Privacy

One page, because there is not much to say.

This website

• No CartoVox cookies. CartoVox's own pages and scripts set no cookies. The homepage includes a third-party Discord widget, described below.
• No analytics. No page-view counter, no tag manager, no pixel, no session recorder, no A/B testing.
• Self-hosted site assets. Our fonts, scripts, stylesheets and images are served from this domain. The homepage's live Discord widget connects to Discord when it loads.
• The Delta service shares this domain. The addresses under /v1/ answer the CartoVox application, not your browser: no page on this site calls them, so reading the site sends nothing to them.
• No account, no form. There is nothing here to sign up for and nowhere to type your email address, so none is collected.
• Server logs. The site is static and served by Cloudflare, which sees the ordinary request information any web server sees — your IP address, the page requested, your browser's user-agent string — and uses it to serve and protect the site. That is Cloudflare's processing, not ours, and no one here builds a profile from it or joins it to anything else.

The Discord widget

The homepage's Community section embeds a live server widget hosted by Discord. When it loads, your browser connects directly to Discord, which receives your IP address and browser request information. The widget loads lazily as you approach that section. Its content, cookies and storage are controlled by Discord and your browser's settings; see Discord's privacy policy. The embed sends no page referrer. A separate Join Discord link is available if the widget cannot load.

Discord links

Request an invite opens Discord, which is a different company with its own terms and its own data practices. We open it in a new tab so it is obvious you have left. The invite link carries an invite code, and your browser may send this site's origin as a referrer. What happens once you are on the server is between you and Discord.

The application (Delta builds)

• Your work is stored on your computer. Worlds, maps, lore, names, campaigns and manuscripts are files on your own disk. CartoVox does not upload them to the project owner or a cloud account. There is no account.
• Optional tabletop sharing. In Delta V9, choosing Invite players and then Start inviting at the GM desk shares that table's player view with joined browsers on your local network. It includes the player map with fog applied and the permitted player interactions, such as dice, pings and assigned-token moves. GM notes, private rolls and unrevealed tokens stay out of that view. Nothing is shared until you start the invitation; Revoke or leaving the GM desk ends it. This is local-network sharing, not internet hosting. How invitations work.
• Unlocking registers your computer once. Delta is invite-only. The first time you unlock a Delta build, it sends the Delta service a one-way digest of your access code (never the code itself), a random identifier made for that installation, and the facts listed under sessions below. The service answers whether the code is valid and whether it has been withdrawn. A code can unlock up to three computers.
• The usage report. Taking part in Delta includes a usage report, tied to your access code and installation identifier, sent in the background:
  • sessions — when the app starts and stops, how long it was open, its version, your operating system and its version, processor architecture and cores, installed memory, window size, your screen's size and pixel density, and the name your system gives its graphics processor;
  • feature use — which tabs, tools, buttons, settings menus and exports you use and how often, by the app's own names for them, and the kind of work you start (a generation or a rebuild, with its preset);
  • errors — error messages and stack traces from CartoVox's own code, with your home folder, your user name and every file path removed;
  • performance — how long generations, rebuilds and renders take, how they ended, and peak memory.
  It never contains your worlds, maps, lore, manuscripts, file names or anything you type. While you are offline it waits on your computer; a Delta build that has not reached the service for 21 days asks you to connect before it opens.
• Why, where and how long. The report is used only to find defects, see which parts of CartoVox are used, and improve it before release. It is stored in a Cloudflare D1 database run by the project owner, kept until 90 days after the Delta programme ends, and not sold or shared. You can ask on the Discord server to see or delete the report linked to your code.
• No update check. CartoVox never asks whether a newer version exists. The dashboard runs locally; the Delta usage report and any tabletop invitation you explicitly start are described above. New builds are announced on the Discord server, and installing one is your decision.
• Diagnostics are yours to send. A diagnostics bundle is assembled locally from build and system information plus redacted logs, and is never uploaded on its own. Read it before you share it.
• What you make is yours. The licence claims no ownership of your worlds or your writing, and you may publish and sell them. See the licence, sections 6 and 7.

If this changes

If this site gains analytics, a form or another third-party embed, this page will say so before it ships, and any affected claims on the site will change with it. Questions go to the Discord server.