Account, privacy and your data

Settings holds your public face — display name, biography, portrait. Your username is permanent: it is the address of your profile, it is what people type to mention you, and other people’s links point at it. Your display name can change whenever you like.

Settings → Account holds the rest. Changing your email sends a confirmation link to the new address and the change only happens when you click it, so a typo cannot lock you out. Changing your password does not sign out your other devices; there is a separate button for that, which is the one to use if you have left yourself signed in somewhere you no longer have.

The bell in the header covers ten things:

Mentioned you

Somebody wrote @yourname.

New post

A reply in a thread you follow.

New thread

A scene started on a board you are in.

Wiki edit

Somebody edited a page you watch.

Application

Somebody applied to your campaign, or yours was answered.

Session

A time was proposed, or one was confirmed.

Party

A character joined the roster.

Handout

The GM revealed something.

Invitation

A GM answered your notice on the player board.

Hearthhall

Something from the site itself.

Three of those — being mentioned, an application, an invitation — are marked as wanting something from you, because a list where everything is equally urgent is a list nobody reads. You control the volume where it is generated rather than from a preferences screen: follow or mute individual threads, and watch individual wiki pages.

The box in the header searches everything you are allowed to see, across every campaign you are in at once: wiki pages, threads, posts, characters, nations, places, wars, timeline events, maps, handouts and sessions, plus the spell list and the bestiary.

Two behaviours worth knowing. Reference material ranks below anything a person at your table wrote, so searching for fire answers with the burned-down village before it answers with forty spells — and it is left out entirely when you narrow to one campaign, because spells belong to no campaign. And a result that is part of a longer page scrolls to the right spot rather than dropping you at the top.

Your campaigns

Their members. Nobody else — not other campaigns, not the open internet, and not search engines.

Your posts

The campaign they were written in.

Your characters

You, plus anyone you share a campaign with if the character is marked visible. Nobody at all if it is not.

A published character

Everybody, including search engines. Off by default and never on by accident.

A listed campaign

Its name, description, pitch and member count. Never its wiki, its scenes, or who is in it.

Your profile

Your display name, biography and portrait, at an address anyone with the link can open. It is kept out of search engines, but treat the biography as public writing.

None of this is a setting somebody could leave in the wrong position. Every read is filtered by the database itself, per row, against who is asking — not by the interface remembering to hide things. The handful of addresses a search engine may visit are ones somebody chose to publish.

There is a report link under posts, wiki pages, characters and profiles you did not write, and at the foot of every thread — including one you started, since you cannot lock your own thread unless you run the campaign. Reports go to the moderators of the campaign they came from, who can lock a thread or remove a post, and site staff have a queue of their own for anything larger than one table.

A suspension stops you contributing rather than locking you out: you can still read the wiki and the boards, and you can still export everything you have written. You cannot post, edit or roll until it lifts, and the screen you land on says when that is and what reason was given.

If something needs a person rather than a queue, the addresses are on the contact page and the rules are the content policy.

One button in account settings gives you a single file containing everything you have written: your profile, every character with its full sheet and play state, threads you started, every post including ones since deleted, your wiki and post revisions, every dice roll, your memberships, applications, session votes, timeline events, maps and pins, and your notifications.

It is plain JSON with a described section per table, and it is generated from your session — there is no account id in the address to tamper with. A suspended account can still use it, because somebody suspended is exactly the person likely to want their writing out.

Also one button, and it asks for your username and your password before it does anything.

Campaigns with another owner carry on without you. Posts you have written stay where they are, because they are half of somebody else’s scene. Export first if you want a copy; afterwards there is nothing to export from.