Privacy Policy

This policy applies to offbook.games, Offbook Games Discord applications and Activities, the Offbook desktop game builds and the connection relay that supports them, and the related multiplayer game services operated by Offbook LLC, a Texas limited liability company.

This Privacy Policy explains how Offbook LLC, doing business as Offbook Games ("Offbook," "we," "us," or "our"), collects, uses, discloses, and retains personal data when you use the services described above (collectively, the "Services").

1. The two ways you can play, and why it changes this policy

Offbook titles are distributed in two shapes, and they have genuinely different data stories. Almost everything below depends on which one you are using, so it is worth reading this section first.

Playing in Discord

The Discord Activity runs on servers Offbook operates. We authenticate you, seat you, run the game, and store the record of it. For this shape, Offbook is the controller of the personal data described in this policy.

Playing the desktop build

The desktop build is not a client connecting to our game servers — it is the game server. One player starts a session on their own computer, and that computer runs the world and stores it. Other players join over a link. Offbook operates a relay: a deliberately game-ignorant byte pipe that carries connections between joining players and the host's machine. It contains no game code, no story, and no notion of campaigns, characters, or entitlements, and it cannot interpret what passes through it.

This means the record of a desktop game — who played, what they typed, the saved world — is stored on the host player's computer, not ours. Offbook receives no copy of it and has no ability to read, export, correct, or delete it. For a desktop session, Offbook is the controller only of the limited connection data described in § 2.3; the person hosting the session controls everything else.

2. Information we collect

We collect only what is reasonably needed for the purposes described in this policy.

2.1 Discord account and Activity data

When you authorize an Offbook Discord application, we request Discord'sidentify permission. Discord provides your Discord user ID, your username or global display name, and your avatar if you have one. We do not request your email address from Discord, and we do not access your private messages, password, or friends list.

To launch and operate multiplayer games in Discord, we may also process the relevant application ID, Activity instance ID, server (guild) ID, channel ID, installation context, entitlement or subscription status, and your interactions with the Offbook application. These identifiers place players in the correct game and keep one Discord context separate from another.

2.2 Gameplay and campaign data in Discord-hosted games

For games we host, we process what is needed to run a multiplayer interactive-fiction campaign: player and character names, roles, game commands and choices, game responses, campaign and session identifiers, roster and participation state, timestamps, preferences, game-clock data, checkpoints, and event logs. The event log records turns so a live game can be reconstructed; the checkpoint records the durable state needed to save and resume it.

If transcript recording is available for your account and enabled for a session, we also store transcript entries associated with your account and campaign. A transcript is a readable record of gameplay, separate from the event log used to operate the game.

2.3 Desktop sessions: what actually reaches us

The relay is the only Offbook system involved in a desktop session, and it handles very little:

• The host's Steam identity. To open a session, the hosting player's game presents a Steam session ticket. We verify it with Steam's publisher API, which returns a Steam ID confirming the ticket is genuine and belongs to someone entitled to the application. We retain that Steam ID for the life of the session so a host who reconnects can reclaim their own room and nobody else can.
• A room token. The relay mints a high-entropy random token that forms the join link. It is not derived from anything about you, it is held in memory rather than written to disk, it is scoped to a single run of the host's application, and the host can rotate it at any time to invalidate a link that reached the wrong people. The relay never writes the raw link to its logs.
• Opaque traffic. Bounded HTTP and WebSocket messages passed between joining players and the host, plus ordinary connection metadata such as IP address, timestamps, size and rate counters. The relay does not parse, store, or retain the contents of gameplay traffic.

Joining players do not need an Offbook account, a Discord account, or a Steam account.Possession of the link is what admits you. We do not ask a joining player to identify themselves and we do not create a record of them.

