Privacy notice

The Party Ledger is a private tool for one Dungeons & Dragons group. It is run by Charlie Langdale, who is the data controller for everything described here, and who you should contact about any of it at hello@charlielangdale.com.

Accounts exist only by invitation. There is no public sign-up, no advertising, no analytics, and nothing here is sold or shared for marketing.

What is stored

• Your email address — to sign you in and send password links.
• Your display name — so the group can tell who is who.
• Your password — stored only as a cryptographic hash, never in a readable form.
• Your character and campaign data — everything you enter on your sheet.
• Notebook entries — free text you write. Private notes are visible only to you; party notes are visible to the group, including the DM.
• Server request logs, including your IP address, kept for 5 days and then deleted automatically.

Cookies

One cookie, pb_auth, which keeps you signed in for 30 days. It is strictly necessary to provide a service you asked for, so no consent banner is required and none is shown.

There are no analytics, advertising or tracking cookies, and the site loads no third-party scripts, fonts or images. Nothing about your visit is sent to anyone else.

Why, and on what legal basis

Your data is processed to provide the tool to you at your request. The lawful basis is legitimate interests — running a private companion app for a group you chose to join — and, for your account itself, performing the arrangement between us. Signing in is voluntary; you can stop at any time.

Who else can see it

• Oracle Cloud Infrastructure, London (UK) — the server and database run there. Data is held in the UK.
• Google (Gmail SMTP) — carries invitation and password-reset emails, so it sees your email address.
• Your DM — sees your character sheet, party notes and email address.

No one else. There are no other processors, and no data leaves the UK except as email in transit.

How long it is kept

Account and character data is kept while your account exists, and deleted when you ask or when the campaign ends. Request logs are deleted after 5 days. Password-setup links expire after 72 hours.

Your rights

You can ask for a copy of your data, correct it, have it deleted, or object to it being processed. Email hello@charlielangdale.com and it will be actioned by hand — this is a small tool with a handful of users, so there is no self-service button for it yet. Deletion means the account and its characters are removed from the database, not merely hidden.

There is no automated decision-making or profiling. If you are unhappy with how your data has been handled you can complain to the Information Commissioner's Office (ICO).

A note on what you write

Notebook entries are ordinary text fields with no special protection beyond the access rules above. Please do not put anything genuinely sensitive in them — health information, financial details, or anyone else’s personal information.

This is a test

The app is new and being actively developed. Bugs are likely, and data could be lost. Do not treat it as the only copy of anything you would mind losing.