Privacy Policy
Last updated 18 July 2026
The short version
Your character sheets never leave your device. We don't ask you to sign in, we don't collect personal information, and we don't sell any data. We use a privacy-friendly, self-hosted analytics tool to count visits so we know the tool is being used.
Your character sheets stay on your device
When you upload a PDF or image, it is stored only in your own browser (using IndexedDB), along with the rollable numbers and fields placed on it. Nothing about your sheet is sent to us or to any server. Clearing your browser's site data removes it, and using a different browser or device starts fresh.
Your preferences
Settings like your theme (day or night), text size, reduce-motion choice, and whether the intro has been seen are saved in your browser's local storage on this device. They are never sent anywhere.
Analytics
We use a self-hosted Matomo instance to measure basic, aggregate usage such as page views, approximate region, browser, and device type. This data lives on our own server, is not shared or sold, and is used only to understand how the playmat is used. Visits from local development are excluded.
Rolling into a virtual tabletop
If you turn on "Send to Roll20" and have the Beyond20 browser extension installed, your rolls are handed to that extension so it can post them into your game. That happens entirely on your device through the extension. If you leave that switch off, nothing is sent anywhere.
Third-party code
A few features load code from public content delivery networks (for example, the text recognition used by "Scan page"). When that code loads, the network serving it can see your IP address, as with any website resource. We don't send them your sheet or any personal information.
Contact
Questions about this policy? Reach out at hello@dungeonlevelone.com.
This is a starting template that describes how the tool currently works. Please review and adapt it (and confirm your obligations under laws that apply to you) before relying on it.