Privacy Policy

Last updated: 16 August 2026

XP Grinder respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information XP Grinder collects, why we collect it, how it is used, who it may be shared with, how long it may be retained and the rights available to you.

This policy applies when you visit the XP Grinder website, create or use an XP Grinder account, participate in campaigns or community features, purchase XP Grinder Legend, contact us, or otherwise use our services.

XP Grinder is an 18+ platform. You must be aged 18 or over to create an account.

1. Who We Are

XP Grinder is an online platform that helps adult tabletop role-playing game players and Game Masters discover, create and connect with campaigns and other users.

For the purposes of UK data protection law, the operator of XP Grinder is the data controller responsible for personal information processed through XP Grinder, except where another organisation acts as an independent controller for its own processing.

Our details are:

Trading name: XP Grinder
Operator/Data Controller: Jack Turner
Address: 17 Ivy Bank, Witham St Hughs, Lincoln LN6 9FU
Email: jack@purplebeagle.co.uk

You can also contact us through the XP Grinder Contact page.

2. Information We Collect

The information we collect depends on how you use XP Grinder.

Account Information

When you create or maintain an XP Grinder account, we may collect information including:

Username
Email address
Password in securely protected/hashed form
Date of birth or age information
Account creation date
Membership status
Account preferences
Account and security information

Passwords are not intended to be stored by XP Grinder in readable plain text.

Age Information

XP Grinder is restricted to users aged 18 and over.

We may therefore collect your date of birth or other age-related information during registration or account use for the purpose of applying our age restriction.

Your date of birth is not intended to be displayed publicly on your XP Grinder profile unless we expressly provide such a feature and you choose to use it.

You must provide accurate age information.

3. Profile Information

When you create or edit your XP Grinder profile, you may provide information including:

Display name
Username
Profile photograph or avatar
Biography/about information
Timezone
General location
Preferred tabletop game systems
Preferred game formats or platforms
Gaming preferences
Player/Game Master preferences
Availability
Looking-for-game status
Other profile information you choose to provide

Some profile information is designed to be visible to other XP Grinder users.

Where information will be publicly or socially visible, you should avoid including sensitive personal information that you do not want other people to know.

4. Campaign Information

If you create, manage, apply to or participate in campaigns, we may process information including:

Campaign name
Campaign description
Game system and edition
Game Master
Campaign image
Online or in-person status
General campaign location
Schedule and availability
Player requirements
Campaign applications
Application status
Campaign membership
Matches between users and campaigns
Campaign preferences
Other information submitted as part of campaign management or matchmaking

Some campaign information is intended to be visible to other users so that they can discover and evaluate campaigns.

5. Messages and Party Chat

XP Grinder may provide communication features such as Party Chat.

When you use these features, we may process:

The content of messages you send
Your username and profile information associated with the message
The campaign or conversation the message relates to
Date and time information
Replies and other interactions
Relevant technical information

Messages may be visible to other members of the relevant campaign or conversation.

XP Grinder does not intend Party Chat to be used for highly sensitive or confidential information. You should avoid sharing information such as passwords, payment card information, financial details or other information that you would not want other participants to receive.

We may access or review communications where reasonably necessary to investigate a report, enforce our Terms & Conditions, protect users, address security issues or comply with applicable law.

We do not claim that every message is actively monitored.

6. Information About Other Users

XP Grinder enables users to interact with other people.

Information you voluntarily make available through your profile, campaign listings, applications, Party Chat or other community features may therefore be viewed by other users according to the functionality and privacy settings provided by XP Grinder.

You should consider this before submitting personal information.

XP Grinder cannot control what another person does with information that you voluntarily disclose to them outside the platform.

7. Location Information

XP Grinder may collect general location information where you provide it for features such as discovering nearby campaigns or identifying where an in-person campaign takes place.

You should avoid publishing your exact home address as your campaign location.

Where possible, XP Grinder is designed to use general location information appropriate for matchmaking rather than requiring users to publicly disclose an exact residential address.

