Privacy Policy
Last updated: December 9, 2025
1. Introduction
Qombat Hive ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our D&D combat tracker application.
2. Information We Collect
Account Information
- Email address (required for account creation)
- Password (stored securely using bcrypt hashing)
- Account creation date
User-Generated Content
- Combat encounters and their configurations
- Custom creatures and monsters you create
- Player characters and NPCs you add
- Avatar images you upload
Technical Data
- Session cookies (for authentication)
- Local storage data (for offline functionality)
3. How We Use Your Information
We use your information to:
- Provide and maintain the combat tracker service
- Sync your data across devices (with your permission)
- Send transactional emails (account verification, password reset)
- Improve and optimize our service
4. Data Storage & Security
Your data is stored securely using industry-standard practices:
- Database: Cloudflare D1 (SQLite) for account and game data
- File Storage: Cloudflare R2 for avatar images
- Passwords: Hashed using bcrypt (never stored in plain text)
- Transmission: All data transmitted over HTTPS
5. Third-Party Services
We use the following third-party services:
- Cloudflare: Hosting, database, and file storage
- Resend: Transactional email delivery (verification, password reset)
We do not sell your data to third parties or use it for advertising purposes.
6. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update or correct your information
- Deletion: Delete your account and associated data
- Portability: Export your encounters and characters
To exercise these rights, contact us at the email address provided below.
7. Cookies
We use essential cookies only for authentication (session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days. Local storage data can be cleared directly from your browser.
9. Children's Privacy
Qombat Hive is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at: