Privacy Notice
Bonfire is a digital tabletop roleplaying character companion. This notice explains how we handle personal data when you visit our website, use the beta application, or contact us.
1. Data controller and contact
Paroparopo (the operator of Bonfire), CVR 45818209, Søndre Ringgade 69, st. tv, 8000 Aarhus C, Denmark. Email: hello@bybonfire.com. Public business registration: Paroparopo company details.
2. What we process
- Beta accounts: email address, user identifier, account/profile preferences, password-reset events and authentication information processed by Firebase Authentication. We do not receive your plaintext password.
- Characters and companions: the character data, notes, resource values, attacks, spells, inventory and other material you choose to save in Cloud Firestore.
- Technical data: web requests, IP address and browser or device information processed by hosting and authentication providers to deliver and secure their services.
- Contact and feedback: the sender's address and contents of messages sent to our Simply.com mailbox, including privacy, support and deletion requests.
Bonfire is intended for fictional game characters. Please do not submit real-world sensitive personal information through character notes or feedback.
3. Purposes and legal bases
- Provide your invited beta account and save your characters: processing necessary to provide the requested Bonfire beta service, GDPR Article 6(1)(b).
- Protect accounts, prevent abuse, troubleshoot problems, and respond to ordinary support or voluntary feedback: our legitimate interests in security, support and improving the beta, Article 6(1)(f). We balance those interests against your privacy rights and limit information used for these purposes.
- Respond to formal personal-data rights requests and meet applicable legal duties: processing necessary for compliance with a legal obligation, Article 6(1)(c).
We do not use your stored character content for advertising, sell it to advertisers, or rely on consent as the basis for essential account functionality. No paid subscriptions or payment processing are enabled during this beta.
4. Service providers and international processing
Google Firebase provides Firebase Hosting for the application, Firebase Authentication for sign-in, and Cloud Firestore for character storage. According to Google's published Firebase privacy information, Firebase Authentication is processed in United States data centres. Cloud Firestore's database storage location is selected for the Firebase project; it is not necessarily in Denmark, and we do not make that claim. Other operational processing can occur on Google's global infrastructure.
For personal data transferred outside the EEA, Google's applicable contractual data-protection terms describe the EU–US Data Privacy Framework for certified recipients and Standard Contractual Clauses where applicable. Details: Firebase privacy and security and Firebase data-processing terms.
Simply.com hosts this public website and the hello@bybonfire.com mailbox. Website requests and messages may be processed by Simply.com and its documented sub-processors; see Simply.com's compliance information. We do not intentionally publish private character sheets on the public website.
5. Security and access
Character data is organized under individual authenticated users and protected by Firestore security rules designed to block other accounts from reading or changing it. Self-service sign-up is disabled during the invitation-only beta. We have tested core access restrictions and conflict handling, but no system can guarantee complete security. Use a unique password and keep a separate backup of any character information you cannot afford to lose.
6. Retention and deletion
Active accounts: your account and character data are retained while you participate in the beta. Inactive accounts: our beta policy is to review accounts after 12 months without sign-in, notify the account email where practicable, and allow 30 days to respond before manually removing the account and its stored character data. This is a manual review policy, not an automatic deletion feature.
Deletion requests: email hello@bybonfire.com from your registered address. We verify the request and aim to delete your active Firestore data and Firebase Authentication account within 30 days, unless a lawful reason requires retention or verification is outstanding. The beta's account-deletion dialog provides instructions but does not send a request automatically.
Support correspondence: we aim to delete routine support and feedback messages within 12 months of the last reply unless they are needed to investigate an ongoing issue, protect against abuse, or comply with the law. Records needed to document a privacy request or legal obligation may be kept longer as necessary.
Service logs and backups: deleting active data does not guarantee immediate removal of all provider-managed backups, security logs, or operational metadata; those follow providers' retention arrangements. Simply.com describes webhotel backup cycles of approximately 30 days. Firebase's infrastructure retention can differ by service; we do not claim a uniform deletion period for Google-managed copies.
7. Your rights
Subject to applicable conditions, you may request access to, correction or deletion of, or restriction of processing of your personal data, request portability, and object to processing based on legitimate interests. We normally respond to GDPR rights requests within one month, subject to lawful extensions. Contact hello@bybonfire.com. You may lodge a complaint with Datatilsynet, the Danish Data Protection Agency.
8. Local storage, cookies and third-party assets
Firebase Authentication uses browser storage necessary for authentication and sessions. This website also loads fonts from Google Fonts; that request can expose connection information to Google. We have not intentionally added advertising cookies or an analytics script to the landing-page source provided here. Changes to analytics, cookies, or other third-party integrations will be assessed and disclosed, with consent obtained where required.
9. Updates
We may revise this notice when Bonfire's features, service providers or processing change. Material updates will be communicated appropriately. Questions can be sent to hello@bybonfire.com.