Game Master Privacy Policy

1. About This Policy

Game Master is a tabletop role-playing game app developed and published by Frozen Dungeon Studios ("Frozen Dungeon", "we", "us"). This policy explains what information the Game Master app accesses, stores and sends, and who can see it. It applies to Game Master on Windows (including copies distributed through Steam) and on Android (including copies distributed through Google Play).

This policy covers the app. Stores and platforms you use to get the app, such as Steam and Google Play, have their own privacy policies, described in Third-Party Services.

2. Information Game Master Handles

Game Master works with the following kinds of information. The table shows where each one goes.

Game Master does not access your location, contacts, microphone, calendar, phone or SMS data, advertising ID, or other device identifiers such as IMEI or serial numbers.

Device permissions (Android)

• Internet / network access (INTERNET): required by Android for any network connection, including connections between devices on your local network. Game Master connects to an internet server when you host or join an Internet Multiplayer session (Frozen Dungeon's relay; see Internet Multiplayer), and, in builds that include it, when you use the optional online community (see Online Community).
• View network and Wi-Fi state (ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE): used to find this device's local address and to help with reconnecting during LAN play.
• Wi-Fi multicast (CHANGE_WIFI_MULTICAST_STATE): lets the app hear session announcements on your local network so hosted sessions appear in the Join list.
• Google Play billing (com.android.vending.BILLING): lets the app show the prices of the Full Toolkit and Prison Escape, open Google Play's purchase screen and check whether you own them (see Purchases).

Game Master does not request camera or storage permissions. When you import a picture, Android's own photo picker lets you choose a single image. "Take Photo" opens your device's camera app, and only the photo you take and accept is returned to Game Master. Importing a sound uses Android's document picker in the same way.

Windows

On Windows, importing images or sounds uses the standard Windows file dialog. The first time a PC hosts a LAN session, Windows Firewall may ask whether Game Master may accept connections on your network.

3. Information Stored on Your Device

Everything you create in Game Master is saved locally in the app's private storage on your device:

• campaigns, story, locations and maps;
• characters, NPCs, monsters, items and encounters;
• sessions, including positions, HP, turn order, messages and the Session Log;
• imported images (portraits, tiles, backgrounds) and imported sounds (converted to WAV);
• settings such as UI colors, theme, sound preferences, editor preferences and which tips you have seen;
• your player identity: a randomly generated ID, the name you play under, and which character you last used in each session, so you can rejoin as yourself;
• on a player's device, copies of the pictures and sounds a GM's session showed you, so they don't need to be downloaded again next time;
• if you sign in to the optional online community, a sign-in token so you stay signed in (removed when you sign out or delete the account).

On Windows these files are kept in %APPDATA%\com.gamemaster\game_master in your user profile. On Android they are kept in the app's private storage, which other apps cannot read.

While multiplayer is running, Game Master keeps a short connection log in memory (for example "connected", "reconnecting") to help diagnose network problems. It is also written to the device's standard system log, like most apps. It is not saved to a file by Game Master and is never sent to us.

On Android, if you have turned on device backup in your Android settings, Android may include Game Master's app data in your device backup to your Google account. That backup is handled by Google under your Google account settings and Google's privacy policy; Frozen Dungeon cannot access it.

4. Multiplayer (Local Network and Internet)

Players can join a GM's session in two ways. LAN Multiplayer connects devices on the same local network (the same Wi-Fi or wired network); data goes directly from one device to another, and Frozen Dungeon never receives it. Internet Multiplayer connects devices anywhere through Frozen Dungeon's relay server; it is described in its own part below. Either way, the host device runs the game and decides what each player may see.

Local network: what the host announces

When a GM opens a session, the host device announces it on the local network about once a second so players can find it. Any device on the same network can receive this announcement. It contains:

• the session name;
• the host device's network name (for example, the computer name set in Windows);
• the port number, the number of connected players, the app's network version, and whether a password is required.

It contains no campaign content. If you would rather not broadcast your device's name, you can change the device name in your operating system settings.

What is sent when a player joins

• Player to host: the player's name, a random player ID generated by the app, the chosen character, the session password if one is set (LAN only), and the player's actions (such as moves, attacks and dice roll requests).
• Host to player: the list of characters available to pick and the game state that player is allowed to see: the map, visible creatures, their own character, messages meant for them, dice results and the Session Log, plus the custom pictures and sounds their view uses. Hidden information (unrevealed creatures, areas still under fog, GM notes, other players' private messages) is removed on the host before anything is sent.

