Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how Lit Little Laboratories LLC ("we", "us", "our"), a Missouri limited liability company, collects and uses information when you use NerdLab (the "Service"). We aim to collect only what the Service needs to work.

1. Information We Collect

Account information — the email address and display name you provide, and a password that we store only in hashed (irreversible) form.
Content you create — campaigns, characters, maps and drawings, initiative and battle data, notes, creature bookmarks, and any files you upload (such as images or PDFs). This is stored so we can provide the Service and sync it to the campaign members you share with.
Local device data — your sign-in token is stored locally in your browser to keep you logged in.
Technical/log data — like most web services, our servers automatically record standard request information such as IP address, browser type, and timestamps. We use this to operate, secure, and troubleshoot the Service.
Payment information — if you purchase a subscription, our third-party payment processor collects and processes your payment details. We do not receive or store full card numbers.

2. How We Use Information

To provide, maintain, and sync the Service and your content.
To authenticate you and keep your account secure.
To send transactional emails you request or that are necessary to the Service, such as password resets and email confirmations.
To operate paid subscriptions, if you choose to purchase one.
To detect, prevent, and address abuse, security issues, and technical problems.

We do not sell your personal information, and we do not use your campaign content for advertising.

3. Service Providers

We share information only with providers that help us run the Service, under agreements that limit their use of it:

Email delivery — a transactional email provider (Brevo) sends account emails such as password resets on our behalf.
Payments — when paid subscriptions are available, a payment processor (such as Stripe) handles billing.
Hosting — the Service runs on infrastructure we operate.

4. Cookies and Local Storage

We use browser local storage to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. If advertising is introduced in the future, this Policy will be updated first.

Do Not Track. Some browsers can send a "Do Not Track" signal. There is no industry standard for how a site should respond to that signal, and NerdLab does not respond to it. We do not track you across third-party websites, so there is no cross-site activity for the signal to stop.

5. Data Retention and Deletion

We keep your account and content for as long as your account is active. You can delete your content in the app, and you can delete your account, which removes your account record and associated content from active systems. You may also request deletion by contacting us. Residual copies may persist in backups for a limited period before being overwritten.

6. Your Choices and Rights

You can access and update your account information in the app, delete your content or account, and contact us to exercise rights available to you under applicable law (such as access, correction, or deletion). We will respond to verified requests as required by law.

California residents. If you live in California, you may ask us for the categories of personal information we collect, how we use and disclose it, and a copy of the information associated with your account, and you may ask us to correct or delete it. Email us at the address in section 10 and we will respond to verified requests as required by law. We will not treat you differently for making a request. We do not sell or share your personal information as those terms are used under California law.

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use reasonable measures to protect information, including encryption in transit (HTTPS), hashed passwords, and access controls that limit data to the campaigns you belong to. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes

We may update this Policy from time to time. Material changes will be reflected in the "Last updated" date and, where appropriate, communicated to you.

10. Contact

Lit Little Laboratories LLC · [email protected]