Privacy Policy

Effective version: 2026-06-28

This Privacy Policy explains how Digitable handles personal information when you visit the public website, create an account, use the Digitable app, join a playtest, subscribe to updates, or contact us.

Who is responsible for your information

Digitable is responsible for the processing described in this policy.

Information we collect

We collect account information such as your name, email address, password credentials handled by the authentication system, authentication provider identifiers when you choose Google sign-in, and session information needed to keep you signed in.

We collect project and playtest information that you provide or generate in the service, including game metadata, rules text, component data, uploaded images or SVG files, playtest project files, playtest room identifiers, playtest notes, feedback, and related author names.

We collect AI image generation inputs when you use the image generation feature, including the prompts, row identifiers, column names, selected aspect ratios, and generated image URLs returned by the provider.

We collect newsletter information when you subscribe, including your email address, optional first name, and the page that referred you to the subscription form.

We collect legal acceptance records, including which Terms & Conditions and Privacy Policy version you accepted or acknowledged, the time of acceptance, your IP address, and your user agent.

We collect technical and diagnostic information such as request paths, response status codes, trace identifiers, browser and device information, frontend navigation and network diagnostics, application version, logs, errors, and performance telemetry. When Traceway session recording is enabled for a deployment, it may record interactions needed to diagnose product issues.

Local browser storage and cookies

Digitable uses authentication cookies to keep you signed in and to protect account sessions. The app may also set a sidebar preference cookie.

The app stores workspace data in your browser when you choose local storage, OPFS, IndexedDB, or a browser-selected folder. This can include project files and your storage preference. Session storage may hold temporary playtest reconnect tokens. Local drafts, such as playtest note drafts, may be stored in browser storage until submitted or cleared.

How we use information

We use information to provide, maintain, and secure the service; create and authenticate accounts; load and save project workspaces; run playtests; collect playtest feedback; generate images when requested; provide customer support; send newsletter messages when requested; enforce legal terms; prevent abuse; debug errors; improve reliability; and comply with legal obligations.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases may include performance of a contract, legitimate interests in running and improving the service, consent where required, and compliance with legal obligations.

How we share information

We share information with service providers that help operate Digitable. Depending on the feature and deployment, those providers may include hosting and database providers, Backblaze B2 or compatible S3 storage for playtest project files, Traceway for telemetry and diagnostics, Kit for newsletter subscriptions, Replicate for AI image generation requests, and Google when you choose Google sign-in.

We may disclose information if required by law, to protect rights and safety, to investigate abuse, or as part of a business transfer such as a merger, acquisition, financing, or sale of assets.

We do not sell personal information or share it for cross-context behavioral advertising based on the current implementation.

User content and playtests

Your game projects and playtest materials may contain personal information if you include it. Avoid uploading sensitive personal information, confidential third-party material, or personal information about other people unless you have the right to do so.

When you create or join a playtest, project files and feedback may be made available to other invited participants and to the project owner as needed for the playtest.

International transfers

Digitable and its service providers may process information in countries other than your own. Where applicable, we use appropriate transfer safeguards or rely on lawful transfer mechanisms provided by the relevant privacy laws.

Retention

We keep personal information for as long as needed to provide the service, maintain security, resolve disputes, meet legal obligations, and preserve legitimate business records. Account, policy acceptance, playtest, telemetry, and newsletter records may have different retention periods. Browser-stored workspace data remains under your browser or device control unless you upload it to the service.

Your choices and rights

You can choose not to provide optional information, but some features may not work without required account, project, or playtest data. You can unsubscribe from newsletter messages using the unsubscribe link in those messages.

Depending on where you live, you may have rights to request access to your personal information, correction, deletion, portability, restriction, objection, withdrawal of consent, or complaint to a data protection authority.

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and receive non-discriminatory treatment for exercising privacy rights. Digitable does not currently sell personal information or share it for cross-context behavioral advertising.

To make a privacy request, contact Digitable. We may need to verify your request before acting on it.

Children

Digitable is not directed to children under 16. Do not use the service or provide personal information if you are under 16 unless a parent or legal guardian has reviewed and agreed to your use.

Security

We use technical and organizational measures intended to protect personal information. No internet service can guarantee complete security, so you should use a strong password, keep your credentials private, and avoid uploading sensitive data that is not needed for your project.

Changes

We may update this Privacy Policy from time to time. When we make material changes, we may ask account users to acknowledge the current version before continuing to use the app.