The host device is in charge: it checks each action, applies results and saves the session. Players' devices hold the game information they receive in memory while the session is open, so they can catch up after a short disconnection; it is not saved to their storage. A player's device saves only its own player identity (random ID, name and last character) and copies of the pictures and sounds it was sent, so they don't have to be downloaded again.

Local network encryption

LAN traffic between Game Master devices is not encrypted, and the optional session password is sent as plain text. Other devices on the same network could, with the right tools, observe it. Use LAN Multiplayer on networks you trust, such as your home network, and don't use a password you use anywhere else.

Internet Multiplayer

Internet Multiplayer is used only when a GM chooses to host an internet session or a player joins one with a Join Code. Each device then opens one connection to Frozen Dungeon's relay server at www.frozendungeon.com, which passes game messages between the GM's device and the players' devices. Internet Multiplayer does not use an account. Optional community accounts are separate and are described in Online Community.

• Encryption: each connection to the relay is encrypted with TLS, the same protection HTTPS websites use. It is not end-to-end encrypted: the relay server decrypts messages in memory in order to forward them.
• What passes through the relay: the same game messages as on a local network (player name, random player ID, actions, the filtered game state each player may see, dice results, and the pictures and sounds a player's view uses), the Join Code, and each app's network version so mismatched versions can be refused. The relay does not read the game content; it forwards each message and forgets it.
• What is stored: nothing. Sessions, names, Join Codes and messages exist only in the relay's memory while the session is open, and are gone when the GM closes it or about two minutes after the GM's device disconnects.
• IP addresses: Frozen Dungeon's web server records each connection in its standard access log (the time, your IP address and whether you were hosting or joining). These logs are deleted automatically after 14 days. The relay also holds IP addresses in memory for a few minutes to limit repeated wrong Join Code attempts.
• Relay log: the relay keeps an operational log of counts only (for example, that a session started, how many devices were connected and how much data was relayed). It identifies a session by the first two characters of its Join Code and records no names, IP addresses or game content.
• Sharing: the relay runs on Frozen Dungeon's own server. We do not share or sell this information.

Anyone who has a session's Join Code can try to join while it is open, so share it only with your players. The GM can remove a player from the session at any time.

5. Online Community Accounts (optional)

Some Game Master builds include optional online community features: Find Campaigns, Find Groups, My Groups, Join Campaign, in-app notices and Live Now for a campaign you belong to. Steam and Google Play copies do not include these yet. You do not need an account for My Characters, Tabletop Mode, How to Play, LAN play or Internet Join Codes.

If you create a Game Master account to find or publish campaigns, we keep your email address, a secure hash of your password (we never see the password), your display name, the built-in portrait and language you choose and an optional short bio. If you publish a campaign listing, we keep what you write in it (title, description, schedule, seats, tags and similar details) and show it to other players; we never upload your campaign itself (maps, notes, encounters or saves). If you join or ask to join a campaign, we keep that membership or request, the name of the character you chose and your note, and show them to that campaign's GM. If you create or join a group, we keep the group's details you write (name, description, schedule and similar), who is in it and their role, and any note you send with a request to join; members of a group see each other's display name and portrait, and the group's owner and moderators see requests to join it. If you report or block someone or report a group, we keep the report or block; reports are reviewed by us and the reported person is not told who reported them.

If other players ask to join your campaign or group, or a campaign you are in goes live on the internet, we keep a short in-app notice for you (who it was and the campaign or group name). We do not send push notifications. While a GM hosts an internet game for a campaign you belong to, we keep that game's Join Code so members can join; it is dropped when the game ends or the GM's app stops checking in.

This data is stored with our hosting provider Supabase, which processes it for us in East US (North Virginia), United States (us-east-1). It is sent over encrypted connections. Our provider keeps short-lived technical logs (such as IP addresses) for security and troubleshooting. The public Find Campaigns page on this website reads only the public listing views; it never receives invite codes or campaign files.

The app keeps a sign-in token on your device so you stay signed in. Signing out or deleting the account removes that token. Campaigns, maps, characters, notes and saves stay on the devices where they were created. Deleting an account does not uninstall the app and does not erase those local files, including a character copied into another GM's game.

Deleting the account in Settings → Account → Delete Account removes the account, profile, campaign listings, memberships, join requests, blocks and in-app notices from our servers. A group you own passes to its longest-standing moderator, or, if it has no moderator, to its longest-standing other member, who becomes the owner. A group with nobody else in it is deleted. Reports you made are kept without your name so we can finish reviewing them. If you cannot sign in, use the account deletion page.

