RPG Echo Privacy Policy

Last updated October 16, 2026.

RPG Echo is operated by Dartel and Son. Privacy questions and requests can be sent to notifications@rpgecho.com or through the in-app feedback form.

Information we use

When you create an account, we store your email, display name, protected password credentials, session records, account settings, and recovery information. We store campaigns, invitations, characters, messages, dice rolls, images, maps, and other play records that you create or receive. We also store records needed for safety reports, blocked accounts, and moderation.

When you choose to remember an account, this device stores its display name and email to offer “Continue as”. The hint expires after 30 days and is removed when the app next reads it. This hint does not authenticate you. Signing out revokes the session and keeps the hint; “Forget this account” removes the hint and signs out. You can disable remembering when signing in. Session credentials use protected HttpOnly cookies; the Linux app saves its session in the system keyring.

Optional features may store notification preferences and device push tokens, locally saved campaign copies, feedback text and screenshots, and supporter purchase identifiers and status. Google Play, Apple or Stripe handles payment details. RPG Echo stores subscription or supporter purchase identifiers, the payment provider, selected plan, price, renewal and paid-through dates, and refund or cancellation status linked to the RPG Echo account, so it can verify purchases and provide the correct benefits. RPG Echo does not store full card numbers or card security codes. Voluntary contributions grant no digital benefits. Hosting and security systems may process technical data such as IP address, browser or device information, request times, and error records. Daily aggregate activity counters do not contain message text. RPG Echo does not run ads or sell personal data.

Why and with whom we share it

We use this information to provide accounts, gameplay, file storage, invitations, notifications, support, safety review, fraud prevention, and service operation. Campaign members can see content shared with their group; private conversations are available to their participants. Authorized moderators can review reports. Our hosting, database, file storage, email, and push-delivery providers process information to operate RPG Echo. Google Play or Apple may process optional store purchases and push notifications under their own policies. Stripe processes optional web subscriptions and direct creator contributions under its own privacy policy. Purchase records needed for verification, billing support and fraud prevention may remain after an account is deleted, associated with its deidentified account ID.

Security, retention, and deletion

RPG Echo uses encrypted network connections, access controls, and private file storage. We retain account and campaign information while needed to operate the service. You can export records, change notification settings, and delete your account in the app or at the account-deletion page. Deletion removes account access and personal identifiers; campaigns you control are archived. Shared messages, rolls, characters, and campaign records may remain available to other players as part of their shared history. Moderation or legally required records and backups may be retained where necessary, then removed under applicable retention processes. Local copies on other devices or exports made by other players are outside the server's control.

To request help with a privacy or deletion concern, contact notifications@rpgecho.com.

Community rules · RPG Echo