Privacy Policy

Last updated: August 2026

Who we are

GMTales is a tabletop campaign management service. You can reach us at contact@gmtales.com.

What data we collect

When you create an account we collect:

  • Your email address and username
  • A hashed password (we never store plaintext passwords)
  • Content you create: articles, images, notes, and campaign settings

If you sign in with Google, we receive your Google account email and display name. We do not store your Google credentials.

How we use your data

We use your data solely to provide the GMTales service — authenticating you, storing your campaign content, and enabling collaboration with other members you invite. We do not sell, share, or use your data for advertising.

Where your data is stored

Data is stored on AWS infrastructure in the EU (eu-central-1). Uploaded images are stored in AWS S3. Transactional emails are sent via AWS SES.

Cookies and browser storage

Signing in stores a token in your browser's local storage; it is sent only to GMTales, to prove your requests are yours. A short-lived cookie is used during Google sign-in and removed when it completes. We do not use analytics cookies, advertising cookies, or any third-party tracking. See our Cookie Policy for details.

Your rights

You may request deletion of your account and all associated data at any time by emailing contact@gmtales.com. Under GDPR you also have the right to access, rectify, or port your data — contact us and we will assist.

Changes to this policy

If we make material changes we will update the date above and, where appropriate, notify you by email.

Contact

Questions or requests: contact@gmtales.com