6. Information Frozen Dungeon Collects

Frozen Dungeon does not keep your campaigns, maps, characters or session files. The app has no analytics, no crash reporting and no telemetry. We never receive LAN traffic. Internet Multiplayer messages pass through our relay in memory without being stored, and our web server's access log keeps connecting IP addresses for 14 days, as described in Internet Multiplayer.

If you use the optional online community (see Online Community), we keep the account and listing data described there, hosted for us by Supabase. If you do not create an account, we keep no community data about you.

If you contact us (see Contact), we will receive whatever you choose to send us, such as your email address, forum username and message, and use it only to respond.

Store platforms may give us aggregated reports, as described below.

7. Purchases (Full Toolkit and Prison Escape)

Joining games, playing, My Characters and Tabletop Mode are free. The app offers two optional one-time purchases, each sold by the store you got the app from:

• The Full Toolkit: creating and running campaigns, the Map Maker, the editors and hosting.
• Prison Escape: the "Escape from Greystone Keep" adventure for the GM to run. Running it also needs the Full Toolkit; players who join the game need neither.

Each store unlocks only its own purchases: buying on Google Play does not unlock the Steam version, and the reverse.

Google Play (Android)

• The Full Toolkit and Prison Escape are sold as in-app products through Google Play Billing. Google processes the payment and your Google account under the Google Privacy Policy.
• Game Master asks the Google Play Store app on your device for each product's price, opens Google Play's own purchase screen when you tap Unlock Full Toolkit or Buy Prison Escape, and asks Google Play whether your account owns them when the app starts, when you return to it, and when you tap Restore Purchases. It confirms (acknowledges) completed purchases with Google Play as Google requires.
• Game Master does not store purchase records, receipts, order numbers or payment details. It asks Google Play each time.
• Frozen Dungeon receives no payment details or purchase data from the app. Google Play may show us the order in our Google Play Console (for example, that a purchase was made or refunded), as it does for any Google Play sale.
• Refunds are handled through Google Play. If a purchase is refunded, the Full Toolkit or Prison Escape locks again the next time the app checks; your campaigns and other data stay on your device.

Steam (Windows)

• The Full Toolkit and Prison Escape are each sold as a Steam DLC. Valve processes the payment and your Steam account under the Valve Privacy Policy.
• The Steam version of Game Master uses Valve's Steamworks library only to ask the Steam client running on your PC whether your account owns these DLCs, and to open a DLC's Steam store page when you tap Unlock Full Toolkit or Buy Prison Escape. Game Master itself sends nothing to Valve or to Frozen Dungeon for this; the Steam client communicates with Valve as it normally does.
• Game Master does not store purchase records and does not read your Steam profile, friends or other account information.

8. Third-Party Services

Game Master does not include any third-party SDKs for advertising, analytics, crash reporting, social login or cloud storage. It uses the open-source Flutter framework and standard platform features (for example the Android photo picker), which run on your device. The only store libraries it uses are Google Play Billing on Android and Valve's Steamworks library on the Steam version, both solely for the Full Toolkit and Prison Escape purchases (see Purchases). Optional community accounts are hosted by Supabase, as described in Online Community.

Steam (Windows)

If you get Game Master through Steam, Valve operates the Steam client, your Steam account, purchases, downloads and updates. Steam handles that information under the Valve Privacy Policy. Game Master uses Steamworks only to check whether you own the Full Toolkit and Prison Escape DLCs (see Purchases). It does not use Steam Cloud, achievements, Steam networking or Steam friends, and it does not read your Steam account information. Valve may provide us with aggregated sales and usage statistics, which do not identify you.

Google Play (Android)

If you get Game Master through Google Play, Google operates the Play Store, your Google account, purchases, downloads and updates under the Google Privacy Policy. Depending on your device settings, Google may share aggregated statistics and anonymous crash or performance reports with developers through the Google Play Console. In-app purchases of the Full Toolkit and Prison Escape use Google Play Billing (see Purchases). Frozen Dungeon does not receive your payment details.

Supabase (optional online community)

If you create a Game Master account, Frozen Dungeon uses Supabase to host authentication and community data in East US (North Virginia), United States (us-east-1), as described in Online Community. Supabase processes that data for us. The app talks to it over HTTPS. We do not put a secret server key in the app.

