Privacy policy
How we handle your information and your choices.
Effective 14 October 2026
Campaign safety questionnaires
Dungeon Masters can create campaigns, sessions and reusable questionnaire templates. Player answers are stored privately and are available to the campaign owner, not other players. Public questionnaire links expire after 30 days and accept one response. Keep each link private. DMs can withdraw a link, delete an invitation and its answers, or delete a campaign and its associated sessions and answers. Changes to templates and defaults do not change questionnaires already sent. Contact your DM to change a boundary or request deletion of your answers. Site administrators can edit the shared default questionnaire; this does not grant them access to other DMs' answers through the tool.
About this policy
Aspyre D&D operates www.aspyrednd.com and provides Dungeons & Dragons sessions and online tools. This policy explains how we handle personal information. For privacy enquiries, contact Daniel Tucker at daniel@nexusaspyre.com.
Accounts and Google sign-in
Clerk processes account details and sign-in activity. When you sign in with Google, Google and Clerk process the identity information authorised during sign-in, such as your account identifier, name, email address and profile image. We use this information to identify your account and provide account features. Your Google password is entered with Google and is not provided to Aspyre D&D.
Generators and roll history
We store your account identifier with saved generators, including items, descriptions, categories, imported CSV content and settings. Signed-in roll history and repeat-prevention settings are stored against your account. Visitor history remains in page memory and clears on reload. Generators are private by default: their owner and authorised administrators can access them. Administrators can inspect and copy generators, edit their own copies and publish those versions. Published content can be viewed, used and copied by visitors. Avoid including private personal information in generator content.
Bookings, enquiries and questionnaires
We collect information you submit, including names, email addresses, optional phone numbers, participant details, scheduling and venue preferences, and messages. Questionnaires and feedback may include experience, preferences, hopes, concerns and boundaries about game content. We use these details to respond to enquiries, arrange bookings, match players, communicate about sessions and plan suitable games. Avoid unnecessary sensitive information or another person's private information without their permission. Relevant information is available to the people organising and running your session.
Payments
Stripe processes payments. We retain transaction references, amounts and statuses to manage bookings and payment enquiries. Our booking database does not store your full payment-card number.
Cookies and technical information
Authentication and website services use cookies or similar technologies to maintain sessions and operate features. Service providers may process IP addresses, browser and device details, request times and diagnostic logs for operation, security and troubleshooting. The website includes Google Analytics and LinkedIn Insight Tag integrations; when enabled, they measure visits, website use and advertising conversions and may use cookies and device identifiers. You can manage cookies in your browser and advertising preferences with the relevant provider. Blocking cookies may affect sign-in and other features.
Service providers and overseas processing
We use Clerk for authentication, Vercel for hosting and file storage, Railway for our database, Stripe for payments, and email services for correspondence. Google and LinkedIn process information through enabled sign-in or measurement integrations. Providers may process information outside Australia, including in the United States and other countries where they operate. Their privacy policies describe their processing practices. Information may also be disclosed where required by law or necessary to address fraud, security incidents or legal claims.
Security and retention
We use authentication and restricted administrator access to protect information. No internet service can guarantee absolute security. Keep credentials and private booking or questionnaire links secure. Information is retained while needed to provide services, manage accounts and bookings, resolve enquiries and meet applicable recordkeeping requirements. Deleting a generator removes its associated state and history from the active application database. Copies, derivative generators, provider records and backups may require separate handling.
Your choices and requests
You can edit and delete your generators and clear saved roll history through the generator tools. Clearing history and resetting repeat prevention are separate actions. Public generators can be used without an account. Contact daniel@nexusaspyre.com to request access, correction, account closure or deletion of personal information. We may need to verify your identity and explain any legal or operational limits on a request. You can also manage Google sign-in permissions through your Google account.
Concerns and changes
Send privacy concerns to daniel@nexusaspyre.com with details of what happened and the resolution you seek. We will consider your concern and respond using your contact details. If unresolved, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au where it has jurisdiction. We may update this policy as our services or practices change and will publish the current version here.