Effective Date: May 18, 2026
NovaEventus ECM, LLC — doing business as Quoth GM
Quoth GM does not sell your data. Quoth GM does not serve advertisements. Your campaigns are private. These are not policies subject to change — they are the foundation of how this product was built.
1. Who We Are and How to Reach Us
Quoth GM is operated by NovaEventus ECM, LLC, a Washington State company. If you have any questions about your privacy, email us.
This Privacy Policy describes how NovaEventus ECM, LLC, a Washington limited liability company doing business as Quoth GM ("Quoth GM," "we," "us," or "our"), collects, uses, stores, and protects personal information in connection with the Quoth GM application and website at quothgm.com (the "Service").
This policy applies to all users of the Service, including Game Master subscribers, player account holders, and visitors to quothgm.com.
Contact for privacy matters: info@quothgm.com. Mailing address: NovaEventus ECM, LLC / Quoth GM, PO Box 29, Loon Lake, WA 99148.
2. Information We Collect
We collect only what we need to run the service. We do not track how you use the app, we do not run advertising, and we do not use third-party analytics.
2.1 Information You Provide Directly. Account registration: your email address and, if you are a GM subscriber, payment information required to process your subscription. Payment card data is processed and stored exclusively by Stripe, Inc. — Quoth GM does not store your card number, expiration date, or security code.
2.2 Profile Information. You may optionally provide a display name, pronouns, biography, and avatar image. This information is visible to other users within campaigns you participate in.
2.3 User Content. Worlds, campaigns, adventures, sessions, codex entries, session log entries, character information, player notes, and images you upload are stored on your behalf. This content is yours.
2.4 Session Data. Quoth GM uses session tokens to keep you logged in. We do not use advertising cookies or third-party tracking cookies.
2.5 Server Logs. Our hosting provider, Vercel, automatically collects standard web server log data. We do not use this data for marketing or behavioral tracking.
2.6 What We Do Not Collect. Quoth GM does not use analytics software to track user behavior. We do not collect data about which features you use or how you navigate the app. We do not sell, rent, or trade your personal information to any third party for any purpose.
3. How We Use Your Information
We use the information we collect only to run the service, communicate with you about your account, and keep the platform secure.
Quoth GM uses the information we collect only to: create and manage your account; process subscription payments through Stripe; deliver the Service — storing, displaying, and managing your content; send transactional communications (account verification, billing notices, campaign invitations); send optional communications you have consented to (which you may opt out of independently); respond to support requests; detect and prevent fraud and security incidents; and comply with applicable legal obligations.
We do not use your content — your worlds, campaigns, codex entries, or any other creative material — for any purpose other than providing the Service to you and the users you authorize.
5. Your Content and Privacy
Your campaigns are private by default. Only you and the players you invite can see your campaign content. Player notes are private to the player — not even the GM can read them.
5.1 Campaign Privacy. All campaign content is private by default and accessible only to the subscribing GM and the players they explicitly invite. Quoth GM staff do not access campaign content except as necessary to respond to a support request you have initiated, to investigate a reported Terms of Service violation, or as required by law.
5.2 Player Notes. Notes created by a player within a campaign are private to that player. They are not accessible to the GM, to other players, or to Quoth GM staff in the ordinary course of operations.
5.3 Public Codex Entries. A GM may choose to mark individual codex entries as publicly accessible. Public entries are accessible via a shareable URL to anyone who has that URL and may be indexed by search engines. The GM is solely responsible for the content of any entry they make public.
5.4 Uploaded Images. Images are stored in a cloud storage bucket configured for public read access. Any user who obtains the direct URL to an uploaded image can view it without authentication. GMs should be aware of this when uploading sensitive or proprietary imagery.
6. Data Retention
Your data stays in your account for as long as your account exists. If you delete your account, your personal data is permanently deleted within 30 days.
6.1 Active Accounts. We retain your personal information and user content for as long as your account remains active.
6.2 Lapsed Subscriptions. If your GM subscription lapses, your account transitions to a read-only state. Your data is retained indefinitely and is not deleted. You may restore full access by resubscribing.
6.3 Account Deletion. Upon your request to delete your account, your personal information and user content will be permanently deleted within thirty (30) days. Content you contributed to another GM's campaign will be retained in anonymized form.
6.4 Legal Retention. We may retain certain records for longer periods as required by applicable law or for fraud prevention and dispute resolution.
7. Your Rights and Choices
You have real control over your data. You can update your profile, request a copy of your data, delete your account, and manage your email preferences.
7.1 Access and Correction. You may update your display name, pronouns, biography, avatar image, and email address directly through your account settings at any time.
7.2 Data Export. You may request a copy of your personal data by emailing info@quothgm.com. We will deliver your data within seven (7) to ten (10) business days.
7.3 Account Deletion. You may request deletion of your account by emailing info@quothgm.com. Account deletion is permanent and cannot be undone.
7.4 Email Preferences. You may opt out of optional email communications through your account settings page. Transactional emails cannot be opted out of while your account is active.
7.5 Do Not Track. Quoth GM does not engage in behavioral tracking or serve targeted advertising and therefore does not respond to browser Do Not Track signals.
8. Data Security
Your data is protected by database-level access controls — each user can only access their own data. We will notify you promptly if we become aware of a breach.
8.1 Security Measures. Quoth GM implements industry-standard security measures including database-level row security controls that isolate each user's data, encrypted data transmission via HTTPS, and access controls limiting staff access to user data.
8.2 No Absolute Guarantee. No security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
8.3 Your Responsibility. You are responsible for maintaining the security of your account credentials. Notify us immediately at info@quothgm.com if you suspect unauthorized access.
9. Children's Privacy
Quoth GM is for adults only. We do not knowingly collect information from anyone under 18.
The Service is intended for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from anyone under eighteen. If we become aware that we have collected information from a minor, we will promptly delete it. Contact us at info@quothgm.com if you believe we have inadvertently collected information from a minor.
10. California Privacy Rights (CCPA)
California residents have specific rights under California law. We do not sell your data, which satisfies the most significant of these rights.
10.1 Right to Know. You may request disclosure of the categories of personal information we have collected and the purposes for which we use it. This Privacy Policy provides that disclosure. You may also submit a specific request to info@quothgm.com.
10.2 Right to Delete. You may request deletion of personal information we have collected. Email info@quothgm.com.
10.3 Right to Opt Out of Sale. Quoth GM does not sell personal information. No opt-out mechanism is required.
10.4 Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.
11. Changes to This Policy
Material changes get 30 days' notice through your account page and the login page.
We reserve the right to update this Privacy Policy at any time. For material changes, we will provide no less than thirty (30) days' advance notice. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
12. Contact
Questions about this policy or your data? Email us.
For questions or concerns about this Privacy Policy, to exercise your data rights, or to report a privacy concern: NovaEventus ECM, LLC / Quoth GM, PO Box 29, Loon Lake, WA 99148. Email: info@quothgm.com.
Quoth GM — Privacy Policy — NovaEventus ECM, LLC — quothgm.com/privacy