Privacy Policy

Introduction

Fennec Forge LLC ("we," "us," or "our") operates Tabletop Battle Buddy (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Information We Collect

Information You Provide

• Account Information: Email address and password when you create an account
• Army Lists: The tabletop army lists you submit for tactical briefings
• Battle Journal: Game results and notes you choose to record
• Payment Information: Billing details processed through Stripe (we do not store complete card numbers)

Information Collected Automatically

• Usage Data: Features used, briefings generated, time spent in the app
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Generate personalized tactical briefings based on your army lists
• Process payments and manage subscriptions
• Track your usage for free tier limits
• Improve and optimize the Service
• Communicate with you about updates, support, and promotional offers
• Detect and prevent fraud or abuse

AI Processing

When you submit army lists for tactical briefings, this data is sent to our AI provider (Anthropic's Claude API) to generate your briefing. Army list data is processed in real-time and is not stored by our AI provider beyond the immediate request. We may retain your submitted army lists and generated briefings in your account for your future reference.

Data Sharing

We may share your information with:

• Service Providers: Third parties that help us operate the Service, including:
  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Vercel (hosting)
  • Anthropic (AI processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), secure authentication through Supabase, and row-level security on our database. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your account information and associated data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, please contact us at the email address below.

Account and Data Deletion

You have the right to delete your account and all associated personal data at any time. We provide two methods for doing so.

Self-Service Deletion

Signed-in users can delete their account directly from within the app:

1. Sign in to your account at tabletopbattlebuddy.com
2. Navigate to Account Settings
3. Scroll to the "Danger Zone" section
4. Click "Delete My Account" and confirm by typing DELETE

Your account and all associated data will be permanently deleted immediately. If you have an active Pro subscription, it will be canceled automatically as part of this process.

Deletion by Email Request

If you cannot sign in to your account, or prefer to request deletion by email, contact us at:

support@fennecforge.com

Please include the email address associated with your account. We will verify the request and process your deletion within 30 days, as required by GDPR Article 17.

What Data Is Removed

When you delete your account, we permanently remove the following from our active systems:

• Your account profile (email address, authentication credentials)
• All saved tactical briefings you have generated
• Your battle journal entries and match history
• Your usage history and feature tracking data
• Any account preferences and settings
• Active Pro subscriptions (canceled via Stripe)

Backup Retention

Deleted account data may remain in encrypted database backups for up to 30 days after deletion, after which it is automatically purged. We cannot retrieve or restore data from these backups on request — they exist solely for disaster recovery purposes.

Data We Retain After Deletion

For legal, tax, and fraud prevention purposes, we retain the following limited information even after account deletion:

• Payment and transaction records (retained for 7 years to comply with US tax law and Stripe's record-keeping requirements). These records are managed by Stripe and do not include personally identifying information beyond what is required for financial compliance.
• Server and security logs (retained for 30 days by Vercel, our hosting provider). These are used for incident response and are automatically purged after the retention period.
• Anonymized aggregate usage statistics that cannot be linked back to any individual user.

Third-Party Services

When you delete your account, we initiate deletion requests to our third-party service providers on your behalf:

• Supabase (authentication and database): Deletion is immediate on our request.
• Stripe (payments): Your customer record is deactivated, and your subscription is canceled. Stripe retains transaction records per their own policy and applicable financial regulations.
• Anthropic (AI inference): We do not store persistent personal identifiers with briefing requests, so no user-specific deletion is required.
• Resend (transactional email): Email addresses are removed from our sending lists.

Processing Timeline

Self-service deletions are processed immediately. Email-based deletion requests are processed within 30 days of receipt, typically much sooner. You will receive a confirmation email once your deletion is complete.

Cookies

We use essential cookies to maintain your session and remember your authentication state. We do not use tracking cookies or third-party advertising cookies. By using the Service, you consent to our use of essential cookies.

Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Fennec Forge LLC
Email: mwendel24@gmail.com