9. Advertising and Tracking

Game Master contains no advertising and no advertising SDKs. It does not use your advertising ID, does not track you across apps or websites, does not build profiles, and does not sell or share personal information.

10. Data Storage and Retention

• Data on your device: kept until you delete it in the app, clear the app's data, or uninstall the app. Game Master does not upload it anywhere.
• Data received during multiplayer: the host saves the session (what each character did, the messages and the Session Log) until the GM deletes the campaign. Players' names and player IDs are held by the host in memory only and are forgotten when it stops hosting. A player's device discards the game information it received when the player leaves the session or closes the app; the copies of pictures and sounds it was sent stay in the app's storage until the app's data is cleared or the app is uninstalled.
• Internet Multiplayer relay: nothing is stored. Session data is held in memory only while the session is open. Web server access logs (including IP addresses) are deleted after 14 days.
• Online community: the account, profile, listings, memberships, groups, blocks, and pending or accepted join requests stay until you delete them or delete the account. Declined and withdrawn join requests are removed about 90 days after they are decided. Read in-app notices are removed after 30 days, and every notice is removed 90 days after it was created. A live game's Join Code stops being available to members when the game ends, or about three minutes after the GM's app stops checking in. The ended live-game record is removed after 7 days. Failed Campaign Code and Group Code guesses are removed after one day. Reports are kept so we can finish reviewing them. Deleting your account removes your name from reports you filed.
• Data collected by Frozen Dungeon: none through the app beyond Internet Multiplayer access logs, unless you create an optional community account. Messages you send us through the forum are kept as long as needed to respond or as the forum keeps posts.
• Third-party platforms: Steam and Google Play keep information under their own retention policies.

11. Data Deletion

• Inside the app: delete characters, monsters, maps, items, encounters and imported images from their screens. Deleting a campaign also deletes its sessions and Session Logs.
• All app data on Android: Settings › Apps › Game Master › Storage › Clear storage, or uninstall the app.
• All app data on Windows: uninstall the app and delete the folder %APPDATA%\com.gamemaster\game_master.
• Multiplayer data on other devices: the host forgets players' names and IDs when it stops hosting. Your character's actions are part of the GM's saved session; ask the GM to delete the campaign on their device if you want them removed. Players' devices don't save game information they receive, apart from copies of pictures and sounds, which clearing the app's data removes.
• Game Master account: Settings → Account → Delete Account in the app, or email us from the account deletion page if you cannot sign in. This removes the account and the community data described in Online Community, including handing on or deleting groups you own. It never deletes files on your device or on anyone else's.
• Data held by Frozen Dungeon: relay sessions vanish when they end, and web server access logs delete themselves after 14 days. Community account data is held as described above until you delete the account. To remove something you posted on our forum, contact us as described below.
• Steam or Google Play data: use the tools Valve and Google provide for your account.

Uninstalling the app removes your campaigns permanently unless you have a backup. Game Master has no cloud saves.

12. Security

Your Game Master data lives in the app's private storage on your device, protected by your operating system. Keep your device secure with a screen lock and up-to-date software. The app does not store your data with us, which limits where it can be exposed.

In multiplayer, the host removes hidden information before sending game state to each player. On a local network you can require a session password; LAN traffic is not encrypted (see section 4), so play on networks you trust. Internet Multiplayer connections are encrypted with TLS, Join Codes are random and expire when the session ends, repeated wrong codes are limited, and the GM can remove players. No method of storing or sending data is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy / Intended Audience

Game Master is a tabletop role-playing game tool intended for the audience and age rating shown on its Steam and Google Play store pages. Frozen Dungeon does not knowingly collect personal information from children. Do not create a Game Master account for a child. If you believe a child has created an account or sent us personal information through our forum, contact us and we will delete it.

14. Changes to This Policy

We will update this policy when Game Master's features or data practices change. If we add features that handle data differently, such as cloud saves, analytics, crash reporting or checking purchases on our own server, we will update this policy and the store disclosures before those features are released, and describe what is collected, why, who receives it and how to delete it.

The current version is always at this address. The effective date at the top shows when it last changed.

15. Contact

Game Master is developed and published by Frozen Dungeon Studios.

For privacy questions or account-deletion requests, email game-master-no-reply@netcrawled.com with the subject Game Master account deletion. If you cannot sign in, follow the account deletion instructions. We verify ownership before deleting an account. Do not send passwords or sign-in codes.