Privacy Policy
Privacy Policy
This policy explains what personal data Augurhall (app.augurhall.com and augurhall.com) holds about you, why, for how long, who else handles it, and what your rights are.
1. Who is responsible
The controller is Grzegorz Kegel, Gwiezdna 9, 32-087 Zielonki, Poland, Poland, registration number sole proprietorship entered in CEIDG, NIP 5130216505. For anything about your data, write to privacy@augurhall.com.
2. What we hold and why
| Data | Where it comes from | Why we hold it | Legal basis (GDPR Art. 6(1)) |
|---|---|---|---|
| Your email address | You, when you sign in by email; or Patreon, when you sign in with Patreon and Patreon says the address is verified | To make and run your account and send you sign-in links | Contract (b) |
| Your Patreon user id, the name on your Patreon account, the email address Patreon holds, your membership status and tier | Patreon, when you sign in with or link Patreon, and nightly from our Patreon campaign | To give you the tier you pay for | Contract (b) |
| Sign-in records: when each browser session started, was last used, ends and was ended; a keyed hash of your IP address and of your browser's user agent | Your browser | To keep your account secure, let you sign out everywhere, and limit an account to 3 browsers | Legitimate interest in security (f) |
| Sign-in links you asked for: the address, when the link was made, when it expires and whether it was used | You | To sign you in and stop sign-in links being used to flood an inbox (at most 5 links an hour per address) | Contract (b); legitimate interest in security (f) |
| Your checks: the party, the encounter, the settings, the results and, on paid tiers, the record of each fight | You, and the simulator | To run checks and show you your history | Contract (b) |
| Characters you import, and saved take-control and solo sessions | You | To use them in checks and sessions | Contract (b) |
| Usage counts: checks and fights per day and per month | The service | To apply your tier's credits and limits | Contract (b) |
| Fight packs: the reseller's payment reference, the pack, its fights, what is left, when it was bought, when it expires, any refund | Stripe, after you pay | To give you the fights you bought | Contract (b) |
| An audit log of security and account events (for example a sign-in, an export, a purchase) with your user id, never your email address, IP address or a token | The service | To investigate abuse and errors and answer your requests | Legitimate interest in security and accountability (f) |
| The waitlist: your email address, when you joined, the version of this policy you agreed to, and when we sent the confirmation | You, when you join the waitlist | To tell you when a place in early access opens for you | Consent (a) |
| Early access: when your account was admitted, and how (it existed when early access began, or an access password was entered in your browser) | The service | To let your account into the app while it is in early access | Contract (b) |
| Analytics events, only if you agree | Your browser | To learn which parts of the app are used | Consent (a) |
Bot protection. When you ask for a sign-in link or start a Patreon sign-in, your browser solves a Cloudflare Turnstile check, and we send the result together with your IP address to Cloudflare to confirm it. We also count sign-in attempts per network range (the first three parts of an IPv4 address, or the first half of an IPv6 address) for ten minutes at a time, to stop mass sign-ups. Legal basis: legitimate interest in security (f).
The waitlist. While Augurhall is in early access, you can leave your email address on the waitlist. You join only by ticking the box that agrees to this policy, and the form passes the same bot protection as sign-in. We hold your address, the time you joined, the version of this policy you agreed to and when we sent you the one confirmation mail; nothing else, and not your IP address. We use the address only to write to you when a place opens for you. You can leave at any time: the confirmation mail has a link that removes your address at once, or write to privacy@augurhall.com. Joining twice changes nothing and sends no second mail. If you delete an account with the same address, its place on the waitlist goes with it, and your data download includes it. An access password you enter is checked and never stored; a correct one leaves a cookie in your browser that marks it as admitted (180 days).
Server logs carry a user id and a request id, never an email address, an IP address or a token: these are removed before a line is written.
Payments. We never see your card or bank details. Patreon takes payment for memberships and Stripe for fight packs; each handles your payment data under its own privacy policy (Stripe's: https://stripe.com/privacy).
We do not sell your data, we do not show advertising, and we do not make decisions about you by automated means that have legal or similarly significant effects.
3. Analytics
The app sends analytics only after you say yes in the consent prompt, and only when analytics is configured for the site. Until then nothing is sent and no analytics identifier is stored. If you agree, the app sends PostHog (EU region, eu.i.posthog.com) short events such as "a check was started" with counts and categories, and a random identifier for this browser. Events never carry your email address, user id, character names, sheets, parties or any free text, and we ask PostHog not to keep your IP address or build a profile of you.
You can withdraw your consent at any time from the account page or the link in the footer; the app then stops sending events and forgets the browser identifier. The Cookie and Analytics Notice lists everything the app stores in your browser.
