Privacy Policy

1. Who we are (data controller)

The operator of the L.E.O. (Local Expedition Organizer) website, account services, and related products at leoapp.eu (the controller of personal data described here) is the person or business behind L.E.O. You can contact us at support@leoapp.eu for questions about this policy, your data, or your rights. For purchases processed by Polar, that company is an independent business that processes payment and order data under its own policies; see Polar’s privacy policy for how they use buyer data in checkout and billing portals.

Legal entity: Local Expedition Organizer OÜ
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115
Registry code: 17490066
D-U-N-S: 988009565
Registry entry: Estonian e-Business Register

2. Overview: offline-first, minimal cloud

L.E.O. is designed as an offline-first application. Your maps, prep, and most campaign or game data are stored locally on your device or in your browser, not on our servers, unless a feature you choose (like sync or a future add-on) clearly sends data by design. We are not in the business of reading your private campaign content. See also Terms of Service and refund & cancellation for the commercial side of the service.

3. What we process and why (account & service)

Depending on what you use, we may process:

• Account data: such as your email, display name, password or auth keys (stored as hashes where applicable), and session information — to create and secure your account, reset password, and provide access to the Services.
• Service & technical data: such as your IP address, user-agent, approximate timing of requests, and error logs in our backend, to run the service, prevent abuse, support tickets, and security.
• Billing and licensing metadata: we do not store your full card number on our own servers. Orders and payments for products that use Polar are processed by Polar; we may receive a license key, product identifier, and subscription or purchase state through webhooks and API so we can unlock features and your account — under our refund & cancellation and terms terms.

4. Legal bases (for users in the EEA / UK)

Where the GDPR and similar law apply, we rely on: contract (what we need to provide the service you asked for), legitimate interests in securing and improving the service and preventing abuse (balanced with your rights), and where required, consent (e.g. non-essential cookies if we use them). We process data as required by law where that applies (e.g. tax or law-enforcement rules).

5. Local content & web storage & account deletion

All generated scenes, maps, and similar content remain on your local hardware or in IndexedDB / browser storage for the web app until you clear it or uninstall, unless a feature you enable sends data out explicitly. You control exports and deletions on your side. To delete your L.E.O. account on our services, use the account area in the app or website (where a delete or close-account option is available) or request it by email at support@leoapp.eu — as described in our terms, account deletion in our system does not by itself remove files already stored only on your device.

6. Recipients, transfers, and processors

We use infrastructure and payment partners that may process data on our instructions (e.g. hosting, email delivery, Polar for checkout). If data is stored or processed outside the EEA, we do so in line with the GDPR’s transfer tools (e.g. standard clauses) or other lawful mechanisms, as appropriate to the service we use. Polar’s own documentation describes its international processing.

7. Retention

We keep account and technical logs only as long as needed for the purposes above (e.g. account lifetime, support, and legal or tax record requirements). You may request deletion of your account where our systems allow; some minimal records may be retained if the law says we must. Local app data is under your control on your device.

8. Your rights (EEA / UK and similar)

Depending on your location, you may have the right to access, rectify, delete, port, or restrict processing of your personal data, and to object to certain processing, and to lodge a complaint with a supervisory authority. To exercise these, email support@leoapp.eu. We will respond in line with applicable law.

9. Cookies and similar technologies (website)

Our public website may use the minimum needed for the site to work (e.g. session, security) and, if we add it, a simple analytics or preference cookie. If we use non-essential cookies, we will align with the consent requirements that apply in your country (e.g. banner for EEA) where the law so requires. Our core product’s local-first design keeps most gameplay data off our servers, as above.

10. No intrusive analytics in the product (by design)

We do not run noisy cross-site ad tracking in the L.E.O. app for your private prep. We may use limited technical and server logs to keep the service safe and to fix bugs, as described in section 3.

11. Children

The Services are not intended for people under the age that allows a binding contract in your country, without parental or guardian involvement where the law so requires. If you believe a child’s data was provided to us in error, contact support@leoapp.eu.

12. Changes to this policy

We will post the updated version on this page and change the “Last updated” date. If the law in your area requires, we will provide an additional notice for material changes. Continued use of the website or Services may be subject to the updated terms as described in our Terms of Service where the law so allows.

13. Policy for Leo App

Leo App may request access to your device camera only to scan QR codes used to configure Foundry/VTT connections and related app setup. Leo App does not use the camera to capture or store photos or videos for this feature. Camera input is used only while the user actively opens the QR scanning feature. If QR code contents are successfully scanned, the decoded information may be used to configure connection settings inside the app. Leo App does not sell camera data and does not share camera images or video with third parties. If you have questions about privacy or data handling, contact: support@leoapp.eu