Privacy Policy

1. What We Collect

From you, when you sign up and use your account:

• •Your name, and a nickname if you choose one
• •Your email address and password (stored hashed, never in readable form)
• •Your phone number, if you give one, so you can check in with it
• •Your birthday, if you give one
• •Anything you submit as quest evidence
• •What you write to Marty, the chat assistant on paid tiers, and his replies

From your activity, as you use your membership:

• •Your purchase history at the shop, including what you bought and when, taken from our point of sale
• •Your points balance, XP, level, tier, and the full ledger of how they changed
• •Your visits: when you checked in, at which kiosk, and by what method
• •The identifier of your membership card, if you use one
• •Quests you have completed and rewards you have redeemed
• •Events you have attended
• •How you use the app, collected through analytics

If you sign in with Discord, we receive your Discord account identifier and username and store the link between it and your membership. If you subscribe to a paid tier, Stripe handles your card details and we never see or store them.

2. How We Use It

• •Running your membership: calculating points, XP, levels, tiers and rewards
• •Matching purchases at checkout to your account so they count
• •Applying your tier discount at the point of sale
• •Sending you account email: verification, password resets, and notices about your subscription
• •Answering you when you get in touch
• •Understanding how the app is used so we can make it better
• •Spotting abuse of the program

We do not sell your information, and we do not use it to target advertising.

3. Who We Share It With

We pass member data to the services we use to run the program, and only for that purpose. Each one has its own privacy policy:

• •Square, our point of sale. Receives your name, email, tier, points balance and membership status so purchases match your account and your discount applies at the register.
• •Stripe, our payment processor. Receives your name and email and handles card details directly for paid tiers.
• •Discord. If you link your account we receive your Discord identity, and check-in notifications posted to our staff channel include your name, nickname, tier, level, points and recent purchases.
• •Hi.Events, our ticketing platform. Tells us when you check in at an event.
• •Resend, our email provider. Delivers account email on our behalf.
• •PostHog, our analytics provider. Receives usage events identified by your email, along with your name and tier.
• •Authentik, our sign-on service, used to give members access to other tools we run.
• •Our AI model provider. When you chat with Marty, your messages go to it along with a short summary of your account (your name or nickname, tier, level, XP, points, class, join date, recent check-in count and active buffs) so he can answer about your membership. We store the conversation on a server we run.

We may also disclose information where the law requires it, or to protect our rights, our staff, or other members.

4. What Other People Can See

The leaderboard in the app, and the kiosk screen in the shop, can show member names next to levels and XP. Turning off the name setting in your privacy settings takes your name off both. Your purchase history, points balance, email address and phone number are never shown to other members.

Checking in at the kiosk posts a notification to a staff-only Discord channel with your name and recent activity. That channel is not public, but it is visible to shop staff.

5. How Long We Keep It

We keep your membership data for as long as your account is open. If you close it, we delete your account and personal details, and keep transaction records for as long as tax and accounting law requires. Purchase records held by our point of sale are governed by the shop's own retention, not this policy.

Conversations with Marty are kept so you can come back to them, and deleted automatically 90 days after the last message. Closing your account does not delete them any sooner, so email us if you want them gone before then.

6. Security

Passwords are hashed, traffic is encrypted in transit, and access to member data is limited to the people who need it to run the shop. No system is perfectly secure, and we will tell you promptly if something happens that affects your data.

7. Your Rights

Email us at [email protected] and we will help with any of these. You can also do the last two yourself in your settings.

• •Get a copy of what we hold about you
• •Correct anything that is wrong
• •Have your account and personal information deleted
• •Unlink your Discord account
• •Stop your name from appearing on the leaderboard and the kiosk

8. Changes to This Policy

We may update this policy from time to time. Changes are posted here with a new effective date, and we will email members about anything significant.

9. Contact Us

Questions about this policy or about your data:

• •Dungeon Books (Script Wizards LLC)
• •Email: [email protected]
• •Address: 115 Brunswick St Storefront 1R, Jersey City, NJ 07302, United States