The short version
- This site uses no cookies and loads nothing from third parties. No banner, because there is nothing to consent to.
- The app signs you in with Google: your name, email and profile picture stay with Clerk, the service that handles sign-in.
- What you write while playing — campaigns, characters, messages, dice rolls — lives in a database in the United States.
- I sell data to nobody and there are no ads. There is no analytics and no profiling.
- You can delete your account from the app, in your profile. Exactly what happens when you do is written below.
Who handles the data
The data controller is Lorenzo Corrias, who builds Fablepost as a personal project. For anything about your data, write to lorenzocorrias.w@gmail.com — you get me, not a desk.
The site
This site is static pages. It uses no cookies, has no analytics, and loads no fonts, images or scripts from other domains: everything you see is served from here.
There is no cookie banner because there would be nothing to ask. If I ever add an analytics tool, this page will change before that happens, and then there will be a banner.
The site is hosted on Cloudflare Pages, which keeps short-lived technical request logs — IP address included — to make the network work. I don't read them and I do nothing with them.
The app
Your account
You sign in with Google. Sign-in is handled by Clerk, which keeps what Google hands over: name, email address and profile picture. I don't copy any of that into my own database — what I store is an identifier for your account, and nothing more.
On your phone, the app keeps you signed in using the system's secure storage — the iOS keychain or its Android equivalent. That is not a cookie and it doesn't follow you around: it only saves you signing in every time.
What you create while playing
| What | Which means |
|---|---|
| Campaigns | Name, description, cover image, invite code, who is in them |
| Characters | Name, bio, attributes, traits, items, portrait |
| Messages | The text you write in the chats, with its emotion and the character it belongs to |
| Dice rolls | Formula, result, outcome. Dice are rolled on the server, so nobody can cheat |
| Images | Pictures you upload for campaigns and characters |
All of it is tied to your account identifier, not to your name. The people in the same campaign can see it, and so can I if I have to act on a report or fix something that broke.
What isn't there
No advertising trackers, no behavioural profile, no location, no contacts. There aren't even usage statistics: right now I couldn't tell you which screen you look at most.
Why I process it
- To let you use the app — without an account and content there is no service. The basis is the contract between you and me: the terms of use.
- To keep the place liveable — moderation, anti-spam limits, blocks. The basis is my legitimate interest in preventing abuse, and yours in not suffering it.
- To keep things working — understanding why something broke. Legitimate interest again.
Who else sees it
Nobody I sell it to: only the providers I need to run the service, each for their own part.
| Who | For what |
|---|---|
| Clerk | Sign-in and account details |
| Neon | The database holding campaigns, characters and messages |
| ImageKit | The images you upload |
| Expo (EAS) | Hosts the app's server side |
| Cloudflare | Hosts this site |
| Apple | TestFlight, to distribute the beta on iPhone |
Where it lives
The database sits in a United States region (Virginia), and the other providers may process data outside the European Union too. Those transfers rely on the European Commission's standard contractual clauses, which are part of the agreements with these providers.
I'm telling you because it's true and it matters, not as a footnote: if you'd rather your data never left the EU, Fablepost isn't for you right now.
How long
As long as you keep the account. If you delete it, what follows below happens. Providers' backups roll over on their own within a few weeks.
If you delete your account
You do it from the app, in your profile. No need to write to me. The moment you do:
- The account goes: name, email and profile picture are deleted from Clerk.
- Your characters are detached from you: they lose the link to your account and take a generic name.
- Campaigns you ran as GM are archived, so they don't sit open with nobody running them.
- The messages you wrote stay in the chats, no longer attributed to you. That is a choice: a story written together can't be punched full of holes without ruining it for everyone else.
If you want those gone too, write to the address above and I'll remove them by hand.
Your rights
You can ask me to show you the data I hold about you, to correct it, to delete it, to hand you a copy in a readable format, or to restrict how it's used. You can also object to the processing based on legitimate interest.
Write to the address above: I answer within a month. If you think I'm getting it wrong, you can go to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority in the country where you live.
Young players
Fablepost isn't meant for anyone under 16. If I find an account below that age, I delete it.
If something changes
I update this page and change the date at the top. If the change is one that actually matters — new data collected, new providers, analytics — I'll tell you inside the app before it happens, not after.