Privacy Policy

1. Who we are

RoundZero is an independent project operated through roundzero.app. The RoundZero operator decides how the service processes personal data. For privacy questions or requests, contact hello@roundzero.app.

2. Information we collect

Depending on how you use RoundZero, we may collect:

• Account information, such as your email address and authentication identifiers.
• Character sheets, campaign data, messages, combat logs, uploaded images, maps, and other content you create.
• Device and technical information, such as browser type, operating system, app version, and push-notification tokens.
• Usage and analytics events, such as page views, logins, campaign creation, message sending, dice rolls, and feature usage, when product analytics is enabled.
• Cookies and similar technologies used for locale preference, analytics, and basic site operation.
• Support communications you send to us by email.

3. How we use information

We use information to operate and improve RoundZero, including to:

• create and maintain your account and sign-in session;
• save and sync your characters, campaigns, and gameplay data;
• deliver features such as sharing, exports, notifications, integrations, and cross-device sync;
• provide optional AI-assisted features only when a campaign group opts in;
• measure reliability, understand feature usage, and improve the product;
• respond to support requests and security issues;
• comply with legal obligations and enforce our terms.

We process this information as needed to provide the service you request, protect and maintain the service, comply with legal obligations, and support our legitimate interests in security and reliability. We ask for consent when a feature requires it.

4. Shared campaign content

RoundZero is a multiplayer product. Content you post in a campaign, such as messages, maps, tokens, combat actions, and shared character data, can be visible to other campaign members and to destinations you connect, such as Discord outbound posts.

5. Cookies and similar technologies

We use cookies and similar technologies for essential site operation (such as language preference), product analytics, and measuring how the service is used. More detail is in our Cookie Policy.

6. Notifications

If you enable notifications, RoundZero may store a browser subscription or native device token so it can send campaign and combat notifications. You can disable notifications in your browser or device settings at any time.

7. Analytics

Product analytics is disabled unless the RoundZero operator explicitly enables PostHog. When enabled, it may receive page views, feature events, technical identifiers, and an account identifier after sign-in. RoundZero does not use analytics for advertising or sell analytics data.

8. AI features

Campaign AI is disabled by default. A campaign DM can enable it for that campaign.

When campaign AI is enabled, the prompts, messages, roster context, and related gameplay content needed to run it may be sent to the AI provider. Campaign members should not include personal or confidential information they do not want processed by that provider.

RoundZero uses AI providers only to deliver the enabled campaign feature. It does not sell personal information.

9. Third-party services

RoundZero relies on third-party providers to operate the service. These may include:

• Supabase for authentication, database, storage, and backend services.
• Cloudflare for hosting, delivery, and edge functions.
• Google services for sign-in and Android distribution through Google Play.
• PostHog, only when product analytics is enabled.
• Push delivery providers for web push and Android notification delivery.
• Optional AI providers, only when a campaign group opts into AI-powered features.
• Optional integrations you enable, such as Discord outbound delivery.

These providers process data on our behalf or as part of the services required to deliver the features you use.

10. Data sharing

We do not sell your personal information. We may share information only when needed to:

• operate RoundZero through service providers;
• deliver features you request, such as notifications, authentication, AI tools, or integrations;
• make campaign content available to other campaign members as part of normal play;
• protect users, investigate abuse, or comply with legal requirements.

11. International processing

RoundZero and its service providers may process information in countries other than where you live. Where we do so, we rely on appropriate safeguards and the contractual and operational controls available through those providers.

12. Data retention

We keep information for as long as it is reasonably necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, and enforce agreements. Some local data may also remain on your device until you remove it. Backup and log systems may retain limited residual copies for a short period after deletion.

13. Your choices and rights

Depending on where you live, you may have rights to confirm whether we process your data, access or correct it, request deletion or a copy, withdraw consent, or object to certain processing.

• You can choose whether to create an account.
• You can disable notifications in browser or device settings.
• You can manage some cookie and analytics preferences through your browser settings.
• You can request account deletion at roundzero.app/account-deletion.
• You can contact hello@roundzero.app for privacy or deletion support.
• If we cannot resolve a privacy request, you may contact the data protection authority that applies where you live, including Brazil's ANPD.

14. Children’s privacy

RoundZero is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we may update this page and revise the effective date above.