and network providers keep logs with this kind of information for a short time to run and protect their networks.

5. What we use it for

to run your tables and show each person what they should see;
to keep your tables, characters, maps and library from one game to the next;
to run the AI helpers when a DM has turned them on;
to bill paid plans and manage subscriptions;
to keep the Service safe and working: stopping abuse, fixing errors and enforcing our Terms;
to answer you, and to tell you about things that affect you, such as the end of the beta or a price change. We won’t send you marketing email unless you have agreed to it, and you can stop it at any time;
to meet our legal obligations.

If you are in the European Economic Area or the United Kingdom: we use your information to provide the Service you asked for (our contract with you), for our legitimate interests in keeping the Service secure and working well, to meet legal obligations, and, for marketing email, with your consent.

The people at your table. Everyone at a table sees the names, tokens, chat and rolls shared there. The DM sees everything at their table, including every picture uploaded and every character sheet. Players see what the DM shows them. Anyone with a table’s code or link can ask to join, so share codes only with your group.
Everyone, only for a game a DM lists in the public game list: what that list shows (see above), never its join code.
The people who run the Service, who can see the list of accounts (email, display name, plan and AI use) and our backups, to look after the Service and answer you.
The companies that help us run the Service. They handle information for us, under contract, and only to provide their service:
- Render, our hosting provider in the United States, stores the Service and its data;
- Cloudflare runs our domain name and carries connections to our address;
- Anthropic, our AI provider, receives what you give an AI helper, and only when one is used at a table whose DM turned them on. Under its terms for business customers, Anthropic doesn’t use that information to train its models;
- Stripe, our payment processor, when paid plans start;
- an email delivery service, to send password-reset emails and messages about your account;
- a storage provider for an off-site copy of our backups.
When the law requires it, or when we need to protect the rights, property or safety of our users, the public or us.
A new owner, if the Service is sold or merged. The new owner must keep the promises in this policy for the information it receives, or tell you before anything changes.

We don’t sell your personal information, and we don’t share it for targeted advertising.

7. How long we keep it

Tables, with their maps, pictures and chat, until the DM deletes the table. Deleting a table removes it for good.
Characters, DM libraries and built maps, until you delete them, or until we delete keys that haven’t been used for at least 12 months. We will warn account holders by email first.
Accounts, until you ask us to delete yours. We delete it within 30 days of your request.
Payment records, for as long as tax and accounting law requires.
Logs, for a short time, usually no more than 30 days.
Backups. We back everything up every night and keep the last few nights on our server. Deleted information is gone from those within a few days, and from any off-site copy within 30 days.

8. Your choices and rights

Delete things yourself. A DM can delete a table, maps and library items. A player can delete their characters. You can clear this site’s data in your browser.
Ask us. Email hello@torchandtile.com to see, correct, download or delete your information, or to object to how we use it. We will answer within 30 days. We may need to check that the information is really yours, for example by asking you to write from your account’s email address or to show us your key. Players don’t have accounts, so tell us the table code and the name you used.
Your legal rights. Depending on where you live, for example in California, the European Economic Area or the United Kingdom, the law may give you rights to access, correct, delete and take a copy of your information, to object to or limit how we use it, and not to be treated differently for using those rights. You may also complain to your local data protection authority. We don’t sell or “share” personal information as California law defines those words.

9. Children

The Service isn’t meant for children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

10. Keeping it safe

Connections to the Service are encrypted (HTTPS). Keys and sign-in sessions are long random secrets, passwords are kept only as salted hashes, and the server limits how fast anyone can try them. No system is perfectly secure, so keep your keys private. If we learn of a breach that affects your information, we will tell you as the law requires.

11. Where it is kept

The Service runs in the United States. If you use it from somewhere else, your information is sent to and kept in the United States, where data protection laws may differ from yours. Where the law requires it, we use safeguards such as standard contractual clauses for those transfers.

12. Changes to this policy

We may update this policy. We will post the new version on this page with a new date, and for important changes we will give notice on the site, or by email to account holders, before they take effect.

13. Contact

Cheyenne Cody Nolan
Email: hello@torchandtile.com