GDPR Statement

Last updated: February 2026

Data Controller

This application is operated by the campaign administrator as a private hobby project for a small D&D group. The data controller is the individual who administers this instance of the D&D Scheduler.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Legitimate Interest (Art. 6(1)(f) GDPR) – Operating a private scheduling tool for the D&D group’s benefit, with access restricted to group members.

Your Rights

Under the GDPR, you have the following rights:

  • Right of Access – You can request a copy of the data we hold about you.
  • Right to Rectification – If your data is inaccurate, you can ask us to correct it (or update your Discord profile, which syncs automatically).
  • Right to Erasure – You can request deletion of your account and all associated data.
  • Right to Data Portability – You can request your data in a structured, machine-readable format.
  • Right to Object – You can object to the processing of your data.

Data Processing

  • No email addresses are collected or stored.
  • Data is stored in Cloudflare D1 (SQLite database) within Cloudflare’s infrastructure.
  • Data may be processed in multiple Cloudflare data centres globally.
  • A small amount of non-personal data (cached session times) is stored locally in your browser via localStorage to improve performance. This data never leaves your device.
  • No data is shared with third parties beyond Discord (for authentication) and Cloudflare (for hosting).

Data Retention

Data is retained for as long as your account exists. Upon account deletion (which is manual and irreversible), personal data and associated records (availability, character associations) are removed from the live system. Deleted data may persist for a limited period in system backups before being permanently removed.

Exercising Your Rights

To exercise any of these rights, contact the campaign administrator through your D&D group’s Discord server. This is a private service for group members. We aim to respond to requests promptly and typically within 30 days.