Last updated: July 3, 2026
TableLock is a session-scheduling tool for tabletop groups. This policy explains, in plain language, what we collect and what we do with it. The short version: we collect the minimum needed to schedule your games, we don't run ads, and we never sell your data.
From Game Masters with accounts: your email address, a hashed password (we can't see it), and — if you sign in with Google or Discord — the email those services share with us.
From campaigns: the campaign name, player first names (or whatever names the GM enters), proposed session dates, and each player's availability responses.
From players: nothing else. Players don't create accounts, and we don't collect their emails, phone numbers, or anything beyond the name their GM entered and the dates they tap.
To run the scheduling service: showing availability to your group, confirming sessions, and tracking attendance streaks. If we add email features (like password resets or session reminders), emails are used only for those messages — no marketing without explicit opt-in.
Campaigns without an account (guest campaigns) are automatically deleted after 90 days of inactivity. Campaigns saved to a GM account are kept until the GM deletes them or the account. Deleting a campaign removes all its players, dates, and responses.
Your group's data is visible only through your group's secret links. Access without a valid link is rejected by the database itself. We use Supabase (database and authentication) and Vercel (hosting) to run the service; they process data on our behalf under their own privacy terms.
We use Umami, a privacy-friendly analytics service, to understand aggregate usage — things like how many people visit a page or create a campaign. Umami is cookieless, collects no personal data, and does not track you across other websites. There's nothing to consent to and no banner to click.
No advertising. No selling or sharing data with data brokers. No tracking across other websites. No cookies for tracking.
GMs can delete any campaign from the dashboard (removing all its data) and can request account deletion by contacting us. Players who want their data removed can ask their GM to remove them from the campaign, or contact us directly.
Questions or requests: support@tablelock.app
If this policy changes materially, we'll note it here with a new date. TableLock is currently in beta; expect this document to be refined as the service grows.