1. Local-first by design

Shelf of Holding processes map images entirely in your browser. Dungeon names, grid calibration, room outlines, and map image files are stored locally using IndexedDB on your device, scoped to your signed-in account on that browser. We do not upload your maps to FutureHax servers. Clearing your browser data or uninstalling the app will remove saved dungeons from that device.

2. Information we collect

We collect only the information needed to operate accounts, licensing, and the service.

• Google account profile via OAuth sign-in: email address, display name, and profile photo URL
• Account and license records in Google Cloud Firestore: license status, entitlement source, purchase date, Lemon Squeezy customer ID, Patreon entitlement timestamps, and optional CMS download key
• Purchase records: order number and processing date for one-time purchases
• Session authentication: a short-lived Firebase ID token stored in a browser cookie while you are signed in

3. How we use your information

We use collected information to:

• Authenticate you and maintain your signed-in session
• Determine whether your account has full access
• Process and reconcile one-time purchases through Lemon Squeezy
• Verify Patreon-based access through the FutureHax catalog
• Operate, secure, and improve the service

4. Information we do not collect

We do not sell your personal data. We do not use advertising or cross-site tracking cookies. We do not receive your Google password. We do not upload, store, or analyze your map images on our servers.

5. Cookies and browser storage

Shelf of Holding uses essential browser storage only.

• An HttpOnly __session cookie used to verify you are signed in (not readable by page scripts)
• IndexedDB storage for dungeon projects and map images on your device
• Firebase authentication state cached by the Firebase SDK to keep you signed in across visits

6. Third-party services

We rely on trusted providers to operate the service. Each processes data under its own privacy policy:

• Google / Firebase: authentication and account storage (Firestore)
• Lemon Squeezy: payment processing as merchant of record; we receive order metadata such as email and order number, not full payment card details
• FutureHax CMS: Patreon membership tier lookup by email for Captain-tier access
• Google Firebase App Hosting and Remote Config: application delivery and feature configuration

7. Data security

We use industry-standard security practices for account and licensing data, including encrypted connections (HTTPS) and Google Cloud infrastructure with encryption at rest. Local dungeon data is protected by your browser and device security. No method of transmission or storage is completely secure; you are responsible for keeping your Google account and device secure.

8. Data retention

Account and license records are retained while your account remains active so we can provide access and support. Purchase records are retained for accounting, fraud prevention, and license verification. Local dungeon data remains on your device until you delete it or clear browser storage. You may request account data deletion by contacting us.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you. You can sign out at any time, clear browser data to remove local dungeons, and contact us to request changes or deletion of server-side account records. We will respond to reasonable requests within applicable legal timeframes.

10. Children's privacy

Shelf of Holding is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. International users

Shelf of Holding is operated from the United States. If you access the service from outside the U.S., your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

12. Changes to this policy

We may update this privacy policy from time to time. Material changes will be posted on this page with a revised date. Continued use of Shelf of Holding after changes take effect means you accept the updated policy.

13. Contact

Questions about this policy or your data? Email support@futurehax.com, reach us on the FutureHax Discord (discord.gg/D5xF72Vvam), or use the contact options on the FutureHax catalog.