Draft — pending legal review. This document is a template and should be reviewed by qualified legal counsel before use in production.

Privacy Policy

Last updated: April 10, 2026

FoundryVTT Online ("we", "us", or "our") operates the website and hosting service at foundryvttonline.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address — from your Google account via OAuth sign-in
  • Display name and profile photo — provided by Google OAuth
  • Google unique identifier (sub) — used to verify your identity on return visits

1.2 Payment Information

Payment processing is handled by our third-party providers. We do not store your full credit card number, CVV, or bank details. We receive and store only:

  • Stripe customer ID and subscription ID (if using Stripe)
  • PayPal subscription ID (if using PayPal)
  • Plan tier, subscription status, and billing cycle

1.3 Service Usage Data

  • Foundry VTT world data — worlds, maps, tokens, modules, and any files you upload via SFTP are stored on our infrastructure
  • Server logs — connection timestamps, IP addresses, and basic request logs for security and debugging
  • Storage usage — we track disk usage per account to enforce plan limits

1.4 Technical Information

We automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Access timestamps
  • Pages visited

2. How We Use Your Information

We use your information to:

  • Provide and maintain your hosted Foundry VTT server
  • Process payments and manage subscriptions
  • Send service-related emails (billing receipts, account notifications, important updates)
  • Respond to support requests
  • Detect, prevent, and address technical issues or abuse
  • Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may process your data:

4. Cookies and Local Storage

We use cookies and local storage solely to maintain your authenticated session. No third-party advertising or tracking cookies are used.

5. Data Retention

We retain your account information and Foundry VTT data while your subscription is active. If you cancel your subscription, your data is preserved for 30 days to allow easy reactivation. After 30 days, your data may be permanently deleted. You may request earlier deletion by contacting us.

6. Data Security

We implement reasonable technical and organizational safeguards to protect your data, including encrypted connections (HTTPS/SFTP), isolated per-user containers, and secure server infrastructure. However, no method of transmission or storage is 100% secure.

7. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of your personal data
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your account and data
  • Portability — request your data in a machine-readable format
  • Objection — object to certain processing activities

To exercise these rights, email support@foundryvttonline.com.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us for removal.

9. International Data Transfers

Your data may be processed on servers located in the United States or other countries. By using our Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Service. Your continued use after changes constitutes acceptance.

11. Contact Us

Questions about this Privacy Policy? Contact us at support@foundryvttonline.com.