Goldcrest RPG

Privacy policy

Last updated: September 12, 2026

Goldcrest RPG is a community roleplaying website operated by Patrick McGraw. It helps players manage characters, complete tasks and projects, trade fictional items, and participate in a shared campaign between sessions. This policy covers GoldcrestRPG.com and its original Hearth & Hammer website at hearth-and-hammer.haydeos.chatgpt.site.

Information used to sign in

When you choose Google or Discord sign-in, the provider shares account information with our authentication service, Supabase. This can include your account identifier, email address and verification status, display name, and profile picture. Goldcrest uses your verified account identifier and email to recognize your account, keep you signed in, and connect you to your characters and town membership. Supabase may retain the basic profile information supplied by your provider as authentication account metadata.

Google sign-in requests basic identity permissions: OpenID, email, and profile. Goldcrest does not request access to your Gmail messages, Google Drive files, contacts, or calendar. Your Google or Discord password is entered with that provider and is not received by Goldcrest. If you use ChatGPT sign-in, the hosting service supplies your verified account identifier and available email and name information. Explicitly linking sign-in methods stores a connection between those identities and your existing site account.

Characters, uploads, and community activity

We store the information you submit and the game records created as you play. These include character sheets and creation drafts, names, notes, proficiencies, spells, fictional gold and inventory, tasks, projects, quests, commissions, businesses, pets, housing, session records, roleplay posts, and replies. Character and NPC artwork, item images, and city maps that you upload are stored so the site can display them. Character art can appear as your character’s avatar.

The current character-file importer reads PDF or JSON files in your browser and submits the character details you choose to save for review; it does not store the original character-sheet file on the game server. Saved imported details and notes become part of your character record. Only submit information and images that you want to use in the campaign, and avoid including sensitive personal information in character notes or public posts.

How information is used and who can see it

Information is used to operate the game, maintain account access and permissions, record transactions and progress, resolve DM approvals, and investigate errors or misuse. The site also records recent activity to show character presence and current projects in the town square.

The DM can review character information, submitted actions, imports, and campaign records to run the community. Other players can see shared character information, portraits, current projects, marketplace listings, and activity made available to them. Posts use the visibility chosen for them, such as public, party, or private; private submissions may still be visible to the DM. Public posts and artwork can be copied by people who can view them. Sign-in email addresses are used for account administration and are not intended as public character names.

Hosting and service providers

Goldcrest uses OpenAI Sites and Cloudflare infrastructure to deliver the website and store game records and images, and Supabase to handle Google and Discord authentication. Your chosen sign-in provider processes the login itself. These services receive the information needed to provide their part of the service and may process technical request information, such as IP addresses, browser information, timestamps, and security or error logs, under their own policies.

The current Goldcrest application does not include advertising, third-party marketing analytics, or features that sell your Google account information. Google identity information is used for authentication and account administration, rather than advertising or AI model training.

Cookies and account security

The site uses authentication cookies and related browser state to complete sign-in and maintain your session. Blocking or clearing them may sign you out or prevent a login from completing. The site uses HTTPS and server-side permission checks to protect account access and DM controls. No online service can guarantee complete security.

Retention, access, and deletion requests

Account and campaign records remain stored to preserve ongoing play and the shared campaign history. There is currently no automatic account-deletion schedule or self-service account-deletion button. To request a copy, correction, or deletion of information associated with your account, contact the site operator at haydeosgaming@gmail.com. We may need to verify that the account belongs to you and review how a request affects shared campaign records. Removing a character from active play or retiring it does not by itself delete its history.

You can also remove Goldcrest’s Google access through your Google account’s third-party connections settings. Revoking provider access does not by itself erase records already stored by Goldcrest. Hosting backups and provider logs may retain information separately from active game records.

Updates and contact

This page will be updated when the site’s information practices change. The date above identifies the latest revision. For privacy questions or account-data requests, contact Patrick McGraw at haydeosgaming@gmail.com.