Privacy Policy

1. Introduction

Party Loot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Data

We collect minimal personal information that you voluntarily provide to us when you register for the Service. The personal information we collect includes only:

• Username
• Email address
• Password (stored in encrypted form)

For users with premium subscriptions, we also store basic subscription data such as:

• Subscription status (active, canceled, expired)
• Subscription tier
• Subscription start and end dates
• Stripe customer ID (for linking your account to your Stripe subscription)

The content you create within the Service (such as campaign information, item inventories, and fund records) is associated with your account but is not used for any purpose other than providing the Service to you.

2.2 Data We Do Not Collect

We do not collect or store:

• Payment or credit card information (this is handled entirely by Stripe)
• Device information
• IP addresses
• Tracking or analytics data
• Cookies for tracking purposes
• Browsing history

3. How We Use Your Information

We use the information we collect for very limited purposes, specifically to:

• Provide and maintain our Service
• Create and manage your account
• Process subscription changes through Stripe (for premium users)
• Send essential communications related to your account
• Provide customer support
• Comply with our legal obligations

We do not use your information for marketing purposes, analytics, or to track your behavior within the application.

4. Payment Processing

We use Stripe as our payment processor for subscription services. When you provide payment information, you are providing it directly to Stripe, and it is subject to Stripe's privacy policy available at https://stripe.com/privacy.

We do not collect, process, or store any payment information whatsoever. The only payment-related information we store is your subscription status, tier, dates, and a Stripe customer identifier to link your account to your subscription. We never have access to your credit card details or payment methods.

5. Data Storage and Security

We use reasonable administrative, technical, and physical security measures designed to safeguard and protect your limited personal information from unauthorized access and disclosure. Your password is stored in an encrypted format.

Your data is stored on secure servers and is only accessible to authorized personnel who need it to provide the Service to you.

6. Cookies and Session Management

We use only essential cookies required for managing your login session. These cookies do not track you and are only used to maintain your authenticated state while using the application.

When interacting with Stripe for payment processing, Stripe may use its own cookies according to its privacy policy. These cookies are not controlled by us, and no payment data is stored on our servers.

7. Third-Party Services

Our Service may contain links to third-party websites and services, including Discord and Foundry VTT integrations. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of those third parties.

8. Discord and Foundry VTT Integration

If you choose to use our Discord bot or Foundry VTT module integrations:

• We collect and store API tokens to authenticate your account with these services
• Data shared between Party Loot and these services is subject to this Privacy Policy as well as the privacy policies of Discord or Foundry VTT
• You are responsible for securing your API tokens and should not share them with anyone

9. Your Data Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access the personal information we have about you
• The right to request correction of inaccurate information
• The right to request deletion of your information
• The right to restrict or object to our processing of your information
• The right to data portability

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

10. Data Retention

We retain your account information (username, email, password) for as long as you maintain an active account with our Service. Content you create within the app (campaigns, inventory items, etc.) is also retained for as long as your account remains active.

If you delete your account, we will delete your personal information within 30 days. However, we may retain certain information in our backups or as required by law for a longer period for legal, tax, or regulatory reasons.

If you have a subscription through Stripe, subscription records may be retained for accounting and tax purposes even after account deletion, but these records will be anonymized when possible.

11. Children's Privacy

Our Service is not directed to children under the age of 16. If we learn that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information as quickly as possible.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by posting a notice on our website prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically for any changes.