Privacy

What we store

Character sheets, item vault entries, portraits, and other campaign data you create in the app are saved to our database so your table can use them again. That data belongs to your campaign — we use it only to run the sheet.

Cookies and browser storage

When you join a private campaign, we set login cookies after you enter your Campaign ID and password. They are HttpOnly, last up to fourteen days, and are scoped to that campaign so one login does not unlock another table. We treat them as essential — we do not ask for cookie consent to set them.

The public demo does not require those cookies. A small amount of sheet UI state (for example quiver combat tallies) may be kept in your browser's local storage on your device only — it is not sent to us separately from the sheet data you save.

We do not use advertising cookies, analytics cookies, or social tracking on Mirabilis Beyond today. If that changes, we will update this page and ask where the law requires it.

AI features

When AI image or description generation is enabled for your table, the text and prompts you submit are sent to our image and language providers to produce results. The public demo turns those features off so the sandbox does not run up API costs.

Where data lives

The site is hosted on Vercel. Character data is stored in MongoDB. Images are stored in Vercel Blob. These services may process data in regions outside your country; we use them only to operate the product.

Your choices

You can log out of a gated table at any time, which clears the login cookie. Campaign data is kept until someone with access removes it from the app. If you need something deleted or have a privacy question, contact whoever runs your table or Blackfeather Gaming directly.

Updates

We may revise this notice as the product changes. The current version always lives at mirabilisbeyond.com/privacy. For what shipped in each build, see the changelog.