Privacy policy
Effective July 30, 2026
The Spider's Web is designed to keep your campaign private. This policy explains what stays on your device and what is processed when you choose optional online services.
Campaign data
By default, campaign data is stored locally in your browser. It is not sent to The Spider's Web servers. You control exported files and player-share links you create. Share links may contain a copy of the player-safe map, so only send them to people you intend to give access.
Optional accounts and cloud sync
If you choose to create an account or enable cloud sync, Supabase processes authentication details and stores synced campaign data on our behalf. Synced records are associated with your account and protected by owner-only access rules. You do not need an account to use the core app.
Analytics
The site uses Vercel Analytics to understand aggregate traffic and site performance. This may process limited technical information such as the page visited, browser type, device type, and approximate location. It is not used to read your locally stored campaign content.
Purchases
Pro purchases and license management are handled by Gumroad. Payment information is submitted directly to Gumroad and is not stored by The Spider's Web. Gumroad's own privacy terms apply to that transaction.
Contact messages
When you use the contact form, your name, email address, subject, and message are sent through our email provider so the site creator can read and reply. These details are used for correspondence and abuse prevention, not marketing, and are retained only as long as reasonably needed for those purposes.
Your choices
You can clear locally stored data through the app or your browser settings. You can avoid cloud processing by using the app without signing in. For questions or requests involving information you submitted, use the contact form.
Changes to this policy
This policy may be updated as the service changes. Material updates will be posted here with a revised effective date.