We may also derive an approximate location from technical information such as an IP address for purposes such as security, fraud prevention or analytics.

8. Legend Membership and Payments

If you purchase XP Grinder Legend, we process information necessary to create and manage your membership.

This may include:

Your XP Grinder user ID
Email address
Legend membership status
Subscription status
Subscription start/end information
Stripe Customer ID
Stripe Subscription ID
Payment status
Billing-related information
Cancellation status

Payments are processed by Stripe.

XP Grinder does not directly receive or store your complete payment card number. Payment information is submitted to and processed by Stripe.

Stripe may process personal information as a processor and/or independent controller depending on the particular activity. Stripe explains its own processing and privacy practices in its privacy documentation.

Stripe Privacy Policy

9. Contact and Support Information

If you contact XP Grinder, we may collect:

Your name
Email address
XP Grinder username
The contents of your enquiry
Information you provide about your account or a problem
Relevant correspondence
Attachments or screenshots you voluntarily provide

We use this information to respond to your enquiry and, where applicable, investigate and resolve the issue.

10. Reports and Moderation

If you report another user, campaign, message or other content, we may process information including:

Your account information
The account or content being reported
Your reason for making the report
Relevant messages or content
Supporting information you provide
Our investigation and moderation records
Action taken as a result

We may also process information about you where another user submits a report concerning your account or content.

We use this information to enforce our Terms & Conditions, protect the platform and its users, investigate suspected misuse and respond appropriately to safety or legal concerns.

We will not necessarily disclose the identity of a person making a report to the person being reported.

11. Technical and Security Information

When you access XP Grinder, certain technical information may be collected automatically.

This can include:

IP address
Browser type
Device information
Operating system
Pages requested
Date and time of requests
Login attempts
Error and diagnostic information
Security events
Server logs
Cookie and session identifiers

We use this information to operate, maintain and secure XP Grinder, investigate technical problems, prevent abuse and understand how the service performs.

Security services used by XP Grinder may also process technical information to identify malicious traffic, unauthorised login attempts or other threats.

12. Cookies

XP Grinder uses cookies and similar technologies.

These may include cookies that are necessary for:

Logging users into their accounts
Maintaining sessions
Website security
Remembering cookie choices
Operating WordPress and XP Grinder functionality

We may also use optional cookies for purposes such as analytics.

As identified in our current cookie configuration, Google Analytics may use cookies such as _ga and related identifiers to measure website usage.

Where UK law requires consent for non-essential cookies or similar technologies, they will not be used until the required consent has been obtained.

You can manage your choices using the cookie consent controls available on XP Grinder.

For more information, see our Cookie Policy.

The ICO states that users must be informed about cookies and what they do, and that non-strictly-necessary cookies generally require the user’s agreement.

13. Analytics

Where you consent, XP Grinder may use analytics services such as Google Analytics to help us understand how people use the website.

Analytics information may include:

Pages viewed
General interactions
Approximate geographic information
Device/browser information
Referral information
Session information

We use this information to understand how XP Grinder is used and improve the website and its features.

Where analytics relies on cookies or similar technologies requiring consent, we use consent as the relevant basis for storing/accessing those technologies.

You can change your cookie preferences using XP Grinder’s cookie consent controls.

14. Why We Use Your Personal Information

We use personal information for purposes including:

Creating and maintaining XP Grinder accounts.
Providing profiles.
Providing campaign discovery and creation.
Processing campaign applications.
Providing matchmaking functionality.
Providing Party Chat and communication features.
Providing free and Legend membership features.
Processing and administering Legend subscriptions.
Applying the XP Grinder 18+ age requirement.
Providing customer support.
Responding to enquiries.
Maintaining website security.
Preventing fraud and abuse.
Investigating reports.
Enforcing our Terms & Conditions.
Maintaining and improving XP Grinder.
Complying with applicable legal obligations.
Providing analytics where appropriate consent has been obtained.

We do not sell your personal information.

