Privacy Policy

Effective date: July 5, 2026

TrackXP ("we", "us") operates trackxp.com and the TrackXP games (including trivia.trackxp.com and dnd.trackxp.com). This policy explains what we collect and how we use it.

What we collect

• Account information. If you create an account: your username, email address, and a securely hashed password. We never store your password in plain text.
• Gameplay data. Room codes, player and team names, answers, dice rolls, scores, and game history needed to run and resume games.
• Content you submit. Trivia questions, images you upload, and in-game chat. Submissions pass through automated content moderation.
• Technical data. IP addresses and basic request logs, used for security, rate limiting, and abuse prevention.

Cookies and similar technologies

• Session cookie (txp_session): keeps you signed in. Essential; HttpOnly.
• Local storage in the games: lets you rejoin a game if you refresh or drop connection.
• Google Analytics: we use GA4 with IP anonymization to understand aggregate site usage. Google may set cookies. You can opt out with the GA opt-out browser add-on.
• Cloudflare Turnstile: protects our sign-up and sign-in forms from bots. Turnstile evaluates browser signals and is subject to Cloudflare's privacy policy.

Third-party services

We use Cloudflare (network security and delivery), Google Analytics (usage analytics), TMDB (movie images in trivia — "This product uses the TMDB API but is not endorsed or certified by TMDB"), the iTunes Search API (30-second music previews), and Anthropic's Claude API (AI Dungeon Master narration in TrackXP Online D&D). Prompts sent to the AI DM — such as your in-game actions and chat directed at the DM — are processed by Anthropic to generate responses, and we log them to improve the game.

How we use your data

To operate the games, keep you signed in, restore interrupted sessions, moderate content, prevent abuse, and understand aggregate usage. We do not sell your personal data.

Advertising

If we introduce advertising in the future, this policy will be updated first, and where required we will ask for your consent before any advertising cookies are set.

Retention and deletion

Game history is kept so you can review past games. Sessions expire automatically after 30 days. To delete your account and associated personal data, email us at the address below and we will process the request within 30 days.

Children

TrackXP accounts are for users 13 and older. Games can be joined without an account; hosts are responsible for their room.

Contact

Questions or requests: [email protected].