Permissions and privacy

Read-only

A connected app can read your campaigns. It can't create, edit or delete anything in RollSummary, and every one of its tools is read-only.

The same access you have

The app sees what your account sees, and nothing more. The usual rules still apply:

• You only see the campaigns you belong to, with your role in each.
• Each note's visibility applies, so hidden notes stay hidden.
• Session transcripts and prep notes are for the campaign's game masters only.
• A player sees what the game master has shared with them.

What RollSummary stores

For each connected app, RollSummary keeps:

• The app's name and the details it registered with us
• The access you granted: campaigns:read, plus offline_access so it can stay connected
• Hashed copies of the tokens it uses to stay connected
• When it was connected and when it was last used

What your AI app does with it

What the AI app does with what it reads is covered by that provider's own privacy policy and terms. How RollSummary handles the connection is in our privacy policy.

Disconnect anytime

Open Settings and disconnect the app under Connected apps. Disconnecting deletes its tokens, so the app loses access on its next request. You can connect it again whenever you like.

Fair use

Each account can make up to 120 requests a minute through connected apps. That is far more than a conversation needs; if an app goes over it, it gets a “too many requests” answer and can try again a minute later.