Privacy Policy

The short version

TRP Forge collects the minimum needed to work. Without an account it collects nothing at all — your characters stay in your browser. We don't sell your data, we don't show ads, and we don't track you across the web. Your character profiles are yours.

What we collect

If you use TRP Forge without signing in, nothing leaves your browser. Your characters live in localStorage on your own device.

If you create an account, we store:

• Email address — if you sign up with email, used for authentication only
• Discord account info — if you sign in with Discord, we receive the basic profile Discord's OAuth provides
• Character profiles — the Total RP 3 profile data you write, so it can sync between your devices
• A share setting and URL slug per character, so we know whether its page should be publicly readable
• Timestamps — when the account and each character were created and last updated

Analytics

We use Vercel Web Analytics to count page views, which tells us whether anyone is using the thing. It sets no cookies, doesn't follow you to other websites, and doesn't build a profile of you. It records the page you visited plus coarse details like the referring site, country, and browser type.

We do not use advertising trackers, session recording, or heatmaps.

What we don't do

• We never touch your World of Warcraft account, your game files, or the addon. TRP Forge only reads and writes text you paste yourself.
• We don't sell, rent, or share your personal data with third parties.
• We don't show ads, and nothing on the site is paid placement.
• We don't read your characters. Nobody reviews profile content unless it's publicly shared and reported to us.

Shared character pages

Publishing a character turns on a read-only page at trpforge.app/c/your-character. Anyone with that link can read it, and it isn't listed in a directory — there is no browse page or search on TRP Forge. Turning sharing off removes public access.

While a page is public, search engines, Discord and other services may cache or copy it. We can't recall those copies after the fact, so treat anything you publish as something that could outlive the link.

Where data lives

Account and character data is stored on Supabase (hosted PostgreSQL) on servers in the United States, encrypted in transit (TLS) and at rest. The site itself is hosted on Vercel.

If you never sign in, none of that applies: your characters are in your browser's localStorage and never reach our servers.

Your rights

• Take your data with you — every character exports as a TRP3 string from the export screen, at any time, with or without an account
• Delete it — deleting a character removes it from your browser and from our servers
• Unpublish — turning off a share link removes public access immediately

To delete your account and everything attached to it, get in touch and we'll remove it from our servers.

Children

TRP Forge isn't intended for children under 13, and we don't knowingly collect data from them.

Changes

We may update this policy. If anything significant changes, the date at the top of this page changes with it.

Contact

Questions about privacy? Use the contact form, email info@trpforge.app, or find us on Discord.