NerdLab

Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how Lit Little Laboratories LLC ("we", "us", "our"), a Missouri limited liability company, collects and uses information when you use NerdLab (the "Service"). We aim to collect only what the Service needs to work.

1. Information We Collect

Account information — the email address and display name you provide, and a password that we store only in hashed (irreversible) form.
Content you create — campaigns, characters, maps and drawings, initiative and battle data, notes, creature bookmarks, and any files you upload (such as images or PDFs). This is stored so we can provide the Service and sync it to the campaign members you share with.
Local device data — some trackers (Riftbound, Magic) save data in your browser's local storage on your device and are not sent to our servers unless you sign in and sync. Your sign-in token is also stored locally to keep you logged in.
Technical/log data — like most web services, our servers automatically record standard request information such as IP address, browser type, and timestamps. We use this to operate, secure, and troubleshoot the Service.
Payment information — if you purchase a subscription, our third-party payment processor collects and processes your payment details. We do not receive or store full card numbers.

2. How We Use Information

To provide, maintain, and sync the Service and your content.
To authenticate you and keep your account secure.
To send transactional emails you request or that are necessary to the Service, such as password resets and email confirmations.
To operate paid subscriptions, if you choose to purchase one.
To detect, prevent, and address abuse, security issues, and technical problems.

We do not sell your personal information, and we do not use your campaign content for advertising.

3. Service Providers

We share information only with providers that help us run the Service, under agreements that limit their use of it:

Email delivery — a transactional email provider (Brevo) sends account emails such as password resets on our behalf.
Payments — when paid subscriptions are available, a payment processor (such as Stripe) handles billing.
Hosting — the Service runs on infrastructure we operate.

4. Cookies and Local Storage

We use browser local storage to keep you signed in and to save on-device tracker data. We do not use third-party advertising or cross-site tracking cookies. If advertising is introduced in the future, this Policy will be updated first.

5. Data Retention and Deletion

We keep your account and content for as long as your account is active. You can delete your content in the app, and you can delete your account, which removes your account record and associated content from active systems. You may also request deletion by contacting us. Residual copies may persist in backups for a limited period before being overwritten.

6. Your Choices and Rights

You can access and update your account information in the app, delete your content or account, and contact us to exercise rights available to you under applicable law (such as access, correction, or deletion). We will respond to verified requests as required by law.

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

8. Security

We use reasonable measures to protect information, including encryption in transit (HTTPS), hashed passwords, and access controls that limit data to the campaigns you belong to. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes

We may update this Policy from time to time. Material changes will be reflected in the "Last updated" date and, where appropriate, communicated to you.

10. Contact

Lit Little Laboratories LLC · support@litlittlelab.com