EspañolEnglish
Privacy policy
Last updated: 9 August 2026
This policy is published in Spanish and English. Both versions describe the same processing; in the event of any discrepancy, the Spanish version prevails, as Spanish law governs this site.
1. Summary
D20 Atlas runs entirely in your browser. Your campaigns, maps, locations, characters and notes are stored only on your own device using IndexedDB, the browser's local database. There is no application server, there are no user accounts, and that content is never transmitted to us or to any third party. We cannot see it, we do not store it, and we cannot recover it if you lose it.
The only personal data processed is what strictly arises from browsing this website, described below.
2. Data controller
- Controller
- Sebastian Alejandro Espin Novillo
- Tax ID (NIF)
- Z4295424H
- Address
- Granada, Spain
- privacy@solutionar.eu
- Trade name
- Solutionar
3. What data is processed, and why
3.1. Your campaign data (not processed)
Everything you create in the app — maps and images you upload, locations, NPCs, monsters, characters, notes and sounds — is stored in IndexedDB in your browser. This information never leaves your device, so it does not constitute processing by us.
You can delete it at any time by clearing this site's data from your browser settings. That action is irreversible.
3.2. Website usage statistics
We use Plausible Analytics to understand, in aggregate, how many visits the site receives. Plausible uses no cookies, creates no persistent identifiers, and does not track visitors across websites or over time. Data is collected in aggregate and anonymous form (page views, approximate country, device type and referring page) and does not allow individuals to be identified. The service is delivered from servers located in the European Union.
3.3. Web fonts
The site loads the Roboto typeface from Google Fonts. In order to serve the file, Google receives your connection's IP address. You can review Google's processing in its privacy policy.
3.4. Server logs
The site is hosted on Netlify, which generates technical access logs (IP address, date and time, requested resource and user agent) for the purpose of providing the service and keeping it secure.
3.5. Email correspondence
If you write to the address above, we will process the data you provide for the sole purpose of answering your enquiry. It is not used for any other purpose and is not disclosed to third parties.
4. Legal basis
| Processing | Legal basis (GDPR) |
|---|---|
| Aggregated, cookieless statistics | Legitimate interest — Art. 6(1)(f) |
| Technical access logs | Legitimate interest — Art. 6(1)(f) |
| Answering email enquiries | Consent — Art. 6(1)(a) |
The legitimate interest consists of keeping the website running and secure and understanding its use in aggregate, without profiling or identifying individuals.
5. Cookies
This website does not use cookies for tracking, advertising or analytics, which is why no consent banner is shown.
The app does use browser local storage — IndexedDB, localStorage and BroadcastChannel — which is technically essential in order to save your campaigns and to keep the game master window in sync with the player window. This is local storage on your device, not cookies, and it is not transmitted to any server.
6. Retention
- Your campaign data: stays in your browser until you delete it. We have no control over it whatsoever.
- Aggregated statistics: retained in aggregate form that cannot be traced back to identifiable individuals.
- Access logs: retained for the period set by the hosting provider for technical and security purposes.
- Emails: retained for as long as the enquiry lasts and thereafter for the applicable statutory limitation periods.
7. Recipients
We do not sell, rent or share personal data. Only the providers necessary to deliver the service are involved, acting as processors: Netlify (web hosting), Plausible Analytics (aggregated statistics) and Google Fonts (font delivery).
8. Children
The website is not specifically directed at children under 14 and does not knowingly collect their data. As there is no registration and there are no user accounts, no personal information is requested in order to use the app.
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to privacy@solutionar.eu, stating which right you wish to exercise.
Please note that, since there are no user accounts and no campaign data in our systems, in most cases we will hold no personal information associated with you that we could provide or delete.
If you believe the processing does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country of residence.
10. Changes to this policy
This policy may be updated to reflect changes to the service or to applicable law. The version in force is always the one published on this page, with its update date shown.