Privacy Policy

The Short Version

We collect the minimum data needed to make TRP Forge work. We don't sell your data, we don't track you across the web, and we don't show ads. Your character profiles belong to you.

What We Collect

If you use TRP Forge without an account, we collect nothing. All your data stays in your browser's local storage.

If you create an account, we store:

• Email address — if you sign up with email (used for authentication only)
• Discord profile info — if you sign in with Discord (username and avatar, provided by Discord's OAuth)
• Character profiles — the profile data you create and choose to publish
• Account metadata — when your account was created and when profiles were last updated

What We Don't Collect

• We don't use analytics or tracking cookies
• We don't collect your IP address for profiling
• We don't store your AI API keys on our servers — they stay in your browser's local storage
• We don't access your World of Warcraft account or game data
• We don't sell, rent, or share your personal data with third parties

AI Features

When you use AI features, your character data is sent directly from your browser to the AI provider you configured (e.g., OpenAI, Grok, Ollama). TRP Forge does not proxy, store, or log these requests. Your API key and AI conversations never touch our servers.

You are responsible for reviewing the privacy policy of your chosen AI provider.

Published Profiles

If you choose to publish a character profile, it becomes publicly accessible at its URL. Anyone with the link can view it. You can unpublish at any time, which removes public access.

Published profiles may be cached by search engines or third-party services. We cannot control third-party caching after you publish.

Data Storage

Account and profile data is stored on Supabase (hosted PostgreSQL). Supabase servers are located in the United States. Data is encrypted in transit (TLS) and at rest.

Local data (profiles without an account, AI configuration) is stored in your browser's localStorage and never leaves your device.

Your Rights

You can:

• Export your data — your profiles are always exportable as TRP3 import strings
• Delete your data — delete individual profiles or your entire account
• Unpublish — remove any published profile from public access

If you want to delete your account entirely, contact us and we'll remove all your data from our servers.

Children

TRP Forge is not intended for children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. If we make significant changes, we'll note the updated date at the top of this page.

Contact

Questions about privacy? Reach out via our GitHub repository or Discord.