Privacy policy

Who operates this site

PF2E Mercenary Recruiter is an independent, unofficial Pathfinder Second Edition recruitment helper at pf2erecruiter.io. It is not operated by Paizo, Google, Discord, or Foundry VTT.

The operator responsible for personal data handled by this site is pf2e-recruiter.

For privacy questions or requests, email pf2erecruiter@gmail.com.

Information we receive and use

Google sign-in

Google provides your account identifier, name, and email address when you sign in. It may also provide basic profile information, such as a link to your profile picture. We use your account information to sign you in, display your name to you, and recognize your rooms. We do not use your Google profile picture in the app.

Discord sign-in

Discord provides your account identifier and basic profile, including your username or display name, when you sign in. We do not request your Discord email address or access to messages or servers.

Your account and rooms

We remember your sign-in securely and link your rooms to your account so that only you can manage them. We do not receive your Google or Discord password or keep access that lets us continue reading information from those accounts after sign-in.

Recruitment rooms and players

We save your rooms, when they were created, the mercenaries you post, and which interviews you reveal. Players provide a display name, and we temporarily keep track of who is connected to each room. We do not keep a permanent list of players who have joined. Please use a nickname and avoid putting sensitive personal information in room names.

Requests, errors, and support

We process connection and usage information, such as your IP address, browser information, pages requested, and errors, to run the site and keep it working safely. These records may include links to rooms you visit. If you contact us, we receive your email address and the information you include in your message.

We use this information to provide the features you request, maintain security and reliability, answer support requests, and meet applicable legal obligations. Where EU/EEA data-protection law applies, providing requested services is our basis for core account and room processing; security and troubleshooting rely on our legitimate interest in operating a safe, functioning service. Optional provider access remains under your control.

What is shared, and with whom

• Your room: anyone who obtains its invitation link or room ID can join with a display name. Other participants can see participant names, the room name, posted candidates, and interviews the GM reveals. GMs appear as “Game Master,” not their email address. Participants can still copy or screenshot what they see.
• Service providers: Google or Discord handles your chosen sign-in. We also use providers to host the site, store its data, and deliver parts of its pages. These providers may process information needed to provide their services, including your IP address and browser information.
• Administration: the operator can access stored data, logs, and backups when needed for support, maintenance, security, or legal obligations. We do not sell, rent, or share your Google user data for advertising.

Some service providers may process information in other countries. You can contact us for further information about our providers and how they handle your data. Your chosen sign-in provider also has its own privacy policy: Google or Discord.

Cookies and browser storage

• Essential cookies keep you signed in, let players participate in rooms, and help protect the forms you submit.
• Your current recruitment is remembered in your browser tab. We process the choices you submit to calculate results, but do not save a history of your searches.
• Your theme preference is remembered on your device until you change it or clear site data.

You can clear cookies and site storage in your browser. This signs you out and removes saved local choices; it does not delete rooms from the server. Blocking essential cookies can prevent sign-in or room participation. Browsers may restore session data when restoring tabs, so clear site data on a shared device.

How long information remains

• Rooms and posts remain until you delete them or the operator removes them. Leaving a room unused does not automatically delete it.
• Player participation details are temporary and expire after inactivity. You stop appearing as connected once the site detects you have left.
• Your sign-in expires over time and may be extended while you use the site. You can end it by signing out.
• Technical records and backups are kept for security, troubleshooting, and recovery. Retention varies: some copies are removed automatically, while others remain until the operator removes them manually.

Deleting a room removes it and its posts from the active site, but older copies may remain in backups or technical records until those copies are removed. Support messages may also remain until removed. Contact us with any questions about retention or to request deletion of personal information, including retained copies.

Your choices and privacy rights

GMs can delete rooms from the Rooms page. Players can close the room and clear site data. You can disconnect this app in your Google account’s third-party connections or Discord’s Authorized Apps settings. Disconnecting a provider does not automatically delete your rooms or sign you out of this site; sign out here as well.

Depending on applicable law, you may request access to, correction of, deletion of, or a copy of your personal data, object to certain processing, or request restrictions. Contact the operator using the email above. We may ask for proportionate information to confirm that the data belongs to you; never send your password, sign-in codes, or other account secrets. You may also complain to your local data-protection authority.

Security and changes

We use encrypted connections and access controls to help protect your information and your rooms. No online service or backup can be guaranteed completely secure. Keep invitations private and contact us if you suspect unauthorized access.

We will update this policy when the service’s data practices change and revise the date above. Material changes to our use of Google user data will be communicated before the new use and, where required, we will request new authorization. This policy does not replace Google’s, Discord’s, or other providers’ policies.