Privacy

NightMuse is a private board for planning play. Anyone can create a board; it is never publicly listed. Guests reach a board only through a link the host shares with them.

Hosts sign in with an account. Guests take part with a per-board token and no account. Boards are link-gated and never indexed. Detailed, per-category data handling is described here as features land.

What we collect

We collect and store the following:

Host account — Sign-in identity for hosts: email, internal user id, and the session tokens issued at sign-in. Required to create and run a board.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account.
Board details — A board's title, event date, minimum age, and host settings. Stored while the board is live and cleared a short time after the event date, or immediately when the host deletes it.Stored on our server. Kept until you delete it. A board is cleared a short time after its event date, or immediately when the host deletes it. Legal basis: contract (needed to run the service). Removable when you delete your account.
Guest session — How you take part without an account: a chosen handle, an optional FetLife handle if the host requires one, and a per-board session token stored on your device. It is not linked to an email. Cleared when the board is deleted, the host removes you, or a short time after the event.Stored on our server. Kept until you delete it. Cleared when the board is deleted, the host removes you, or a short time after the event date. Legal basis: consent. Removable when you delete your account.
What you are up for — The activities and roles you list yourself as up for on a board. You place only your own, never anyone else's. It is shown to other people on the board only after you opt in to appear, and only to people who hold the board's link. You can change it, clear it, or remove yourself at any time.Stored on our server. Kept until you delete it. Cleared when you remove yourself, the host deletes the board, or a short time after the event. Legal basis: consent. Removable when you delete your account.

Third parties

These external services receive some of your data:

DigitalOcean — Application hosting

Your rights

You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.

Last updated: 2026-07-09.