Privacy

Who this is

LeagueKit is operated by Cognitiv Pty Ltd (ACN 688 133 977, ABN 51 688 133 977), an Australian company, which is the data controller for everything described below. Its registered address is 8 Morriston Street, North Perth WA 6006, Australia.

Questions, requests and complaints: privacy@leaguekit.io.

What is stored

An email address, so a sign-in link can be sent. A password is optional. If you set one, it is passed to our sign-in provider, Supabase, which keeps a salted hash of it. The password itself is not stored.

Whatever you write into a campaign: entities, prose, relations, notes, ledger transactions, sessions, uploads. This is your material and it is stored so that it can be shown back to you and to the people you have shown it to.

Records of who was shown what and when, which is the reveal receipt layer. It is a record of an action taken inside your own campaign.

Operational logs, which contain request metadata and never the contents of a hidden passage.

What is not done with it

It is not used to train a model. Not your prose, not your world, not a player's notes.

It is not sold, rented, or used for advertising. There is no advertising anywhere in this product.

It is not read by us for any purpose other than a support request you have made, or an investigation of abuse or a security incident.

Where it is held

Postgres, hosted by Supabase in Frankfurt, in the EU. Any change of region is announced in the changelog in advance rather than discovered.

The sub-processor list below is the complete list, and it is kept current.

Database, auth, storage

Supabase

Hosting, edge

Vercel

Transactional email

Not yet selected

Analytics

None

Advertising, tracking

None

What sits on your device

The design intent is that the copy of a campaign you are entitled to is cached on your own device, so the at-the-table view opens without a network round trip. That has a consequence worth stating plainly rather than burying: a device that is offline keeps the copy it already had.

If a reveal is withdrawn while a device is offline, that device holds the withdrawn material until it reconnects. Signing out clears the local copy; closing the tab does not.

Your rights

You can ask for a copy of everything held about you, ask for it to be corrected, and ask for it to be deleted. Write to privacy@leaguekit.io.

Deleting your account deletes your account and your private notes. It does not delete a campaign somebody else runs, and it does not remove what you contributed to a shared record, because that would delete two years of somebody else's session history.

How long

Campaign material is kept until you delete it or delete the campaign. Nothing is deleted for non-payment; a lapsed subscription makes a campaign read only and it stays exportable.

Operational logs are kept for 30 days.