Rekijan Apps
← Rekijan Combat Tracker

Rekijan Combat Tracker privacy policy

Last updated: 1 November 2026

1. Who is responsible

Rekijan, trading as Rekijan Apps.
Contact: rekijan.apps@gmail.com

2. Data that stays on your device

Your parties, characters, player characters, conditions, spells, reactions, round counters and settings are stored on your device only. They are not uploaded unless you use Table sync (see 3).

3. Data stored online (Table sync)

Table sync lets a GM and the players at the same table share characters. It is optional and only starts when you start or join a session. Then the app signs you in anonymously through Firebase Authentication. This creates a random ID; no name, e-mail address or phone number is needed. Firebase Authentication also processes your IP address to prevent abuse.

To protect the online service against abuse, the app uses Firebase App Check with Google Play Integrity. Google then receives information to check that a request comes from the genuine app installed from Google Play, such as the app's package name, version and signing certificate, and device attestation information.

When you use a session, the following is stored online:

  • When a GM starts a session: the session code, the creation time, the GM's anonymous ID and an expiry time.
  • When a player joins or sends their character: the character's name, initiative and initiative bonus, hit points, fast healing and regeneration, hero points, dying, wounded and doomed values with max dying and recovery DC, AC, saves, skills, attack routine, notes, reactions (including custom reactions) and conditions, when it was sent, and an expiry time. A condition from a spell only carries the name of the character who cast it. A player can also ask the GM to cast a spell (its name, duration, an optional condition with a value, and a free-text note about the targets) or to end one of their spells.
  • The GM's version of each player's character, with the same fields, so the player's app can follow the GM's changes, such as hit points and conditions. It also lists the spells that character has going (name, rounds left, number of targets and the conditions they added, never who the targets are) and the GM's answers to the player's spell requests.

The GM of a session can read the characters sent to that session. A player can only read their own character, not those of other players. The session code works like a password: share it only with your players.

This data is stored with Google (Firebase Firestore) on servers in the European Union. Google may process technical data to run these services, such as IP addresses and basic device information (for example the device model, the operating system version and how the app was installed).

4. Advertising

The free version shows a small banner ad, provided by Google AdMob. To show ads, measure them and prevent ad fraud, Google receives from your device:

  • your IP address, which can be used to estimate your general location;
  • how you interact with the app and the ads, such as app launches, taps and ad views;
  • diagnostic information, such as app launch time and performance;
  • device identifiers, such as the Android advertising ID and the app set ID.

If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent through Google's consent form before ads that use your data are shown. Whether ads are personalised depends on the choices you make there. If you live in a US state with its own privacy law, you can opt out of the sale or sharing of your data for personalised ads. You can change your choices at any time via Privacy Settings in the app menu. You can also reset or delete your advertising ID in your Android settings.

Google handles this data under its own privacy policy. See how Google uses information from apps that use its services.

You can remove the ads permanently with a one-time purchase (see 8). After that, no ads are loaded.

5. Why

To make Table sync work, to show ads that pay for the app, and to protect the online service against abuse. Legal basis: providing the service you ask for; your consent, for ads that use your data; and my legitimate interest in keeping the service secure.

6. How long

When the GM stops a session, the session and all characters in it are deleted right away. When a player leaves a session, the character they sent is deleted; the GM's version of it stays in the session until the GM removes that character or stops the session. When the GM removes or unlinks a player's character, the character that player sent is deleted.

A session can be used until 30 days after the GM last used it; the GM's app renews this each time it opens the session. A session that has expired can no longer be joined or changed. It is deleted when the same GM next starts a session. A session that its GM never stops, and whose GM never starts a new one, stays stored until you ask me to delete it (see 9). Until then, only the GM and each player for their own character can read it.

The anonymous ID itself stays until it is deleted. You can ask me to delete it (see 9). Google keeps the information it receives through Play Integrity only for a fixed retention period. Google keeps advertising data according to its own policy (see 4). Data stored on your device stays until you remove it or uninstall the app. Uninstalling does not delete data already sent to a session.

7. Sharing

I do not sell your data. Google is the only other party that handles it: as the hosting provider for sessions, and as the ad provider (see 4). The app itself has no separate analytics and no crash reporting.

8. Purchases and tips

Payments, including tips, the purchase to remove ads and party packs (room for more saved parties), are handled by Google Play. I do not receive your payment details. The app checks with Google Play which of these you bought, so they keep working after a reinstall.

9. Your rights and deleting your data

To delete the Table sync data of Rekijan Combat Tracker:

  • In the app: a GM taps Stop session, which deletes the session and all characters in it. A player taps Leave, which deletes the character they sent.
  • By e-mail: send the session code and the character name to rekijan.apps@gmail.com, and I will delete the session or character and the anonymous ID that goes with it.

You can also ask me to show or correct your data, or object to its use, at the same address. Because there are no accounts, please include the session code and the character name so I can find it. For advertising data, you can withdraw your consent in the app (see 4). You can also file a complaint with the Autoriteit Persoonsgegevens.

10. Changes

If this policy changes, the date above changes with it.

Looking for the policy of my other apps? See the general Rekijan Apps privacy policy.