15. Our Lawful Bases

UK data protection law requires us to have a lawful basis for processing personal information. Consent is not required for every type of processing; the appropriate basis depends on why the information is being used.

Depending on the activity, XP Grinder may rely on the following bases.

Contract

We process information where necessary to provide the service you have requested or to take steps at your request before entering into a contract.

This may include:

Creating and operating your account.
Providing profile functionality.
Providing campaign and matchmaking features.
Providing communication features.
Providing XP Grinder Legend.
Managing your subscription.

Legitimate Interests

We may process information where necessary for our legitimate interests or those of others, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

Securing XP Grinder.
Preventing fraud and abuse.
Investigating reports.
Moderating the platform.
Enforcing our Terms & Conditions.
Maintaining and improving the service.
Diagnosing technical problems.
Protecting XP Grinder and its users.

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against the rights and interests of affected users. ICO guidance requires organisations relying on this basis to identify the interest, demonstrate necessity and balance it against people’s rights and freedoms.

Consent

We may rely on consent where you have a genuine choice about processing, including for certain optional cookies, analytics or communications.

Where we rely on consent, you can withdraw it at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

Legal Obligation

We may process information where necessary to comply with a legal obligation that applies to us.

16. Information We Require

Certain information is required for us to provide XP Grinder.

For example, we cannot normally create an account without the account information required by the registration process.

Age-related information may also be required because XP Grinder is restricted to adults aged 18 and over.

If you do not provide required information, you may not be able to create an account or use the relevant feature.

Other profile information may be optional.

17. Special Category and Sensitive Information

XP Grinder is not intended to collect sensitive information unless it is genuinely necessary for a feature or voluntarily disclosed by a user.

Please carefully consider what you put in profiles, campaign descriptions, applications and Party Chat.

In particular, avoid unnecessarily sharing information about matters such as your health, religious or philosophical beliefs, political opinions, sexual life or other highly sensitive personal circumstances.

Where we become required to process special category information, we will do so only where an appropriate legal basis and additional condition apply.

18. Who We Share Information With

We may share personal information with organisations that help us operate XP Grinder.

These may include providers of:

Website hosting
Cloud/server infrastructure
Website security
Email delivery
Payment and subscription processing
Analytics
Technical support
Website software and services

For example, Stripe receives information necessary to process and administer Legend subscriptions.

We may also disclose information:

Where required by law.
In response to a valid legal request.
Where reasonably necessary to establish, exercise or defend legal rights.
Where permitted or required in connection with serious fraud, security or safety concerns.
In connection with a sale, restructuring or transfer of the XP Grinder service, subject to appropriate safeguards.

We do not sell lists of XP Grinder users or their personal information to advertisers.

19. International Transfers

Some service providers used by XP Grinder may process personal information outside the United Kingdom.

Where personal information is transferred internationally and data protection law requires safeguards, we will take appropriate steps to ensure the transfer is protected.

These may include transfers to countries covered by UK adequacy regulations or the use of appropriate contractual safeguards.

Information about safeguards applicable to a particular transfer can be requested using our contact details.

20. How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, security and dispute-resolution requirements.

The precise period depends on the type of information.

In general:

Account and profile information
Usually retained while your XP Grinder account remains active.

Campaign information
May be retained while a campaign remains active and for a reasonable period afterwards.

Party Chat and user-generated content
May remain while necessary to provide the relevant community/campaign functionality and may be retained for a reasonable period after a campaign ends or an account is closed, particularly where needed for moderation, safety, disputes or legal obligations.

Payment and subscription records
May be retained for the period required for accounting, tax, fraud prevention, dispute handling and other applicable legal requirements.

Support correspondence
May be retained for a reasonable period after your enquiry has been resolved.

Security and server logs
Are generally retained for a limited period appropriate to security, troubleshooting and abuse prevention.

Moderation and enforcement records
May be retained for a reasonable period where necessary to enforce restrictions, investigate repeated misuse or protect users.