2.4 Desktop sessions: what stays on the host's computer

The display names, local profile PINs, saved worlds, checkpoints, event logs, and preferences created during a desktop session are written to local database files in the host machine's application data directory. They are never transmitted to Offbook. If you played on someone else's machine and want that record changed or removed, ask the person who hosted it — we cannot action a request for data we have never held. See § 10.

2.5 Purchases

If you buy a paid offering, we may receive and store the store it came from, the product identifier, a transaction or entitlement reference, and the service-period dates needed to provide, reconcile, and support the purchase. Discord handles purchases made through Discord's store, and Steam handles purchases of the desktop build through the Steam client you are running. Offbook never receives or stores your payment-card number.

2.6 Information you provide directly

We collect an email address if you join a waitlist or ask for release updates. If you contact us, we receive whatever is in your message and any details you choose to provide for support, billing, safety, or privacy requests.

2.7 Technical and operational data

Our systems and service providers may automatically process IP address, browser and device type, operating system, referring or requested URL, timestamps, request and response metadata, session and authentication information, crash and diagnostic data, and security events. The website uses local storage for essential preferences such as your selected light or dark theme. We do not use any of this to sell personal data or to serve cross-context behavioral advertising, and we do not run advertising or analytics trackers that follow you to other sites.

3. Where information comes from

Directly from you; automatically from your use of the Services; from Discord when you authorize or interact with our application; from Steam when it confirms a host's session ticket; from payment providers when you make a purchase; and from other participants when a shared campaign we host records multiplayer activity involving you.

4. How we use information

• authenticate you and maintain secure sessions;
• create lobbies, seat players, run multiplayer games, and route each player to the correct campaign;
• carry desktop connections between joining players and a host, and keep one room separate from another;
• record checkpoints and event logs so games we host can be saved, resumed, diagnosed, and reconstructed;
• produce, store, display, export, and delete transcripts where that feature is available and enabled;
• provide purchases, entitlements, billing support, and fraud prevention;
• operate waitlists and send updates you asked for;
• provide support, enforce our Terms, investigate abuse, maintain security, and prevent misuse;
• monitor reliability and understand how the Services perform, using pseudonymous, aggregated, or de-identified data where practical; and
• comply with law, enforce legal rights, and protect users, Offbook, and others.

5. Legal bases for processing

Where a law requires us to identify a legal basis, we rely on one or more of: performance of our agreement with you; our legitimate interests in operating, securing, supporting, and improving the Services; your consent, such as for requested updates or optional transcript recording where consent is the applicable basis; and compliance with legal obligations. You may withdraw consent at any time. Withdrawal does not affect processing already completed and may prevent us from providing the feature that needs the information.

6. How we disclose information

We do not sell personal data and we do not disclose it for cross-context behavioral advertising. We disclose only what is reasonably necessary, in these circumstances:

• Service providers. Vendors that provide hosting, databases, storage, monitoring, security, email delivery, and customer support, under appropriate contractual restrictions.
• Discord, Steam, and payment providers. They receive what is needed to authorize the application, verify a host, operate platform features, process purchases, and resolve entitlements or disputes. Their own privacy policies govern their independent processing.
• Other players and shared spaces. Your display name, avatar, selected character, game actions, and related gameplay may be visible to people sharing your lobby, campaign, Discord server, or channel. In a desktop session, they are also visible to the host and stored on the host's computer.
• Legal and safety disclosures. When reasonably necessary to comply with law or legal process; protect rights, safety, and security; investigate fraud or abuse; or enforce our agreements.
• Business changes. As part of due diligence or a merger, financing, reorganization, acquisition, bankruptcy, or sale of assets, subject to appropriate confidentiality and applicable law.
• At your direction. When you ask us to or give us permission.

7. Multiplayer games and transcripts

Offbook is a multiplayer service. Content you enter during a shared game may be shown to other participants and incorporated into campaign state, event logs, and transcripts. Please do not enter information you would not want other participants — or, on desktop, the host — to see.

