Privacy Policy & Terms of Use

Last updated October 4, 2026

World Vault is a free, non-commercial fan project for playing Dungeons & Dragons fifth edition, run by one person on their own server. This page explains what it keeps about you and why, the rules for using it, and where its rules content comes from.

Privacy

What World Vault keeps

• Your account: your username, display name, email address, and your password (stored only as a one-way hash, never readable).
• What you make: characters, campaigns, settings, journal and board pages, Compendium entries, uploaded pictures and files, availability and sessions, dice rolls, notes, and the requests and screenshots you send.
• To keep you signed in: a sign-in cookie and a record of your active sessions (device and IP address), and, if you turn them on, the address your browser gives for push notifications.
• Your time zone, so times appear in your own.
• A history of changes (who changed what, and when), used to undo mistakes and look into problems.

What it's for. Only to run World Vault: signing you in, showing your things to you and to the people you play with, sending you the codes, reset links and notifications you've asked for, and keeping it safe and backed up.

What it doesn't do. No ads, no selling or renting your information, no analytics or tracking scripts, no profiles for marketing.

Who sees what. Other people see what's part of playing together: your display name, your characters in campaigns you share, your public dice rolls, and what you post where they can read it. Your email is never shown to anyone. Your DM sees your private rolls. The site's administrator can see everything stored, and only looks when it's needed to run the site.

Services World Vault uses. They handle data only to provide their service:

• Cloudflare: delivers the site securely, runs the bot check on sign-up, and stores the nightly backups.
• Resend: sends emails (sign-up codes and password resets) to your address.
• GitHub: when you send a bug report or idea, its title and description (with your display name) become an issue in World Vault's private project tracker. Screenshots stay on World Vault.
• Your browser's push service (Apple, Google or Mozilla), if you turn on push notifications.

How long it's kept. Your account and what you make stay until you delete them or ask for your account to be deleted. Dice rolls are kept for 12 months and notifications for 6 months. The history of changes is kept with your account and deleted with it. Backups are kept for 30 days, so deleted things leave backups within about a month.

Your choices. You can change your email and password, turn notifications off, and delete your characters and entries yourself. To get a copy of your data or have your account deleted, write to privacy@worldvault.dev from your account's email.

Age. You must be at least 13 to make an account.

Terms of Use

• Be decent. No harassment, hate, or content that's illegal. Keep content shared with others appropriate for the table you're at.
• Your content is yours. You keep the rights to what you create. By posting it you let World Vault store it and show it to the people you share it with.
• Respect others' work. Don't upload or paste books, art or other material you don't have the right to share. Write homebrew and summaries in your own words.
• Keep your account to yourself. Don't share your password or try to get into anyone else's account or the server.
• Moderation. The administrator may remove content or close accounts that break these rules.
• As is. World Vault is a free hobby project, provided as is, without guarantees. It may change, have downtime, or lose data despite backups, and it may end; if it does, you'll be given notice and a chance to save your characters.
• Changes. If these terms change in a meaningful way, What's new in the app will say so.

Rules content and credits

The rules data was prepared with the 5e-database project by 5e-bits (code under the MIT License) andOpen5e. World Vault is unofficial and isn't affiliated with or endorsed by Wizards of the Coast. Dungeons & Dragons and D&D are trademarks of Wizards of the Coast LLC.

Homebrew in World Vault is written by its users and belongs to them.