Privacy
Last updated October 22, 2026
Short version: your campaigns stay on your device, and I never see them. The server keeps only what it needs to sign you in. Nothing is sold, there are no ads and no ad trackers.
On your device
Your campaigns (your character, people, places, threads, inventory, scene, journal, oracle answers and the Story) are stored in this browser on this device. They are not sent to Roll Hollow's server.
What the server keeps
- Your account: your email address, to send your sign-in code, and the sign-in records the login service keeps (such as when you signed up and last signed in).
- Your account settings: which controls the composer shows and whether you've seen the first-run guide.
- Feedback you send: your message, its kind, the page you were on, and your browser's identification, which includes its name, version and operating system.
- Campaigns from before October 2026, when campaigns were kept on the server: they stay there, read-only, only until they are moved to your device or deleted.
What Roll Hollow doesn't collect
- No ad pixels and no tracking across sites. We count visits with Cloudflare Web Analytics, which uses no cookies and does not follow you from site to site. Its script loads from Cloudflare, which sees the page you open and your IP address, as any web host does. The fonts are served by Roll Hollow itself.
- The only cookies are the ones that keep you signed in.
- No payment details: if you buy Roll Hollow, Lemon Squeezy takes the payment, under its own privacy policy.
- Your IP address is not stored by the app, though the hosting and login services log it for a short time.
Who sees it
- Your campaigns: only you, on your device.
- What the server keeps: me, Matthew Freeman, to run Roll Hollow, fix problems, watch costs and read feedback. I don't sell or share it, except where the law requires it or to protect someone from serious harm.
- The services that run Roll Hollow, on my behalf: Supabase (sign-in and the server database), Vercel (hosting), Cloudflare (the domain, and the visit counts above), and the email service that sends sign-in codes. They may store data outside your country, including in the United States.
Your choices
- Delete a campaign in its Campaign settings; it is removed from this device. A copy saved in a campaign folder you chose, or in a file you downloaded, stays where you put it, and deleting it is up to you.
- Delete your account: there is no button yet, so email hello@rollhollow.com from your account's address and I'll delete everything the server holds for it within 30 days.
- Ask what the server holds about you, or ask for it to be corrected: email me. Depending on where you live, you may have more rights over your data, and I'll help with those too.
Children
Roll Hollow is for people 18 and older, and I don't knowingly keep anything about anyone younger. If you think a child has an account, email me and I'll delete it.
Changes and contact
If this statement changes in a meaningful way, I'll update the date at the top and say so in the app first. Roll Hollow is run by Matthew Freeman, trading as Roll Hollow, who is responsible for the data described here. Questions: hello@rollhollow.com. It's just me, and I read everything.