For games we host, each account controls its own stored transcript copy. Deleting your transcript does not delete another participant's separately stored transcript, and it does not by itself delete the underlying checkpoint or event log required to operate or reconstruct the shared campaign. A later recording session may create new entries after a deletion.

8. Retention

We keep personal data only as long as reasonably necessary for the purposes in this policy, including providing the Services, preserving a campaign that can still be resumed, maintaining security and integrity, resolving disputes, and meeting legal obligations.

• Transcripts: transcript entries are scheduled for deletion as a campaign group once the newest entry for that account and campaign is more than 12 months old. You may delete yours sooner through the available controls or a support request. Backup or maintenance processing may delay the expiry of every copy by a short period.
• Campaign records we host: checkpoints and event logs may be kept while a campaign remains resumable, or while reasonably needed for service integrity, support, safety, or legal purposes. If a deletion request affects a shared campaign, we may retain or de-identify limited records needed to preserve the campaign for other participants.
• Relay data: room registrations are held in memory for the life of the session and are lost on restart. Nothing about a desktop world is retained after its session ends.
• Discord API data: retained only while necessary for the application's stated functionality or another lawful reason, then deleted or de-identified.
• Purchases and communications: billing, transaction, support, and legal records are kept for the period reasonably needed to administer the transaction, meet accounting or legal obligations, prevent fraud, and resolve disputes. Waitlist information is kept until you withdraw your request or it is no longer needed.

9. Your choices and controls

• Use the available transcript settings and controls to manage optional recording and to read, download, export, or delete transcripts you own.
• Remove an Offbook application from a Discord server or revoke its authorization through Discord, subject to permissions controlled by the server owner or Discord.
• On the desktop build, a host can rotate a room link at any time to cut off anyone holding the old one, and can delete the local game data on their own machine.
• Ask us to remove you from a waitlist or stop requested email updates.
• Contact us about account deletion, data export, correction, or another privacy request.

10. Privacy rights

Depending on where you live and subject to applicable exceptions, you may have the right to confirm whether we process your personal data; access, correct, or delete it; receive a portable copy; restrict or object to processing; withdraw consent; and opt out of the sale of personal data, targeted advertising, or certain profiling. We do not sell personal data, use it for targeted advertising, or make decisions based solely on automated processing that produce legal or similarly significant effects.

One limit worth stating plainly: we can only act on data we actually hold. The record of a desktop game lives on the host player's computer and never reaches us, so we cannot access, export, correct, or delete it, and we cannot confirm what it contains. Direct those requests to the person who hosted the session.

Submit a request to support@offbook.gamesfrom the email associated with your request, or identify the relevant Discord account in a way we can verify. We may ask for information reasonably necessary to confirm your identity and authority. You may use an authorized agent where the law permits. We will not discriminate against you for exercising a privacy right.

If we deny a request, you may appeal by emailingsupport@offbook.games with the subject "Privacy Appeal" and explaining your concern. You may also complain to the privacy regulator or attorney general where you live, including theTexas Attorney General.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. No online service or storage system can be guaranteed completely secure. You are responsible for protecting your Discord and Steam accounts, your devices, and your authentication credentials, and should contact us promptly if you suspect unauthorized use. Because a desktop join link is the only thing needed to enter a session, treat it as a credential and share it only with people you intend to play with.

12. Children

The Services are not directed to children under 13, or to anyone below the minimum age required by the platform they are playing on in their country. We do not knowingly collect personal data from a child who is not permitted to use the Services. If you believe a child has provided personal data contrary to this section, contact us so we can investigate and delete it as appropriate.

13. International use

Offbook is based in the United States, and personal data may be processed in the United States and other countries where our service providers operate. Those countries may have different data-protection laws. Where required, we use lawful transfer mechanisms and safeguards.

14. Changes to this policy

We may update this policy as the Services or the law change. We will post the revised policy here and update the date above. If a change materially affects how we use personal data, we will provide additional notice when required by law.

15. Contact us