This Privacy Notice explains how Intric8 Design LLC ("we", "us", "our"), the operator of RPG Mapper, collects, uses, and shares personal data. We are the data controller for personal data we collect through the Service.
1. What We Collect
RPG Mapper is designed to collect as little personal data as possible.
- License email: when you purchase a Founder's License, we store the email you provided at checkout so we can send you your license key and validate activations.
- Device activation data: to enforce the per-license device limit, we store a device fingerprint (a hashed identifier derived from your browser and OS) and the activation timestamp for each device you activate.
- Shared map contents: when you use the Share feature, the map you share is temporarily stored on our backend so viewers can load it in real time.
- Feedback submissions: if you use the "Send Feedback" form, the message you enter is transmitted to us via email.
- Server logs: our infrastructure providers may automatically log IP address and request metadata for security and abuse prevention.
We do not use analytics, tracking cookies, advertising trackers, or third-party fingerprinting. RPG Mapper does not require a user account.
2. Payment Data
We do not collect or store your payment card details. All payment processing is handled by our Merchant of Record, Paddle.com. Their handling of your payment data is governed by Paddle's Privacy Policy.
3. How We Use Your Data
- License email: to deliver your license key, validate activations, and provide customer support (contract performance).
- Device fingerprint: to enforce license activation limits (legitimate interest in preventing abuse).
- Shared map contents: to provide the sharing feature you initiated (contract performance).
- Feedback: to respond to your inquiry and improve the product (legitimate interest).
- Server logs: to secure the Service and investigate abuse (legitimate interest).
4. Who We Share Data With
- Paddle.com — Merchant of Record, for payment processing, license order management, tax compliance, and invoicing.
- Supabase — database and authentication hosting for license validation and the Share feature.
- Cloudflare — hosting and content delivery for the Service.
- Resend — transactional email delivery (license keys, feedback replies).
- Legal authorities — where required by law.
We do not sell your personal data.
5. Data Retention
- License records (email, key hash, activations) are retained for as long as the license is active, plus a reasonable period for tax and legal recordkeeping.
- Shared maps are retained while you actively share them. When you end a share session, the associated data becomes inaccessible to viewers.
- Feedback emails are retained as long as needed to resolve your inquiry.
- Server logs are retained for a short period (typically 30–90 days) for security purposes.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate data;
- Request deletion of your data (subject to legal retention requirements);
- Object to or restrict certain processing;
- Request a copy of your data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at eric@intric8design.com. We will respond within a reasonable period (typically within 30 days).
7. International Transfers
Our service providers may process data in the United States and other countries. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.
8. Security
We use appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), access controls, and secure hosting. No system is perfectly secure, but we take reasonable steps to safeguard your information.
9. Cookies
RPG Mapper uses only essential browser storage (localStorage) to remember your license activation, preferences (theme, recent files), and session state. We do not use analytics, advertising, or third-party tracking cookies.
10. Children
RPG Mapper is not directed at children under 13, and we do not knowingly collect personal data from children.
11. Changes to This Notice
We may update this Privacy Notice from time to time. The "Last updated" date at the top reflects the most recent revision.
12. Contact
For privacy questions or to exercise your rights, contact us at eric@intric8design.com.