4. Who else handles your data
| Provider | Role | What they handle | Where |
|---|---|---|---|
| Cloudflare | Processor: hosting, database, file storage, and bot protection on sign-in (Cloudflare Turnstile) | Everything the service stores; your IP address when you use the service | Worldwide network; see section 5 |
| Resend | Processor: sending email | Your email address and the sign-in email | United States |
| Patreon | Independent controller for your membership and its payment; it gives us your membership details when you sign in with or link Patreon | Your Patreon account, membership and payments | United States |
| Stripe | Independent controller as merchant of record (Stripe Managed Payments): it sells you fight packs on its own checkout page, takes payment and handles tax and invoices; it tells us the payment, the pack and any refund. Its privacy policy: https://stripe.com/privacy | Your email, payment and billing details; your Augurhall user id and the reference of your withdrawal-waiver confirmation, passed with the checkout link so the fights reach your account | United States |
| PostHog | Processor: analytics, only after your consent | Analytics events and the browser identifier | European Union (EU region) |
5. Transfers outside the European Economic Area
Some providers above are based in the United States or process data there. Where they do, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
For review: confirm, per provider, its legal entity, which safeguard applies and that a data processing agreement is in place.
6. How long we keep it
| Data | How long |
|---|---|
| Your account (email address, linked sign-in methods, Patreon details, tier) | Until you delete your account |
| Checks and results on the free tier | The last 25 checks, none older than 30 days; older ones are deleted by a nightly job |
| Checks and results on a paid tier | One year; older ones are deleted by a nightly job. If your membership ends, the free tier's limits apply from the next nightly run |
| A check you delete yourself | Deleted at once |
| Imported characters | Until you delete them or your account |
| Saved take-control and solo sessions | Until you delete your account |
| Usage counts | Until you delete your account |
| Fight packs | Until you delete your account; a pack's fights expire 12 months after purchase |
| Your acceptance of the Terms of Service and this Privacy Policy (which version, and when) | Until you delete your account |
| Your confirmation, before buying a fight pack, that delivery starts at once and the right of withdrawal ends (the time, the version of the Purchase and Refund Terms, and the wording you confirmed) | Until you delete your account |
| Sign-ins waiting for you to accept a new version of the terms or this policy | Until you accept; deleted with the browser session or your account |
| Browser sessions | A session ends at sign-out or 30 days after sign-in; its record (times and keyed hashes) stays until you delete your account |
| Sign-in links | A link works for 15 minutes; once it has been expired for one hour, its record is deleted the next time anyone asks for a sign-in link |
| Patreon sign-in requests in progress | A request works for 10 minutes; it is deleted when used, or at the next Patreon sign-in after it expires |
| Sign-in attempt counts per network range | Counted in ten-minute windows; a window's count is deleted at the first sign-in attempt after the following window |
| Audit log | Kept; when you delete your account, your user id and every detail about you are removed from its rows, and only the time and kind of each event remain |
| The waitlist | Until you leave it (the link in the confirmation mail, or by writing to us), or until 6 months after Augurhall opens to everyone, whichever comes first |
| When your account was admitted to early access | Until you delete your account |
| Password attempt counts per network range | Counted in ten-minute windows, like sign-in attempts |
| Analytics events | As long as PostHog keeps them under our project settings |
For review: the analytics retention period to be set in PostHog and stated here.
When you delete your account, we delete it at once from our database and file storage, including your checks, records, characters, sessions and packs.
For review: state how long the hosting provider's database backups (point-in-time recovery) keep deleted data.
7. Your rights
You have the right to:
- access your data and take it with you: the account page has a button that downloads everything we hold about you as one JSON file;
- erase it: the account page has a button that deletes your account at once;
- correct it: write to privacy@augurhall.com;
- restrict or object to processing based on our legitimate interests: write to privacy@augurhall.com;
- withdraw consent to analytics at any time, from the account page or the footer, without affecting what happened before;
- complain to a supervisory authority. Ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl. You can also complain to the authority of the EU country where you live or work.
We answer requests within one month. We may ask you to confirm a request from the email address of the account.
8. Age
You must be at least 16 years old to make an account. We do not knowingly hold data about anyone younger; if you believe we do, write to privacy@augurhall.com and we will delete it.
9. Security
Sign-in cookies, sign-in links and the browser binding of a link are stored only as hashes; IP addresses and user agents are stored only as keyed hashes; the cookie is sent only over HTTPS and cannot be read by scripts. No system is perfectly secure; if a breach affects your data, we will tell you and the supervisory authority as the law requires.
10. Changes
When we change this policy we publish the new version with a new version number and date, and if the change matters to you we ask you to read it the next time you sign in.