Privacy Policy

1. Information We Collect

1.1 Discord Account and Server Data

When you use the bot or sign in with Discord, we may collect:

• Discord user ID, username, display name, and avatar
• Discord server IDs, channel IDs, and bot permissions
• Command interaction data needed to respond to commands and troubleshoot errors
• Discord account information made available through Discord OAuth, such as your linked email if Discord provides it

1.2 Character, Campaign, and Game Data

To provide character management, rules lookup, initiative, downtime, hunting, calendar, and campaign tools, we store data you submit or import, including:

• Character sheets, Pathway JSON IDs, Pathbuilder import IDs, ability scores, skills, saves, feats, spells, inventory, attacks, companions, notes, and portraits
• Server and campaign settings, active character selections, initiative state, encounter data, calendars, weather state, downtime activities, and user-created snippets
• Homebrew records such as ancestries, heritages, classes, deities, houses, items, harvest rewards, and other campaign data you choose to add
• Bug reports, feedback, contact form submissions, and support messages you send to us

1.3 Website and Security Data

• Session cookies and authentication tokens
• IP address, browser, device, and basic request metadata
• Page usage, performance data, and error logs
• Security logs used to detect abuse, unauthorized access, or service problems

See our Cookie Policy for more about cookies and similar technologies.

2. How We Use Information

• Provide the Discord bot, web character builder, character sheet sync, and PF2e campaign tools
• Import, update, display, and back up user-created or user-imported character and campaign data
• Remember server settings, active characters, and user preferences
• Respond to commands, support requests, bug reports, and beta feedback
• Monitor reliability, debug errors, improve performance, and prevent abuse or unauthorized access
• Comply with legal obligations and enforce our terms and policies

3. Public Discord Output

Many Pathway bot commands post results in Discord channels where other server members can see them. Some commands may be private or ephemeral, but you should treat anything entered into a public Discord channel as visible to that channel. Do not put private, sensitive, or real-world personal information in character notes, homebrew entries, command arguments, or support channels unless you are comfortable sharing it.

4. Third-Party Services

We use third-party services to operate Pathway. Their handling of information is governed by their own policies.

5. How We Share Information

We do not sell your personal information. We may share information only in these limited situations:

• With service providers that help us host, store, secure, and operate Pathway
• With Discord users in the same server or channel when a bot command is public
• With server owners or moderators when needed to address abuse, support, or safety issues
• If required by law, legal process, or to protect Pathway, our users, or the public
• In connection with a merger, acquisition, or transfer of the service, subject to continued privacy protections

6. Data Storage, Security, and Retention

Pathway stores operational data in Supabase and related hosting infrastructure. We use access controls, server-side service keys, environment variables, and reasonable technical safeguards to protect stored data.

No online service can guarantee perfect security. During closed beta, features and storage behavior may change as we improve the product.

We retain information for as long as needed to provide the service, maintain backups, resolve disputes, prevent abuse, comply with legal obligations, and support beta testing. When you delete content through Pathway, we will remove it from active systems where technically feasible, though backups and logs may persist for a limited period.

7. Your Choices and Rights

• You can update or delete many characters, homebrew records, and settings through the web app or bot commands.
• You can disconnect Pathway from Discord by removing the bot from a server or revoking OAuth access in Discord settings.
• You can request access, correction, export, or deletion of personal data by contacting us.
• Depending on where you live, you may have additional privacy rights under local law.

8. Children

Pathway is intended for users who are old enough to use Discord and participate in the closed beta under Discord's rules and applicable law. We do not knowingly collect personal information from children who are not permitted to use the service.

9. Changes to This Policy

We may update this Privacy Policy as Pathway changes. If we make material changes, we will update the date above and may provide notice through the website, Discord, or the support server.

10. Contact

For privacy questions or data requests, contact us at: