Privacy notice
Last updated 27 September 2026
Greatest Studios runs Greatest Dungeons and this character site. We follow Singapore's Personal Data Protection Act 2012 (PDPA). This notice explains what we collect and why, in plain language.
What we collect
- Your account: display name, email address and password. The password is scrambled (hashed), so even we can't read it.
- Your characters: everything you enter when building them, plus their items, levels and notes.
- Session records: which sessions your characters played, and short notes your DM writes about them (for example "saved the ferryman").
- Contact messages: your name, email, organisation (if given) and message when you use the contact form.
- Security records: the internet address of failed log-in attempts, kept for one day to stop password guessing.
Why we collect it
Only to run Greatest Dungeons and to answer messages you send us: to let you build and keep your characters, to let our Dungeon Masters check characters and track their progress, and to remember your story between sessions. We don't sell your data, don't use it for advertising, and won't email you marketing. If we ever want to, we'll ask first.
Who can see it
You, and Greatest Dungeons' Dungeon Masters and organisers. Your character's name, and highlight tags your DM awards (like "Brave"), may appear on the public Legend Wall on our home page and in session recaps. Your real name never does. Your email is never shown to other players.
Where it's stored
On our web host, Hostinger. Their servers may be outside Singapore. We've chosen a provider with its own data protection commitments to keep your data to a standard comparable to the PDPA.
How long we keep it
While your account is active. If you haven't logged in for 24 months, we delete your account and characters. You can delete everything yourself at any time from your account page.
Your choices
- See or download your data: Account → Download my data.
- Correct it: edit your name and characters, or ask a DM.
- Delete it: Account → Delete my account.
- Withdraw consent: delete your account, or email us.
Age
Accounts are for people aged 13 and over. Younger players are very welcome at the table with a ready-made character; they don't need an account.
Cookies
We use one essential cookie to keep you logged in. The site loads fonts from Google Fonts, which means Google receives your device's internet address when a page loads.
If something goes wrong
If a data breach is likely to harm you, we will tell you and the Personal Data Protection Commission as the law requires.
Contact our Data Protection Officer
Email jowell@greatestjchan.com with any question or request about your data.