Privacy & control
Privacy Policy
MapFable keeps a shared memory of tabletop RPG sessions while giving people control over what becomes public.
Who is responsible for your data
MapFable is operated by Dark Orb. The controller of personal data processed by the service is Edukomiks sp. z o.o., ul. Szpitalna 4 m. 8a, 00-031 Warsaw, Poland. For privacy questions, access requests, corrections, objections, or erasure requests, email artur@revolver.pl.
What MapFable stores
MapFable stores account details such as your name and email address; the sessions, recaps, private GM notes, table memberships, games, and profile choices you create; and essential security and sign-in records.
A GM may enter a player’s email address to invite that person to a session. That person may not yet have a MapFable account and may not have entered the address themselves.
If an invitation is not yours
Every session invitation email includes a “Remove me from this invitation” link that works without signing in. It removes the invitation and the associated unclaimed participation, and clears an email held only for that invitation. You can also contact artur@revolver.pl.
Why MapFable processes data
MapFable processes account and session data to provide the service you request. It uses legitimate interests to keep the service secure, prevent duplicate submissions, operate essential product analytics, and deliver a one-time invitation entered by a GM. Public profile visibility and search indexing are separate choices controlled by the profile owner. MapFable may also process limited records when required by law.
Your table stays private by default
Sessions, recaps, participant notes, and GM private notes are visible only where MapFable explicitly says they are shared. GM private notes are never shown on public pages. Public profiles, search indexing, public table names, and participant name visibility require separate opt-ins.
Service providers
MapFable uses service providers only where needed to operate the product: Vercel for hosting and delivery, Neon for the application database, and Resend for transactional email. These providers process data on MapFable’s instructions and under their own security and data-processing terms.
Cookies
MapFable uses essential cookies for secure sign-in and session continuity. It does not use advertising cookies. If non-essential analytics or marketing cookies are introduced, this policy and the consent controls will be updated first.
Deleted sessions and backups
When a GM deletes a session, it immediately disappears from session histories, profiles, tables, invitations, public pages, search, and analytics. Notes added by players disappear with the session.
A deleted session remains recoverable for 30 days to protect against accidental loss. After that recovery window, MapFable permanently removes the session, participant entries, recaps, GM private notes, invitations, and session-specific event records from the live database.
Deleted data may remain in encrypted provider backups until those backups rotate under the provider’s retention schedule. Backup copies are not used for ordinary product access and are restored only for disaster recovery.
Deleting an account
To request deletion of your whole account, email artur@revolver.pl from the address associated with it. MapFable will verify the request, remove or anonymize personal data tied to the account, and explain any narrow record that must be retained for security or legal reasons.
Your rights
Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw a public-profile or indexing choice at any time. Send requests to artur@revolver.pl.