Effective date: 2026-08-21
1. Who is responsible for your data?
Nine Tails Dev is the controller of personal data processed in connection with Sheetbound. Questions and requests concerning privacy can be sent to marcin.boberek@gmail.com.
2. Scope of this policy
This policy explains how Sheetbound, its connected Nerd Universal Apps account and online services process information. Features that work entirely offline do not send their locally stored content to us. The exact features used, permissions granted and privacy choices determine which categories below apply.
3. Data we may process
- Account and installation data: account identifier, e-mail address when an account is created, installation identifier, authentication tokens and account status.
- App content and sync data: records you choose to save or synchronise, such as presets, characters, campaign data, game progress, preferences and shared-room or invitation data.
- Technical and security data: app version, operating system, device category, IP address, request time, diagnostic information, security events and rate-limit records.
- Usage and telemetry: feature events and performance information where telemetry is enabled. We seek to minimise this data and do not use content fields as analytics labels.
- Purchases: product identifier, purchase token and entitlement status supplied by the app store. We do not receive full payment-card details.
- AI and connected services: prompts or selected content sent only when you deliberately use a feature that requires a remote service.
4. Why and on what legal basis?
We process data to provide requested features, accounts, synchronisation, multiplayer or shared spaces, purchases and support (performance of a contract); to secure services, prevent abuse, diagnose failures and maintain the product (legitimate interests); to meet accounting, consumer-protection or law-enforcement obligations (legal obligation); and, where required, for optional analytics, advertising or other non-essential processing (consent). Consent can be withdrawn without affecting earlier lawful processing.
5. Sharing and processors
Data may be handled by providers that host our infrastructure, deliver app-store purchases, crash reporting, analytics, notifications or optional AI features. They receive only the information needed for their service and act under applicable agreements. We do not sell personal data. Information may also be disclosed when required by law or necessary to establish, exercise or defend legal claims.
6. International transfers
Some providers may process data outside the European Economic Area. Where this happens, we use an applicable legal transfer mechanism, such as an adequacy decision or standard contractual clauses, and assess appropriate safeguards.
7. Retention
We retain account and synchronised content while it is needed to provide the service or until deletion is requested, subject to backup cycles and legal obligations. Technical logs, telemetry, invitation data and temporary records are kept only for configured limited periods. Purchase and accounting records may be retained for the period required by law. Local app data remains on the device until it is removed through the app or operating system.
8. Security
We use measures appropriate to the risk, including encrypted transport, access controls, restricted administrative access, secret protection, backups and monitoring. No system is completely immune from risk, so please protect your device and account credentials.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent. You may also complain to your competent data-protection authority. To exercise a right, contact marcin.boberek@gmail.com. We may need to verify the request before acting.
10. Children
Sheetbound is not intended to collect personal data from children without the authorisation required by applicable law. A parent or guardian who believes that a child provided data without proper authorisation should contact us.
11. Changes
We may update this policy when the app, connected services or legal requirements change. The current version and its effective date are always published at this address.