Privacy policy
Last updated: 21 October 2026
DnD Scribe turns recordings of tabletop sessions into transcripts and campaign notes. This page says what we collect to do that, why, who helps us process it, how long we keep it, and how you can delete it. In short: we collect what the service needs, we don't sell anything, and we don't track you.
What we collect
- Your account: your email address and your password, which is stored only as a one-way hash that nobody can read back.
- What you upload and create: your recordings, the transcripts made from them, the names you give speakers and characters, the campaign notes, and who you share a campaign with.
- Usage records: the length and price of each recording, and records of the processing it needed.
- Security logs: sign-ins and other actions on your account, with the IP address they came from.
- In your browser: your sign-in token and your light or dark setting, in the browser's local storage. We use no advertising, analytics or tracking cookies.
Why we use it
- To run the service: transcribe your recordings, write the notes, and show them to you and the people you share a campaign with.
- To send the emails an account needs: confirming your address, resetting your password, and campaign invitations.
- To show you your usage and prices, and to keep accounting records.
- To keep the service secure, prevent abuse, and find and fix errors.
We do not sell your data, and we do not use it for advertising.
Who processes it for us
We use these services to run DnD Scribe. Each receives only what its part of the work needs.
- DigitalOcean hosts the application and its database.
- Cloudflare stores recordings and database backups (R2).
- Modal runs the transcription. It receives a recording for as long as transcribing it takes.
- Anthropic writes the campaign notes with its Claude models. It receives the transcript, with the names you gave your players replaced by "Player 1", "Player 2" and so on, and the campaign's existing notes. Under Anthropic's terms for business use, this is not used to train its models.
- Brevo delivers our emails, so it receives your email address and the message.
- Sentry receives reports of errors in the application, set up to leave out personal data such as request contents and IP addresses.
These services may process data in the United States and in other countries.
How long we keep it
- Your account until you delete it. Your email address and password are erased the moment you do; an empty placeholder stays behind so our records still add up.
- Recordings, transcripts and notes until they are deleted, by you or by the campaign's owner. Deleting your account deletes every campaign you own, recordings included.
- Security logs for 12 months.
- Usage and price records for as long as accounting requires. After an account is deleted they are tied only to the placeholder, not to an email address.
- Backups of the database for up to 30 days, so something you delete can remain in a backup for up to 30 days.
Your choices
- See and edit your campaigns and notes in the app at any time.
- Download a campaign's notes as Markdown files or an Obsidian vault.
- Delete a session, a campaign, or your account from the app. Deleting your account takes effect immediately.
- Email us for anything else, such as a copy of your data or a correction. Depending on where you live, you may have further rights over your data, and we will help you use them.
Children
DnD Scribe is not for children under 13, and they may not create an account. If we learn we hold an account of a child under 13, we delete it.
Security
Everything travels over encrypted connections, passwords are stored as one-way hashes, and a campaign is visible only to its owner and the people they invite. No system is perfectly secure, but we work to protect yours.
Changes
If this policy changes, we will update this page and its date. If a change matters to how your data is used, we will email you before it takes effect.
Contact
Questions or requests: partyscribe@gmail.com.