This Privacy Policy describes what information PF1e Combat Tracker handles and where it lives. The short version: we hold the minimum needed to run your account and subscription, and your combat data stays in your browser unless you choose to live-share a fight.
Last updated: 25 July 2026
PF1e Combat Tracker keeps no server-side database of your content. Everything you create in the app — live combat state, your saved party, and your saved encounters — is stored in your browser’s local storage on your device. It is never transmitted to us or to anyone else. An account is required to use the tracker, but it exists only to manage your subscription — it does not sync or store your content.
Because we never receive this data, we cannot see it, back it up, or recover it. Clearing your browser’s site data (or using a private/incognito window) erases it. It also does not sync between browsers or devices.
The one exception is Live Share, and only while you use it.When you start a live share, a filtered, read-only snapshot of the current fight (initiative order, player names, anonymised monster labels, conditions — never monster names, hit points, or your notes) is stored with our database provider (Supabase) so your players’ phones can display it. Stopping the share deletes it immediately, and idle shares are purged automatically within about 24 hours.
Nothing you enter in the app.Combatant names, initiative rolls, party rosters, encounters, notes — none of it reaches our servers.
Account data. When you create an account, our authentication provider (Clerk) collects and stores your email address, optional name and avatar, and sign-in metadata on our behalf. We use it to authenticate you and manage your subscription, nothing else.
Payment data.Subscriptions are processed by Stripe via Clerk Billing. Your card details go directly to Stripe; we never see or store your card number. We can see your subscription status (plan, trial, renewal dates) and Stripe’s billing records for your account.
Technical data. Our hosting provider (Vercel) logs basic request information (IP address, user-agent, timestamps) for operational and security purposes when your browser loads the app.
Support email. If you email us, we receive your email address and the content of your message, and use them only to respond.
We use no analytics, no advertising trackers, no third-party cookies, and no AI processing of your content. We do not sell or share personal information.
The app sets only the cookies Clerk needs to keep you signed in (session and client-state cookies). They are strictly necessary for authentication — there are no advertising or analytics cookies. The app also uses browser local storage strictly to operate:
pf1e-combat-tracker:campaigns— your list of campaigns.pf1e-combat-tracker:c:<id>:…) holding that campaign’s live combat snapshot, saved party, saved encounters, and active live-share link token — so a page reload loses nothing.Four providers are involved in operating the app:
The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.
You can update or delete your account at any time from the account menu inside the app, or by emailing us. Deleting your account removes your data from Clerk; Stripe retains billing records for as long as financial regulations require. Your combat data is under your control already — it lives only in your browser, and clearing the site’s storage erases it.
We may update this Privacy Policy from time to time. Material changes will be surfaced on this page and the “Last updated” date at the top will be revised.
For privacy questions, email pf1ecampaigner@gmail.com.