Privacy policy
Last updated 12 November 2026. For the open beta, which opened on 13 November 2026.
Who is responsible
Tiny Tarrasque is run by Nick Terry Van Den Dungen, a private individual in Helsinki, Finland. Contact: hello@tinytarrasque.com.
The short version
- There is no account and no sign-in. Your characters stay on your phone or in your browser.
- Crash reports and usage stats are off until you say yes. You are asked once on first launch, with a separate tick for each, and can change your mind in Settings at any time.
- Usage stats and crash reports never carry your character names, notes, or anything you typed. Text only leaves the app when you send it yourself: feedback, Discord sharing, or a file you share.
- I do not sell your data and do not use it for advertising.
What leaves your device, and when
| What | When | Goes to |
|---|---|---|
| Usage stats. Which screens and features you use (for example "rolled a die" or "took a long rest", or a class or species from the built-in rules), a random ID made on your device, the app version and the platform. No names, notes or free text. No profile of you is built, and location lookup from your IP address is switched off. Events wait in a small queue on your device (at most 200) so play offline is sent later. | Only if you turn it on | PostHog Cloud, hosted in the EU (Frankfurt). Your IP address is discarded. |
| Crash reports. The error and its stack, the app version, and on phones the phone model and OS version. Crashes and save errors only. No characters attached; text that could be yours is removed from the error first; taps and console text are not recorded, and no session pings are sent. A crash deep inside the phone system skips that clean-up and can also carry a random install ID made by the crash reporter and basic phone details (for example memory, screen size and language). On the web a one-time ID for that launch is used, not the usage-stats ID, so a crash is never tied to your stats. | Only if you turn it on | Phone app: Sentry (United States). Web app: PostHog (EU). |
| Update checks. The phone app asks for updates each time it opens, sending the app version and a random install ID made on your phone; the web app is loaded from the host. Your IP address is visible to the host. This is needed to deliver the app and has no switch. | Whenever the app opens or checks | Expo (hosting and updates) |
| Feedback. The kind you pick, what you write, the name, class and level of the character you have open, the app version and update, and on phones the phone model and OS version. A Discord name or email, only if you fill in "Want a reply?"; I use it only to reply about that report. A screenshot and what was on screen go too, unless you untick them. The character file (with its notes and log) goes only if you tick it. | Only when you press Send feedback | A small relay I run on Cloudflare, then a private Discord channel only I read. If that fails, your mail app and my inbox. |
| Launch news sign-up. Your email address and, only if you answer them, how you play, what sheet you use, which rules your table uses and a comment. Also which link brought you here. MailerLite also records the IP address and country you signed up from, and you confirm by email before anything else is sent. | When you sign up | MailerLite (EU), my email provider |
| Android testers group. Your Google account email address and the name Google shows for it. Google Play only gives the test app to members of this group until the app is public. As the group's owner I can see the member list, and I use it only to give you access. | Only if you join the Android test | Google (Google Groups and Google Play) |
| Discord sharing. The rolls and actions you switch on, with the character's name, class and level. Details below. | Only if you paste a channel link | Discord, straight from your device |
| Feedback chat. If you join the tester Discord, Discord handles what you post there under its own policy. The app only shows the invite link. | Only if you join | Discord |
| This website. The host sees your IP address when you load a page. Fonts come from this site too, not from Google. No tracking cookies are set. If the host shows its own badge on the page, that script comes from Netlify too. | When you visit | Netlify |
Sharing to Discord (optional)
Off until you set it up. If you paste a Discord channel link (a webhook) into a character, the app posts that character's rolls and actions to that channel, straight from your device to Discord. You choose what is sent: rolls, actions, HP changes and turns each have their own switch. Messages show the character's name, class and level, and the text of the roll or action. Nothing is sent through Tiny Tarrasque, and I never see these messages. Discord handles them under its own privacy policy. The link is kept only on your device and is not included in backups. Rolls made without a connection are not sent later. Remove the link (menu, Discord, Remove link) to stop.
Services outside the EU
PostHog (usage stats) and MailerLite (sign-ups) keep data in the EU. Sentry (phone crash reports), Expo (updates and the web app), Netlify (this website), Cloudflare (the feedback relay), Google (the Android testers group and Google Play) and Discord (feedback and Discord sharing) are companies in the United States, so data you send through them can be handled there. These transfers rely on the EU-US Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses in each company's data processing terms.
Why, and the legal basis
- Usage stats and crash reports: to fix bugs and decide what to build. Legal basis: your consent. Turning it off stops sending, and turning stats off deletes the random ID and the waiting queue from your device.
- Update checks and hosting: to deliver the app to you (legitimate interest / performing the service).
- Launch news email: to tell you about the beta and the launch (your consent).
- Android testers group: to give you the test app on Google Play (your consent, by joining; leave the group to withdraw it).
- Feedback: to answer you and improve the app (legitimate interest). A Discord name or email you leave under "Want a reply?" is used only to reply about that report (your consent; leave it empty to send without one).
How long I keep it
Usage stats: at most 12 months, then deleted. Crash reports: Sentry deletes them after 90 days at most. Feedback (Discord channel or mail): until the issue is handled, at most 24 months; I clear old messages from the feedback channel regularly. Launch news: until you unsubscribe, or at the latest 12 months after the 1.0 release unless you become a user. Android testers group: until you leave it, which you can do at any time in Google Groups.
Your rights
You can ask to see, correct or delete data about you, withdraw consent at any time (Settings in the app, or the unsubscribe link in any email), and ask for your data in a portable form. Because stats use a random ID with no name, please send that ID so I can find your data: the app shows it, with a Copy button, in Settings, Privacy while usage stats are on. Copy it before you turn stats off, since turning them off deletes the ID from your device. Without it, stats can't be traced back to you. Write to hello@tinytarrasque.com. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Print sheet
Print sheet builds a document on your device. It goes to your printer or to wherever you choose to share the file. Nothing is sent to Tiny Tarrasque.
Content packs
Content packs are plain files. A pack you export carries the author name and license it holds, so check them before you share it. A pack someone sends you is their text: the app shows it but cannot vouch for what it says or who wrote it.
Children
The app is not aimed at children under 13. It never needs a name, email or age. The only place it asks for contact details is the optional "Want a reply?" field when you send feedback, and its random IDs are not linked to a name.
Changes
If this policy changes in a way that matters, the app asks again before anything new is sent, and this page shows the date above.