Privacy notice

Last updated: 8 September 2026

GMTK — Peril at Mooncastle is an early access tabletop gaming application operated by Leo Baldock. Contact leojdbaldock@gmail.com about your data or this notice.

Account and game information

We process your account identifier, name, email, profile image and organization membership to sign you in and control access. When you choose Google sign-in, Google shares your basic profile and email through our authentication provider, Clerk. We request only basic sign-in scopes, not access to Gmail, Drive or Calendar.

We store the campaign and session information you provide, including uploaded images, maps, tokens, drawings, encounter outcomes and notes. Your group can access content according to its organization, campaign and game roles. Game masters control which maps and game information are visible to players.

Calls, recordings and generated content

Where calls are enabled, Daily processes the audio and video you choose to send. Joining a session call can start server-side audio recording automatically. Tell everyone before joining a recorded session and use the microphone, camera and leave controls to manage your participation.

Recordings are imported into GMTK storage. Daily also processes recordings to produce transcripts and summaries, which are retained with the session and made available through the game master's review tools. Generated transcripts and summaries can contain mistakes; review them before relying on or sharing them.

Service providers and security

Clerk provides authentication and organization membership; Railway hosts the application, database and object storage; Cloudflare provides domain and network services; Daily provides calls and recording processing. Where enabled, Sentry receives diagnostic information to help investigate errors. These providers may process information outside your country under their own service and privacy terms.

We also process technical information, such as request and error logs, to operate and protect GMTK. Cookies and browser storage support sign-in, language and display preferences. Keep your sign-in credentials and private session links secure.

Retention and your choices

GMTK currently retains account and game information to provide the service. Archiving a campaign does not permanently erase its files, recordings, transcripts or summaries. Provider copies and backups may have separate retention periods. There is currently no automatic retention deadline for session artifacts.

You can contact Leo to request access, correction or deletion of your personal information, or to ask about a recording. Please identify the account and campaign involved without sending passwords or tokens. You can also remove GMTK's Google connection in your Google account settings; this does not by itself delete game content already stored in GMTK.

We use account and game information to provide the functions you request, and operational information to maintain and secure the service. If applicable law gives you additional rights, including objection, restriction or a complaint to a data protection authority, you may exercise them. We will update this notice when these practices change.