Privacy Policy

Last updated: May 18, 2026

Game Master Schedule (“GM Schedule,” “we,” “us”) operates the website gmschedule.com (the “Service”). This policy explains what data we collect, why we collect it, and what we do with it. We try to keep it short and plain.

1. Information we collect

a. Game Master accounts

When you sign in as a Game Master, we collect:

  • Your email address (via Google OAuth or via a magic-link email).
  • Your display name and avatar URL, if provided by Google.
  • Authentication identifiers from Google (so we can recognize you when you sign back in).

b. Sessions you create

We store the session title, description, location text, duration, and the time options you propose. You control this content; you may edit or delete it at any time.

c. Player responses

Players who vote on a session do not need an account. We collect only the name they enter, an optional email, optional notes, and which time options they marked available. This data is visible to the Game Master who owns that session.

d. Technical data

Like every web service, our servers automatically receive your IP address, user agent, and the timestamp of each request. We use this data for security, abuse prevention, and aggregate analytics.

2. How we use your information

  • To operate the Service (sign you in, store your sessions, deliver player votes to you).
  • To send transactional emails such as magic-link sign-in.
  • To detect and prevent abuse, fraud, and spam.
  • To diagnose errors and improve the product.

We do not sell your personal information. We do not run third-party advertising on the Service.

3. Service providers we share data with

We rely on a small set of vendors to run the Service. They process data on our behalf under their own privacy and security commitments:

  • Vercel — application hosting and analytics.
  • Neon — managed PostgreSQL database.
  • Google — OAuth sign-in (only if you choose Google to sign in).
  • Resend — transactional email delivery (magic links).
  • Sentry — error monitoring.

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of users or the public.

4. Cookies

We use first-party cookies that are strictly necessary to keep you signed in and to protect against CSRF. We do not use third-party tracking cookies.

5. Data retention

Account data is retained for as long as your account exists. You may delete sessions individually at any time. To delete your account and all associated data, contact us at the address below.

Player responses are retained as part of the session they belong to; they are deleted when the owning Game Master deletes the session.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you, and to object to certain processing. To exercise any of these rights, email us at the address below and we will respond within 30 days.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

8. International users

The Service is operated from the United States. By using the Service, you consent to your data being processed in the United States and any other country in which our service providers operate.

9. Security

We use industry-standard measures to protect your data, including HTTPS in transit, encrypted database connections, and strict access controls. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be communicated through the Service or by email.

11. Contact us

Questions or requests? Email help@gmschedule.com.