Privacy Policy
Last updated: October 2026
Steven J. Morris ("we," "us," or "our"), who writes through DragonLore LLC, operates sjmorriswrites.com and the Arena game at tfrpg.sjmorriswrites.com. Your privacy matters to us. This page explains what we collect in each place, how we use it, and your choices.
1. What we collect, by where you meet us
The newsletter. If you subscribe, we collect your email address through our email provider, Kit (ConvertKit). We use it to send newsletters and updates, and you can unsubscribe at any time using the link in every email.
This website. We may use cookies and tracking tools, such as the Meta Pixel or similar, to understand traffic and improve our content and advertising. These tools may collect your browser type, IP address (approximate location), the pages you visit, and time spent on the site.
The Arena game (tfrpg.sjmorriswrites.com).
Your saved game. When you play, the Arena gives your browser a random ID in a cookie so it can save your progress. We store your level, progress, score and display name. Your display name appears on the public leaderboard, so please don't use your real name. We don't store your IP address or browser details with your game.
Linking an email (optional). If you link an email to keep your game on another device, we store it with your game and use it to send you a sign-in link. If you also choose the newsletter, your email goes to Kit as described above.
Screen size and visit counts. If you tap OK on the Arena's notice, we record your screen size and browser type so the game fits your screen. Nothing that identifies you is stored with it. The Arena also counts visits and where they came from, using Vercel's cookie-free analytics.
Keeping it small. To limit abuse of sign-in emails, we keep a scrambled (hashed) form of your IP address for two days. Games that were never linked to an email are deleted automatically after about 120 days without play.
Ad measurement (Meta Pixel). The Arena may use the Meta Pixel, a small script and cookie from Meta, to measure whether our Facebook and Instagram ads lead people to play. It tells Meta which page you visited, your browser details, and when you finish your first fight. You can change this any time under Battle settings in the Arena. We do not send Meta your name or email.
Advertising. We may share your email address in encrypted (hashed) form with advertising platforms such as Meta, to reach readers with similar interests or to exclude existing subscribers from our ad campaigns.
Our publishing tools. Our tools use the official APIs of Instagram, Facebook, Pinterest, TikTok and YouTube to publish promotional content for authors who connect their own accounts. We store only what is needed to do that: access tokens, post or video titles and IDs, and basic account identifiers such as a channel or page name. We never share it beyond the platform the content was published to. Where a platform's rules require it, our use of this data follows that platform's developer terms. For Google and YouTube, that includes the Google API Services User Data Policy and its Limited Use requirements.
2. How we use your information
Send newsletters and updates, if you opt in.
Run the Arena: save your progress and show the leaderboard.
Improve our content and the game.
Measure advertising performance and understand reader interests.
Match subscribers against advertising platforms to build audiences of readers with similar interests.
We do not sell your personal data.
3. Who handles your data
Kit (ConvertKit): email marketing.
Vercel and Amazon Web Services: host the Arena and store its data, and send its sign-in emails.
Meta/Facebook, Tiktok, and Amazon advertising: ad platforms.
Analytics services: website and Arena visit counts.
Instagram, Facebook, Pinterest, TikTok and YouTube: only for the publishing tools above.
These providers may process information under their own privacy policies.
4. Your choices and rights
Unsubscribe from any email, any time.
Delete your Arena game from inside the game. This removes your progress, your email and your leaderboard entry. Unsubscribing from the newsletter is separate, using the link in any email.
Revoke a connected account at any time in that platform's own settings (for example, myaccount.google.com/permissions for YouTube). Revoking ends our ability to act on your account, and we delete the stored token on our side too.
Ask us to access, correct or delete your personal data: info@sjmorriswrites.com.
5. Security
We take reasonable steps to protect your information, but we can't guarantee absolute security.
6. Changes to this policy
We may update this policy occasionally. Updates will be posted on this page.
Terms of Service — Publishing Tools
These terms apply specifically to the account-connection and publishing tools described in our Privacy Policy (the integrations with Instagram, Facebook, Pinterest, TikTok, and YouTube) — not to this website generally. By connecting an account through these tools, you agree to the following:
• You are responsible for the content you submit for publishing, and for ensuring it complies with each platform’s own terms of service and community guidelines.
• You authorize these tools to publish content to your connected account(s) only as you direct, through the review and approval process built into the dashboard.
• You may revoke access to any connected account at any time, through that platform’s own account settings.
Questions about these terms: contact info@sjmorriswrites.com.