Gramarye Games Privacy Policy

Effective date: November 4th, 2026


Who we are

Gramarye Games is an independent tabletop roleplaying game publisher owned and operated by Sean Hembree in Overland Park Kansas, United States. In this policy, “we,” “us,” and “our” mean Gramarye Games.

This policy explains how we handle personal information collected through https://www.gramarye.games, its Dungeon Pattern Ledger, newsletter subscriptions, and related communications. Gramarye Games is responsible for the personal information it decides how and why to use. For privacy questions or requests, contact sean@gramarye.games.

Information we collect and how we use it

Website visits. Squarespace hosts our website and provides website analytics. When you visit, Squarespace receives information such as your IP address, browser, device and network details, referring page, pages viewed, and timestamps. Analytics may also record clicks, scrolling, and searches. We use this information to understand site traffic, improve content, diagnose problems, and maintain the site. Squarespace also processes certain visitor information for its own purposes, including platform security, as described in its privacy policy.

Newsletter subscriptions. Our newsletter signup uses Supascribe to collect and pass subscription information to Substack. If you subscribe, we receive your email address and subscription details, along with any name or profile information made available to us. Substack may provide engagement information, including email opens, link clicks, and publication views, using tracking pixels and similar technologies. We use this information to deliver the newsletter, manage subscriptions, and understand which content interests readers.

Messages and support. If you email us, we receive your email address, any name you provide, and the contents of your message and attachments. We use this information to respond, provide support, and keep relevant correspondence.

Dungeon Pattern Ledger. The Ledger retrieves its content and assets from Supabase. These requests disclose technical information, such as your IP address, to the hosting service. If you choose to remember access, the Ledger stores an access credential in your browser’s local database so you can return without entering the access password again. You can remove it using “Lock & forget” or by clearing this site’s browser data.

Purchases through other platforms. The site links to our itch.io shop. Purchases made there are processed by that platform and its payment providers. We may receive purchase and contact details made available to sellers, or information you provide when seeking purchase support. We use those records to assist you and maintain business records. Please consult the platform’s notice for its payment and account data practices.

Providing information for a newsletter subscription or inquiry is voluntary. We need a working email address to deliver the newsletter or reply to you. You can browse public pages without subscribing.

Services that receive information

We use the following providers for the activities described above. Their privacy notices explain their own processing and privacy choices:

Squarespace — website hosting and analytics

Supascribe — embedded newsletter signup

Substack — newsletter delivery and subscriber management

Supabase — Dungeon Pattern Ledger content hosting

itch.io — purchases made through our linked shop

Email and technical support providers may also process information needed to deliver communications and maintain our services. Providers processing information on our behalf receive it for those services. Some providers also act independently for purposes described in their own notices.

We may disclose relevant information when required by law, to respond to valid legal requests, or when reasonably necessary to protect rights, investigate fraud, or secure our services. If the business is transferred or reorganized, information may transfer with it, subject to applicable law.

Gramarye Games does not sell or rent personal information or share it for cross-context behavioral advertising.

Cookies and browser storage

Squarespace uses cookies and similar technologies to operate the site, maintain security, and measure traffic and activity. Embedded services, including the newsletter signup, can receive technical information when they load, even if you do not submit a form. The Ledger’s remembered-access feature uses browser storage as described above.

Squarespace lists its cookie names, purposes, and durations here

You can use your browser settings to block or delete cookies and clear other site storage. This may affect site features or remove remembered access. If a cookie preference control is displayed on the site, you can also use it to manage the choices it offers. Browser controls and site cookie choices may not control every separately embedded service.

How long we keep information

We retain personal information for the purposes described in this policy, taking account of the type of information, the ongoing relationship with you, support needs, security, and applicable legal obligations.

Subscriber information is retained while needed to manage your subscription. After you unsubscribe, we may retain a limited record to honor that choice and document consent. Correspondence and purchase records are retained as needed to resolve inquiries, handle disputes, and satisfy applicable recordkeeping requirements. Providers may retain logs and backups according to their service terms and retention practices.

Remembered Ledger access stays in your browser until removed, cleared by your browser, or invalidated and removed when the Ledger next checks it. We delete or anonymize personal information when it is no longer needed, subject to applicable retention requirements.

Your choices and privacy rights

You can unsubscribe from the newsletter using the link in a newsletter email, your Substack subscription settings, or by contacting us. You may still receive replies or service messages needed to address an inquiry you initiated.

Depending on your location and the law that applies, you may have rights to access or obtain a copy of your information, correct it, request deletion, restrict processing, or receive information in a portable format. You may also have rights to opt out of certain processing and appeal a denied request.

You may object to processing based on legitimate interests and to direct marketing where applicable law provides that right. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing that was lawful before withdrawal.

Send requests to sean@gramarye.games. We may ask for information reasonably needed to verify your identity or authority. We will respond within applicable legal deadlines and will not unlawfully discriminate against you for exercising your rights. Some requests are subject to legal exceptions.

You may complain to the privacy authority where you live. UK visitors can contact the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. EEA visitors can contact their national data protection authority. For information a platform handles independently, you may also need to contact that platform.

Legal bases and international processing

Where applicable data protection law requires a legal basis, we rely on consent for newsletter marketing and consent-dependent tracking; legitimate interests in responding to inquiries, maintaining security, and operating and improving our services where those interests are not overridden by your rights; performance of a contract where necessary to provide a requested service; and compliance with legal obligations for required records or disclosures.

We are based in the United States, and our providers operate in multiple countries. Your information may be processed outside your home country, where privacy laws may differ.

Visitors can request details by emailing sean@gramarye.games.

Security and children

We use reasonable safeguards appropriate to the information we handle. No online service or transmission method can be guaranteed completely secure.

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Other services and policy changes

Linked services, including our separately hosted Dungeon Layout Generator, may collect additional information under their own notices. This policy describes our handling of the information covered here.

When this policy changes, we will revise its date and provide additional notice or obtain consent where required by law. Contact sean@gramarye.games with questions.