In short. This is a free, unofficial hobby app for tracking D&D characters at the table. It stores only what it needs to work: your email, a username, your trackers and your notes. Everything is kept on a server in Germany (Hetzner), inside the EU, under European data protection law (GDPR). No ads, no tracking, no analytics, nothing sold or shared. You can download or delete your data yourself at any time on the home page.
Last updated 21 October 2026.
Who runs this app
Menno, a private individual based in France, runs this app as a personal, non-commercial project and is the data controller under the GDPR. Contact: [contact email].
What is stored, and why
| What | Why | How long |
|---|---|---|
| Your email address, username, and a password if you set one (stored as a one-way hash, never readable) | To sign you in and keep your sheets yours | Until you delete your account |
| Characters you add: the D&D Beyond character number and a copy of that character's public D&D Beyond sheet | To show the sheet | Until you remove it or delete your account |
| Your trackers (HP, uses, slots, coins, items added in the app) and your notes | That's what the app is for | Until you delete them or your account |
| Party log notes, with your character's name | Shared with verified players in the same D&D Beyond campaign, as you chose | Until you delete them or your account |
| Server request logs, including IP addresses | Security: spotting abuse, limiting sign-in attempts | 5 days |
| Nightly, encrypted backups of all of the above | So a server fault doesn't lose your data | Up to 15 days, then deleted |
Legal basis
Providing the app you signed up for (GDPR Art. 6(1)(b)), and a legitimate interest in keeping it secure for the request logs (Art. 6(1)(f)).
What we never do
No advertising, no tracking or analytics tools, no profiling, no selling or sharing of data. Your trackers and notes are private unless you share a sheet with your party or with everyone signed in; shared sheets are read-only for others.
Where your data lives, and who else touches it
- Hosting: Hetzner Online GmbH (Gunzenhausen, Germany), in its data centre in Falkenstein, Germany. All app data and backups stay there, inside the EU. Hetzner's data centres are ISO/IEC 27001 certified and Hetzner acts as a data processor bound by the GDPR.
- Email: sign-in codes are sent through Brevo (Sendinblue SAS, Paris, France), which only receives your email address and the message, to deliver it.
- D&D Beyond: the server reads public character sheets from D&D Beyond by their character number. Nothing about you is sent to D&D Beyond, and this app never changes anything there.
- Nothing else. Fonts, scripts and images are served from this server itself, so your browser doesn't contact Google or any other third party while you use the app.
No data is transferred outside the European Union.
Cookies and storage on your device
The app uses no cookies. It keeps a few things in your browser's own storage so it works quickly and offline: your sign-in, your last-opened sheets and unsent notes, and view settings like your dice set. These are strictly necessary for the app to work, so no consent banner is needed; nothing is used for tracking. Signing out clears your sheets and notes from that device.
Your rights
Under the GDPR you can see, correct, download, and delete your data, object to how it's used, and limit it.
- Download your data and delete your account yourself on the home page (Your data). Deleting removes your account, characters, trackers and notes straight away; they leave the backups within 15 days.
- For anything else, email [contact email]. You'll get an answer within a month.
- You can also complain to a data protection authority, in France the CNIL (cnil.fr), or the one where you live.
To use the app you need to be old enough to agree to this under your country's law (15 in France, 16 in many EU countries), or have permission from a parent.
Terms of use
- The app is free and offered as is, by a hobbyist: no guarantee it's always available, error-free, or that data is never lost. Keep your real character on D&D Beyond; this app is a table companion.
- Only add characters you're allowed to look at (public D&D Beyond sheets), and verify only your own.
- Be decent in party logs. Don't use the app to harass anyone, to break the law, or to attack or overload the service. Accounts that do can be removed.
- You keep everything you write. You let the app store and show it to the people you share it with, nothing more.
- These terms may change as the app grows; the date at the top shows the latest version.
Credits and licences
- Unofficial fan content. Not approved or endorsed by Wizards of the Coast or D&D Beyond. Dungeons & Dragons and D&D Beyond are trademarks of their owners.
- This work includes material from the System Reference Document 5.2 ("SRD 5.2") by Wizards of the Coast LLC, available at dndbeyond.com/srd. The SRD 5.2 is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0).
- Built with PocketBase (MIT licence) and three.js (MIT licence). Fonts: Pirata One, Alegreya SC, Alegreya Sans and IBM Plex Mono, under the SIL Open Font License.