Where information is no longer required, we will delete or anonymise it where reasonably practicable.

The ICO requires privacy information to specify retention periods or, where a fixed period cannot be given, the criteria used to determine them.

21. Account Deletion

You may request deletion of your XP Grinder account.

Deleting your account does not necessarily mean every piece of information is immediately removed from every system.

We may retain limited information where reasonably necessary to:

Comply with legal obligations.
Maintain financial or transaction records.
Establish or defend legal claims.
Prevent fraud or abuse.
Enforce a suspension or permanent ban.
Protect users or the security of XP Grinder.

Where information can be anonymised instead of retained in identifiable form, we may do so.

Content that formed part of interactions involving other users may also require special handling to preserve the integrity of conversations or records.

If you have an active Legend subscription, account deletion and subscription cancellation are separate actions. You should cancel your Legend subscription through My Account → Manage Legend Subscription before deleting your account.

22. Security

We use reasonable technical and organisational measures intended to protect personal information against:

Unauthorised access
Unlawful processing
Accidental loss
Destruction
Alteration
Disclosure

These measures may include access controls, authentication, website security software, backups, encrypted connections and security monitoring.

However, no internet service can guarantee absolute security.

You are responsible for keeping your XP Grinder password secure and should not share it with other people.

23. Your Data Protection Rights

Depending on the circumstances and the lawful basis involved, UK data protection law may give you rights including:

Right of access – to ask for a copy of personal information we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to ask us to delete personal information in certain circumstances.
Right to restriction – to ask us to restrict processing in certain circumstances.
Right to object – to object to certain processing, including processing based on legitimate interests in appropriate circumstances.
Right to data portability – to receive certain information in a portable format where the right applies.
Right to withdraw consent – where processing relies on consent.

These rights are not absolute and the rights available can depend on the lawful basis and circumstances of the processing.

To exercise a right, contact us using the details in this Privacy Policy.

We may need to confirm your identity before responding to a request.

Your Right to Object

Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing in certain circumstances.

24. Automated Decision-Making and Matchmaking

XP Grinder may use information such as gaming preferences, campaign requirements, location, availability or other profile information to help users discover potentially relevant campaigns or players.

Unless we expressly tell you otherwise, XP Grinder does not use solely automated decision-making that produces legal or similarly significant effects on you.

Matchmaking or recommendations do not guarantee compatibility, acceptance into a campaign or any particular outcome.

Game Masters and users ultimately make their own decisions about who they interact or play with.

25. Children

XP Grinder is intended only for people aged 18 and over.

People under the age of 18 must not create or operate an XP Grinder account.

We may collect age-related information to apply this restriction.

If we reasonably believe an account belongs to somebody under 18, we may restrict or remove the account and take appropriate steps concerning the information associated with it.

If you believe somebody under 18 is using XP Grinder, please contact us.

26. Third-Party Links

XP Grinder may contain links to websites or services operated by other organisations.

Their collection and use of personal information is governed by their own privacy policies.

We encourage you to review the privacy information provided by third-party services before providing them with personal information.

27. Changes to This Privacy Policy

We may update this Privacy Policy as XP Grinder develops, our processing changes or applicable legal requirements change.

The latest version will be published on this page and the Last updated date will be changed.

Where a change materially affects how we use your personal information, we will provide additional notice where appropriate.

The ICO recommends regularly reviewing privacy information and bringing new uses of people’s information to their attention before beginning the new processing.

28. Complaints

If you have a concern about how XP Grinder uses your personal information, please contact us first so that we can investigate.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Information Commissioner’s Office

You do not have to contact us before making a complaint to the ICO.

29. Contact Us

For questions about this Privacy Policy, requests concerning your personal information or other privacy matters, contact:

Trading name: XP Grinder
Operator/Data Controller: Jack Turner
Address: 17 Ivy Bank, Witham St Hughs, Lincoln LN6 9FU
Email: jack@purplebeagle.co.uk

Alternatively, you can use the Contact page on XP Grinder.