Cerberus Privacy Policy
Last updated 27 October 2026
Cerberus is a character builder and table sheet for fifth edition games, made by All Bark (“we”, “us”). Most of it never talks to a server at all. This page explains what does leave your device, who handles it, and how to get rid of it.
Players don’t need an account. Your heroes, dice rolls, homebrew packs and settings are stored on your device and never sent to us. Playing at a table on the same Wi-Fi goes device to device, not through us.
What we collect, and only if you use it
| Data | When | Why |
|---|---|---|
| Your email address (from Sign in with Apple, which can be a private relay address, or the one you enter for a sign-in code) | When a DM signs in to host an online table | To create your DM account and sign you in. |
| Whether you have the online tables subscription, and when it renews or ends | If you subscribe | So the online relay opens tables for you. |
| What your table sends while it’s online: heroes on it, rolls, initiative, loot | While an online table is open | To pass it between the DM’s device and the players’. It’s forwarded, not stored; see below. |
| Crash reports: the error, where in the app it happened, the app version, and the device platform and system version | When the app or relay hits an error | To find and fix bugs. No name, email or account is attached, and IP addresses aren’t stored. |
| Feedback you send: what you wrote, a screenshot if you added one, your email only if you typed it in, the app version, the device model and system version, and which screen you were on | When you tap Send feedback | To fix what you reported, and to reply if you asked for one. A random id per install limits how many notes a day can be sent; it doesn’t identify you or your device. |
We do not collect your location, contacts or browsing history. There are no ads, no analytics or tracking, and we don’t sell or share your data with advertisers or data brokers.
Online tables
When a DM takes a table online, the DM’s device and each player’s device connect to our relay. The relay passes the table’s messages between them without reading or saving them; they only exist in its memory while the table is open, and it keeps no log of what was said. The relay sees each device’s IP address to hold the connection, and briefly counts wrong table codes from an address to slow down guessing; neither is written down. Its logs contain only how many tables and seats are open.
Who else handles your data
A few services run Cerberus for us. They act on our instructions and may not use your data for their own purposes.
| Service | What it handles |
|---|---|
| Supabase | DM accounts, sign-in and subscription status, and feedback sent from the app |
| Resend | Sending sign-in code emails |
| Fly.io | Hosting the online tables relay |
| RevenueCat | Subscription status |
| Apple and Google | Payment for the subscription (we never see your card), and Sign in with Apple |
| Sentry | Crash and error reports |
Deleting your data
In Cerberus, open Settings → Account → Delete account. That deletes your DM account, your email and your subscription record from our servers straight away. Your heroes stay on your device, since they were never on ours; delete the app to remove them. Deleting your account doesn’t cancel a store subscription, so cancel that in your device’s subscription settings first.
Feedback is kept until the problem it reports is fixed or closed, then deleted. To have a note deleted sooner, email the address below with the note’s number.
Crash reports are kept by Sentry for up to 90 days and then deleted. They aren’t linked to an account, so they can’t be looked up by person.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it, by emailing the address below. Depending on where you live you may also have the right to object to or restrict certain processing, and to complain to your local data protection authority.
Children
DM accounts are not meant for children under 13, and we don’t knowingly collect their data. If you believe a child has made an account, contact us and we’ll delete it. Players of any age can use Cerberus without an account.
Security
Everything between the app, our relay and our servers is encrypted in transit, and an account’s data needs that account’s sign-in to read. We keep the number of services holding anything deliberately small.
Changes
If we change this policy we’ll update the date at the top, and tell you in the app if the change is significant.
Contact
Questions or data requests: privacy@allbark.dev.