Privacy Policy

Tabletop Inventory Manager — Last Updated: April 16, 2026

Overview

Tabletop Inventory Manager ("TIM", "the App") is a character sheet and inventory management tool for tabletop role-playing games. This policy describes how we collect, use, and protect your information.

Information We Collect

Account Information

When you create an account, we collect:

Email address
Display name (optional)
Authentication credentials (password is hashed, never stored in plain text)

If you sign in with Google, we receive your Google profile name and email. We do not access your Google contacts, files, or other data.

Character Data

Character sheets, inventory, spells, and other game data you create are stored locally on your device. If you use Party Sync features, character data is transmitted to our servers (Firebase Realtime Database) to enable real-time collaboration with other players.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or billing address. Stripe provides us with:

Transaction confirmation (success/failure)
Purchase type (premium license or token pack)
Stripe customer ID (for purchase history)

See Stripe's privacy policy.

AI Image Generation

When you use AI image generation features, we send your text prompt to third-party AI services (fal.ai for icons, OpenAI for portraits). These services process your prompt to generate images. We do not send any character data, personal information, or inventory contents to these services — only the text prompt you write.

Analytics

We use Google Firebase Analytics to understand how the App is used in aggregate (for example, how many users create a character, purchase premium, or complete the tutorial). This data is anonymized and does not include character names, email addresses, inventory contents, or any other personally identifying information. We do not use advertising trackers or sell analytics data to third parties.

A full list of events we track is available in our open observability documentation.

Crash & Error Reporting

If the App encounters an error, a crash report is sent to Sentry (a third-party error monitoring service) so we can diagnose and fix bugs. Crash reports include the error message, a stack trace, your browser/device type, and the app version. Before transmission, we scrub common sources of personal information (request bodies, form inputs). We do not enable full session replay by default.

How We Use Your Information

Account authentication — to let you log in and access premium features
Premium status — to verify your purchase and unlock paid features
AI token balance — to track your remaining image generation credits
Party sync — to share character data with your party members (opt-in only)
Crash diagnosis — to fix bugs and stability problems
Aggregate analytics — to prioritize features and improvements

Data Storage and Security

Character data is stored locally on your device (localStorage/IndexedDB)
Account and premium status data is stored in Firebase (Google Cloud, US servers)
All data transmission uses HTTPS encryption
Firebase security rules restrict access to your own user data only
We do not sell, rent, or share your personal information with third parties

Third-Party Services

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication, user data, analytics	Link
Stripe	Payment processing	Link
Sentry	Crash & error reporting	Link
fal.ai	AI icon generation	Link
OpenAI	AI portrait generation	Link
Vercel	Web hosting	Link

Children's Privacy

The App is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your Rights

You may:

Access your data by logging into your account
Export all of your account data using Settings → Account → "Export all my data"
Delete your account and all associated data using Settings → Account → "Delete Account"
Opt out of Party Sync at any time by leaving a party

Data Retention

Account data is retained while your account is active
Character data stored locally is under your control — delete it anytime
If you delete your account, server-side data is removed immediately; backups are purged within 30 days

Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance.

Contact

For privacy questions or data deletion requests:

Email: silosupport@gmail.com