Privacy Policy
Last updated: October 30, 2026
Questing Live (questing-live.com) is a small, independent site for interactive stories, run by one person. This page explains what the site stores about you, why, and how to have it removed. Questions or requests: zzz574031@gmail.com.
What we collect
Your account
- Your login (your public name on the site) and your email address, which stays private and is used only to sign in and to send account emails.
- Your password, stored only as a one-way hash (bcrypt). Nobody, including us, can read it back.
- Whether your email address has been verified.
Signing in with Google
If you choose “Continue with Google”, Google shares your email address, name, and profile picture link with us, along with an account identifier and the sign-in tokens Google issues. We only ask for this basic profile (the openid email profile scopes) and use it only to create your account and sign you in. We don’t access your Gmail, contacts, files, or any other Google data, and we don’t use Google user data for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What you post and do
- Stories and their updates, comments and replies, reactions, poll votes and suggestions, dice rolls, and feedback you send.
- Stories and authors you follow, notifications sent to you, and your settings (such as whether your favorites are public and your remembered composer settings).
Technical information
- IP addresses. When you comment or take part in a story, we store a keyed one-way hash of your IP address and a masked version (for example
203.0.113.x). Story authors see only the masked version, to block abuse in their own stories. Rate limits use the same kind of hash. We don’t keep raw IP addresses with your content. - Cookies. A sign-in cookie keeps you logged in. If you vote or roll dice without an account, a cookie holding a random identifier (
questing_voter, kept for one year) makes sure each browser votes once. Your light/dark theme choice is kept in your browser’s local storage. There are no advertising, analytics, or tracking cookies.
How we use it
- To run the site: show stories, count votes, roll dice, deliver notifications.
- To verify your email address and send account emails.
- To prevent spam and abuse: rate limits, and bans that story authors set in their own stories.
We don’t sell your data and we don’t show ads.
Who can see it
- Everyone: your login, published stories, comments, votes as part of totals, dice rolls, and your followed stories and authors if you make your favorites public.
- Story authors: the masked IP behind comments in their stories, for moderation.
- Service providers, only as needed to run the site: our hosting provider (the server the site runs on), Resend (sends verification emails), and Google (if you sign in with Google).
- Authorities, if the law requires it.
How long we keep it
Account data and content are kept while your account exists. Verification links expire after 24 hours, and rate-limit records are cleared within hours. When you ask us to delete your account, we delete it along with your stories, comments, votes, and other content within 30 days.
Your choices and rights
- Change your email or password on your profile page.
- Edit or delete your own comments at any time.
- Unpublish your stories or individual updates.
- Ask for a copy of your data, a correction, or deletion of your account by emailing zzz574031@gmail.com from the address on your account.
Security
The site is served only over HTTPS, passwords and IP addresses are stored as hashes, and access to the server is restricted. No system is perfectly secure, but we take reasonable care with your data.
Children
Questing Live isn’t intended for children under 13, and we don’t knowingly collect their data. If you believe a child has created an account, contact us and we’ll delete it.
Changes
If this policy changes, the new version will be posted here with a new “Last updated” date.