MageHand — Privacy Policy

Effective 18 August 2026

MageHand is a companion app for DiceCloud v2 character sheets. It is built so that the developer receives no data about you at all. This page explains exactly what the app does with the information you give it.

What the app collects, and where it goes

When you sign in, you enter your DiceCloud username or email and your password. These are sent once, over HTTPS, directly to the DiceCloud server you chose — dicecloud.com by default, or a self-hosted server whose address you typed yourself. In exchange the server returns a session token. Your password is not stored anywhere by the app.

Nothing you enter — credentials, character data, settings — is ever transmitted to the developer of MageHand or to any third party. The app contains no analytics, no crash reporting, no advertising SDKs, and no tracking of any kind. Its only network traffic is between your device and the DiceCloud server you selected.

What is stored on your device

• Your session token, encrypted at rest using the Android Keystore (hardware-backed where the device supports it).
• Your username and server address, stored as labels so the app can show which account is signed in.
• A local cache of your character sheet so it remains viewable offline, plus your tracker layout preferences. These never leave the device.

Your DiceCloud data

Your characters live on the DiceCloud server you signed in to, under that server's own terms and privacy practices. The in-app Sheet view displays that server's web interface; MageHand does not alter, collect, or redistribute what it shows. For dicecloud.com, see the DiceCloud project's own policies.

Deleting your data

• Sign out (Settings → account → sign out): deletes the session token, the cached sheet, and the in-app browser session from your device, and revokes the session on the server.
• Uninstalling the app removes everything it stored.
• Deleting your DiceCloud account is done on your DiceCloud server, not in this app.

Permissions

The app requests exactly two Android permissions: INTERNET and ACCESS_NETWORK_STATE (to show connection status). It requests no access to location, contacts, storage, camera, or anything else.

Children

MageHand is not directed at children under 13 and collects no data from anyone.

Changes

If a future version of the app changes any of the above, this page will be updated before that version is released, with a new effective date.

Contact

Questions about this policy: legal@stolzenberg.co.za