Privacy Policy

Last updated 27 September 2026

Table Monkey (tablemonkey.games) is a small, independently run set of tabletop-gaming tools: the Legendary™ and Tanto Cuore randomizers, the Tracks page, and this site. This page explains what information the site handles, why, and what choices you have. The short version: the site collects the minimum it needs to run, shows no advertising, uses no third-party analytics or tracking, and never sells or rents anything about you.

Using the site without an account

Every randomizer works signed out. Your choices on the randomizer pages live only in your browser's memory for that visit and are not sent to an account. The Tracks page keeps its counters in your browser's local storage so they survive a reload; that data never leaves your device.

Like any website, the server records standard request logs: the address your request came from, the page requested, the time, and your browser's identification string. These logs are used only to keep the site running and to investigate problems, and are kept for a short period by the hosting platform.

Signing in

Sign-in is handled by Microsoft Entra External ID. Whether you use an email address and password, a one-time email code, or a social account, the sign-in itself happens with Microsoft, and Table Monkey never sees or stores your password. After a successful sign-in the site receives and keeps:

  • an identifier for your account,
  • your display name,
  • your email address,
  • the time of your last sign-in, and
  • your role on the site (everyone starts as an ordinary user).

Signing in sets one cookie, tm.session. It is encrypted, cannot be read by scripts, and keeps you signed in for up to 14 days of inactivity. Forms on the site also use a standard anti-forgery cookie. There are no advertising or analytics cookies.

Your settings and custom content

When you are signed in you can save your randomizer settings and create your own content: custom heroes, teams, schemes and maids, and team logos. This content is stored with your account and is private to you; there is no sharing feature, and no other user can see it. Uploaded logos are re-encoded on the server before they are stored, which removes embedded metadata such as camera details and location.

If you import settings and custom cards from the legacy Table Monkey app, that import happens only when you ask for it and the imported data is treated the same way.

Buying Table Monkey a whiskey

Donations are processed by Stripe on Stripe's own checkout page. Card details are entered there and never reach this site. After a completed payment Stripe tells the site which item was bought, the amount and currency, and a reference for the payment; if you were signed in, the donation is recorded against your account. Stripe's handling of your payment details is described in Stripe's privacy policy.

Feedback and problem reports

The feedback form stores what you write, the category you pick, the page you were on when you opened the form, and your browser's identification string. Giving an email address is optional and is used only to reply to you. If you are signed in, the report is linked to your account so a problem can be traced to your saved settings. Reports are read by the site operator and kept for as long as they are needed to act on them.

Who else sees your information

Table Monkey runs on Microsoft Azure, which hosts the site and its database, and uses Microsoft Entra External ID for sign-in and Stripe for payments. These providers process data on the site's behalf and under their own privacy terms. Beyond them, nothing about you is shared with anyone, unless the law requires it.

Your choices

  • You can use every randomizer without signing in.
  • You can sign out at any time from the Account page or the app header, which ends the session cookie.
  • You can change or delete your custom content and saved settings from within the apps.
  • To have your account and everything stored with it deleted, or to ask any question about your information, use the feedback form. Requests are handled by the site operator directly.

Children

The site is not directed at children under 13 and does not knowingly collect information from them. If you believe a child has created an account, use the feedback form and it will be removed.

Security

All traffic to the site is encrypted, session cookies are encrypted and inaccessible to scripts, and the database accepts connections only from the site itself. No system is perfectly secure, but the site is built to hold as little about you as it can.

Changes to this policy

If the site starts handling information differently, this page will be updated and the date at the top changed. Material changes will be noted on the home page for a while after they take effect.

Contact

Table Monkey publishes no support mailbox on purpose: the feedback form is the way to reach the site operator about privacy or anything else.