Privacy

What dragon.rocks keeps

• An id for you. It is made from your sign-in and is not your name or your email. It looks like who:acct-1a2b3c4d5e.
• What you and your table make with it: campaigns, characters, the worlds they are set in, the story so far as each of you told it, and a DM's plans. Each of these records who wrote it.

What it never keeps

• Your email address or your password. Signing in is handled by Clerk (below), and dragon.rocks is never sent either.
• Your conversations with your chat app. dragon.rocks only receives what your chat app sends it when it uses dragon.rocks, such as a character to save or a campaign to read.
• A record of your visits. The site has no analytics, no advertising, and no cookies of its own, and it does not log which pages you open or your internet address.

Nothing about you is sold or shared with anyone for any purpose.

Who sees what

• A campaign is seen by the people in it: its owner, its DMs and its players.
• A DM's plans are seen only by whoever the DM chooses: themselves, the table's DMs, or everyone.
• A world you make is seen only by you.
• Nobody else sees any of it: not other people with accounts, and not anyone without one.

The services it uses

• Clerk runs sign-in, at accounts.dragon.rocks. It keeps your email (and your name and picture, if you sign in with Google) so you can sign in, and it sets the cookies that keep you signed in. Clerk's own privacy policy covers what it keeps.
• Google, only if you choose "Continue with Google" to sign in.
• Your chat app (Claude, Grok, ChatGPT or Gemini). What you type there is kept by that company under its own privacy policy, as with anything else you say to it.
• DigitalOcean hosts the server that keeps your campaigns.

Questions, or leaving

Ask the person who told you about dragon.rocks. If you want your account and what you made removed, say so and it will be deleted.

Last changed 14 November 2026.