Legal

1. The service

Shelf of Holding is a web and Android application by FutureHax for cataloging tabletop miniatures, storage locations, NFC tags, and encounters.

2. Accounts

Signing in with Google is required to use the app. You are responsible for the security of your Google account. We store your email address and license status to operate the service.

3. Purchases

Full access is a subscription processed by Lemon Squeezy, our merchant of record ($4.99 monthly or $39.99 yearly after a 7-day trial), or granted through an active Captain-tier membership on the r2Plays Patreon. Subscription access remains active while your plan is current. Patreon-based access remains active while your qualifying membership is active.

4. Refunds

If Shelf of Holding doesn't work for you during the trial or within 14 days of a paid subscription charge, contact us and we will make it right. Refunds are processed through Lemon Squeezy.

5. Your content

You retain all rights to images and 3D models you add to Shelf of Holding. You are responsible for ensuring you have the right to upload and use that content. Vault images and STL files you upload are stored in your private Firebase Storage area until you remove them or delete the associated mini.

6. Acceptable use

Do not attempt to circumvent license checks, resell access, or abuse the service. We may suspend accounts that violate these terms.

7. Disclaimer

The service is provided as-is without warranties of any kind. To the maximum extent permitted by law, FutureHax is not liable for indirect or consequential damages arising from use of the service.

8. Changes

We may update these terms; material changes will be noted on this page with a new date. Continued use after changes constitutes acceptance.

9. Contact

Questions? Reach us on the FutureHax Discord or via the contact options on the FutureHax catalog.

1. Local-first by design

Shelf of Holding stores your mini, location, NFC, and encounter records in your account's Firestore vault so they remain available across devices. Images and STL files are stored in your user-scoped Firebase Storage area only when you upload them. Existing external links remain hosted by their original provider.

2. Information we collect

We collect only the information needed to operate accounts, licensing, and the service.

• Google account profile via OAuth sign-in: email address, display name, and profile photo URL
• Account and license records in Google Cloud Firestore: license status, entitlement source, purchase date, Lemon Squeezy customer ID, Patreon entitlement timestamps, and optional CMS download key
• Purchase and subscription records: order number, plan, and processing date
• Session authentication: a short-lived Firebase ID token stored in a browser cookie while you are signed in
• Vault content you provide: miniature records, storage locations, notes, tags, image links, uploaded images, and uploaded STL models

3. How we use your information

We use collected information to:

• Authenticate you and maintain your signed-in session
• Determine whether your account has full access
• Process and reconcile Lemon Squeezy subscriptions
• Verify Patreon-based access through the FutureHax catalog
• Operate, secure, and improve the service

4. Information we do not collect

We do not sell your personal data. We do not use advertising or cross-site tracking cookies. We do not receive your Google password. We do not inspect uploaded vault images or STL models except as needed to deliver, secure, preview, or troubleshoot the service.

5. Cookies and browser storage

Shelf of Holding uses essential browser storage only.

• An HttpOnly __session cookie used to verify you are signed in (not readable by page scripts)
• Firebase authentication state cached by the Firebase SDK to keep you signed in across visits

6. Third-party services

We rely on trusted providers to operate the service. Each processes data under its own privacy policy:

• Google / Firebase: authentication, account and vault records (Firestore), and user-uploaded vault media (Firebase Storage)
• Lemon Squeezy: payment processing as merchant of record; we receive order metadata such as email and order number, not full payment card details
• FutureHax CMS: Patreon membership tier lookup by email for Captain-tier access
• Google Firebase App Hosting and Remote Config: application delivery and feature configuration

7. Data security

We use industry-standard security practices, including encrypted connections (HTTPS), Google Cloud encryption at rest, and user-scoped Firebase security rules for vault records and uploaded media. Download URLs contain unguessable access tokens and should not be shared publicly. No method of transmission or storage is completely secure; you are responsible for keeping your Google account and device secure.

8. Data retention

Account, vault, and license records are retained while your account remains active so we can provide access and support. Uploaded images and STL files remain until you remove them, delete their mini, or request account deletion. Purchase records are retained for accounting, fraud prevention, and license verification.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you. You can remove uploaded media from the mini editor, delete vault records, sign out at any time, and contact us to request account deletion. We will respond to reasonable requests within applicable legal timeframes.

10. Children's privacy

Shelf of Holding is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. International users

Shelf of Holding is operated from the United States. If you access the service from outside the U.S., your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

12. Changes to this policy

We may update this privacy policy from time to time. Material changes will be posted on this page with a revised date. Continued use of Shelf of Holding after changes take effect means you accept the updated policy.

13. Contact

Questions about this policy or your data? Email support@futurehax.com, reach us on the FutureHax Discord (discord.gg/D5xF72Vvam), or use the contact options on the FutureHax catalog.