Privacy policy

Campaign data

By default, campaign data is stored locally in your browser. It is not sent to The Spider's Web servers. You control exported files and player-share links you create. Share links may contain a copy of the player-safe map, so only send them to people you intend to give access.

Optional accounts and cloud sync

If you choose to create an account or enable cloud sync, Supabase processes authentication details and stores synced campaign data on our behalf. Synced records are associated with your account and protected by owner-only access rules. You do not need an account to use the core app.

Analytics

The site uses Vercel Analytics to understand aggregate traffic and site performance. This may process limited technical information such as the page visited, browser type, device type, and approximate location. It is not used to read your locally stored campaign content.

We also record a small number of our own product events — opening the app, creating a campaign, and clicking or completing an upgrade — so we can tell which pages and features are actually useful. Each event stores the event name, a random identifier generated in your browser, the first page you arrived on, and the domain name of the site that referred you. That identifier is not derived from anything about you, is not linked to any account, and is not shared with or shared between other sites.

These events never include your name, email address, IP address, or any part of your campaign content. They use no cookies. If your browser sends a Do Not Track or Global Privacy Control signal, no events are recorded and no identifier is created at all. You can also clear the identifier at any time by clearing this site's data in your browser.

Purchases

Pro subscriptions are paid by card through Stripe, or purchased as license keys through Gumroad. Payment information is submitted directly to the payment provider and is not stored by The Spider's Web. The site stores only your license key and, when a card subscription is active, the email used at checkout so your subscription can be matched to your license. Stripe's and Gumroad's own privacy terms apply to those transactions.

Contact messages

When you use the contact form, your name, email address, subject, and message are sent through our email provider so the site creator can read and reply. These details are used for correspondence and abuse prevention, not marketing, and are retained only as long as reasonably needed for those purposes.

Your choices

You can clear locally stored data through the app or your browser settings. You can avoid cloud processing by using the app without signing in. For questions or requests involving information you submitted, use the contact form.

Changes to this policy

This policy may be updated as the service changes. Material updates will be posted here with a revised effective date.