Privacy notice

How the Call of Cthulhu guest plugin handles information.

Effective 1 October 2026. The service is provided by Quest Portal, Inc., 2261 Market Street Unit 4404, San Francisco CA, 94114. Contact hi@questportal.com. This notice describes the guest plugin specifically. Quest Portal’s company privacy policy provides its general processing, transfer, legal-basis, rights, and contact information. Services listed there for other Quest Portal products are not necessarily used by this guest plugin.

Local investigator drafts

Investigator drafts and interface preferences are stored in your browser where local storage is supported. This guest release has no server-side investigator library or automatic cross-device synchronization. Clearing browser data can remove drafts. You control exported JSON files and where you store or share them.

Chat tools and attachments

We process tool arguments needed for your requested action, such as investigator names, check values, labels, and damage formulas. Creating a guest draft does not create a saved server-side investigator. Unconnected dice calls do not retain application roll history. Hosting infrastructure still processes technical request information.

Explicitly attaching a draft shares it with the chat host. Messages, attachments, and results delivered to that host follow its own policies and controls. Opening a sheet does not automatically expose its full contents to the assistant.

Optional private sessions

Private sessions store roll records, subscriptions, and pending event deliveries on Cloudflare. Roll records can include labels and supplied investigator names or identifiers. Subscriptions deliver events to the subscribing host’s callback. A session token grants access to its session: share it only with intended participants.

Sessions expire after 24 hours and retain at most their latest 1,000 rolls. Ending a session or expiry clears active session data. Disconnecting a sheet stops that sheet’s future sharing but does not end the session for everyone. Delivered messages remain in their destination chats.

Cloudflare’s SQLite storage provides point-in-time recovery over the preceding 30 days. Clearing active session data does not guarantee immediate removal of every provider recovery copy.

Hosting and diagnostics

Cloudflare hosts the service and processes technical information needed to deliver and protect it. Diagnostic logs may include errors and technical operational information. Workers and container diagnostic logs on the current paid plan have seven-day retention under Cloudflare’s documented policy. The guest application does not integrate a separate advertising, session-replay, or product-analytics tracker. Provider operational metrics and technical processing are separate from application analytics.

See Cloudflare’s log retention documentation and storage recovery documentation.

Support and your choices

Support emails are handled under the company privacy policy and are separate from temporary play sessions: the 24-hour session expiry does not apply to correspondence. Do not send passwords or session tokens by email.

You can export or delete local drafts, decline attachment to chat, disconnect a sheet, and end a session. For access, correction, deletion, or other applicable privacy rights, contact hi@questportal.com. We cannot retrieve a browser-local investigator from a server library. For delivered chat content, also use the host’s privacy controls. Further rights and request information is in the company privacy policy.