Legal

Privacy Policy

1. Introduction

Welcome to Wizards Codex. Four Oh Four Digital ("we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Wizards Codex mobile app and the Game Master web app at app.wizardscodex.com (together, the "App").

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you provide directly to us when you create an account or interact with the App. This may include:

• Email address
• Username
• Payment information (via third-party processors)
• Any User Content you upload or create within the App

2.2 Information Collected Automatically

We may automatically collect certain information when you use the App, including:

• Device information (e.g., model, operating system)
• Usage data (e.g., features used, session duration)
• Log data (e.g., IP address, timestamps)

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the App and our services
• Process transactions and send related information
• Respond to your comments, questions, and requests
• Contact you to ask for feedback on your experience of the App, and to carry out product research that helps us decide what to build next
• Communicate with you about updates, promotions, and news
• Understand which features are used and where people get stuck, so we can improve the App (see section 13)
• Diagnose crashes, errors, and performance problems (see section 13)
• Show advertising to users on the free tier (see section 14)
• Protect against, identify, and prevent fraud and other unauthorized activities

Where we contact you for feedback or product research, we rely on our legitimate interests. You can tell us to stop at any time, either by replying to the message or by emailing fourohfourdigital@gmail.com, and we will not contact you for that purpose again.

4. Legal Bases for Processing Your Personal Data

If you are located in the United Kingdom or the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: You have given consent for one or more specific purposes.
• Contractual necessity: Processing is necessary to perform a contract with you.
• Legal obligation: We have a legal obligation to process your data.
• Legitimate interests: Processing is necessary for our legitimate interests, provided your rights do not override those interests.

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service providers who perform services on our behalf, covering authentication, product analytics, crash and error reporting, advertising, payment processing, and cloud hosting. Sections 12 to 14 name them and describe what each one receives.
• Legal authorities when required by law or to protect our rights
• Affiliates or successors in the event of a merger or acquisition

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data, such as:

• Accessing and obtaining a copy of your data
• Correcting or updating your information
• Requesting deletion or restriction of processing
• Withdrawing consent at any time (where applicable)
• Objecting to certain processing activities
• Data portability

To exercise these rights, please contact us at fourohfourdigital@gmail.com.

7. Data Retention

We retain your personal information only as long as necessary to provide the App's services, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Account Deletion

You can delete your account and request deletion of your data in two ways:

• In the app: Go to Settings → Delete Account and choose soft or hard delete.
• By email: Contact fourohfourdigital@gmail.com from the email used to sign up.

Learn more: Delete Account & Data.

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, which may have different data protection laws. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable laws.

11. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information.

12. Subscription and In-App Purchase Processing

We use RevenueCat, Inc. ("RevenueCat") to manage in-app purchases and subscription entitlements. RevenueCat processes information required to validate receipts, maintain subscription status, and synchronize entitlements across devices.

Because our application requires account authentication, we associate your subscription and purchase activity with your logged-in user account. When you sign in, we transmit our internal user identifier to RevenueCat so that all subscription data can be accurately tied to your account rather than to an anonymous device-level ID. This enables access to entitlements across multiple devices and ensures continuity of subscription status.

Categories of Data Processed Through RevenueCat

RevenueCat may process the following categories of data related to your account:

Purchase and subscription history, including transaction identifiers, product identifiers, purchase timestamps, renewal dates, and subscription status.

Identifiers, specifically the custom user ID we provide when you are authenticated in the app, which allows RevenueCat to maintain accurate customer records and entitlements across devices.

RevenueCat does not collect or process payment card numbers, billing details, or personal payment information. All payments are handled exclusively by Apple or Google through their respective in-app purchase systems.

Purpose of Processing

The information processed through RevenueCat is used solely to activate, restore, and manage subscription entitlements linked to your account; to validate receipts; to prevent fraudulent access; and to provide multi-device subscription synchronization. We do not use RevenueCat purchase data for any unrelated marketing or profiling purposes.

13. Authentication, Analytics, and Error Reporting

The providers below process personal data on our behalf, under contract, and only for the purposes described here. Some of them store data outside the United Kingdom, which is covered by section 10.

Auth0

Auth0 provides account creation, sign-in, and session management. It processes your email address, your display name, the sign-in method you use (email and password, Google, or Facebook), and authentication records including sign-in timestamps and the IP address you signed in from. Without this there is no account, so our legal basis is contractual necessity.

Mixpanel

Mixpanel provides product analytics, which is how we see what people actually use and where they get stuck. When you sign in we send Mixpanel your account identifier, email address, display name, sign-in method, and the timestamps of recent sign-ins. We also send events describing what happens in the App, such as creating a character, joining a campaign, or opening the paywall. Our legal basis is our legitimate interest in understanding and improving the App.

Sentry

Sentry provides crash, error, and performance reporting across the mobile app, the Game Master web app, and our server. When something goes wrong it records the error and its stack trace, your device and operating system, the app version, the IP address of the request, and, in the mobile app, the account identifier, email address, and display name of the signed-in user. A small sample of performance traces is also collected. Our legal basis is our legitimate interest in keeping the App working and secure.

Apple and Google

All subscription and in-app purchase payments are processed by Apple or Google under their own terms and privacy policies. We never receive or store your card or billing details.

14. Advertising

We show banner and interstitial ads supplied by Google AdMob to users on the free tier. Subscribers do not see ads.

We ask your permission before any personalised advertising. On iOS that is Apple's App Tracking Transparency prompt followed by Google's consent form; on Android it is Google's consent form. If you agree, your device's advertising identifier can be used to measure ad performance and to show you more relevant ads, such as other tabletop RPG apps rather than unrelated products. If you decline, you will still see ads, but they will not be personalised.

You can change your answer at any time using the Personalised Ads Consent toggle on your account screen in the App. On iOS you can also change it under Settings → Privacy & Security → Tracking. We store your current choice against your account so that we can honour it on every device you sign in to.

Our legal basis is your consent for personalised advertising, and our legitimate interest in funding a free tier for advertising that is not personalised.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting a notice in the App or on our website and updating the effective date. Your continued use of the App after changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: fourohfourdigital@gmail.com
• Website: https://www.wizardscodex.com