Your worlds never leave your browser.

The short version

Lairbook has no account, no server and no database. Everything you write — worlds, campaigns, encounters, NPCs, lore, maps, images — is stored by your browser on your own machine, and there is no mechanism by which we could read it. We count anonymous usage so we know which parts of the app are worth building on. That is the whole of it.

What we never collect

• Anything you write. No names, no notes, no descriptions, no images, no file names. Not in analytics, not anywhere.
• Identifiers for the things you make. The addresses we record are rewritten to their general shape before they are sent, so/world/:worldId/campaign/:campaignId is what we see, never the ids of your own worlds.
• Your email, name, or any account details — there is no account.
• Your IP address, beyond the country-level location our analytics provider derives and discards it from.

What we do count

Which screens are opened, and roughly twenty anonymous events for things like "a world was created", "a section of type loot was added", "an export started". Each carries only a category we defined ourselves and, sometimes, a number — "this was the third campaign in this browser". Errors are recorded so we can fix crashes.

No cookies, and nothing that follows you

We set no cookies, which is why there is no cookie banner. To tell one visit from another we generate a random number and keep it in your tab's temporary storage. It is not derived from anything about you, it is not shared with anyone, and your browser discards it when you close the tab. Come back tomorrow and you are somebody new to us.

The trade is deliberate and it costs us real information: we cannot tell whether a hundred visits are a hundred people or twelve, and we cannot measure whether anyone comes back. We would rather not know.

Who processes it

Azure Application Insights, a Microsoft service, hosted in the EU. It is the only third party that receives anything, and it receives only what is described above. Data is deleted after 90 days. The site is served by Azure Static Web Apps, which keeps ordinary web server logs.

The app also fetches monster, item and spell statistics from theOpen5e API when you search for them — those requests go directly from your browser to Open5e and tell them your IP address, as any web request does.

Blockers, and your rights

If you block analytics, the app works exactly as it does otherwise — every feature is local and nothing depends on that connection. A good many of you do block it, and our numbers are undercounts as a result. That is fine.

Because we hold no identifier that could point back to you, there is nothing for us to look up, export or delete on request; deleting a world in the app, or clearing your browser's site data, removes it permanently and immediately, because our copy never existed. Questions:hello@lairbook.com.