Privacy Policy
Last updated: June 2026
What we collect
Strictly necessary cookies — Narrative Craft uses session cookies to keep you signed in. These are essential for the service to function and do not require your consent.
Analytics cookies — With your consent, we use PostHog to collect page views, feature usage patterns, and session recordings. All text content in your campaigns, scenes, and form inputs is masked before any data leaves your browser.
Why we collect it
Analytics data helps us understand how Narrative Craft is used so we can improve the product for game masters. We do not use this data for advertising.
Session recordings
If you have accepted analytics cookies, your browser sessions may be recorded. Recordings capture navigation, clicks, and UI interactions. All text content — campaign names, scene descriptions, character notes, and all form inputs — is permanently masked before transmission and is never visible in recordings.
Reliability and error reporting
When an unhandled error occurs, a crash report is automatically sent to help us diagnose and fix issues. Reports contain only the error type, message, and call stack, plus the application build version. Before transmission we redact recognised sensitive patterns — email addresses, authentication tokens, and URL query strings — and the report never includes your account identifier or the content you were editing.
This mechanism does not use cookies or device fingerprints. The server may process limited network metadata solely for abuse prevention and rate limiting.
Legal basis: legitimate interest in maintaining service reliability and security. This processing is strictly necessary for operating a safe, stable service and does not require your consent.
Error reports are retained for a maximum of 90 days.
To object to this processing or to request deletion of your error data, contact us at [email protected].
Data retention
Analytics data is retained for 12 months. You can request deletion at any time by contacting us.
Your rights
Under GDPR and UK GDPR you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at [email protected].
No third-party sharing
All analytics data is stored on infrastructure we operate. We do not share your data with any third parties, advertisers, or analytics platforms outside our own systems.