Hosted Subscription Terms

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games. It brings together a campaign wiki written in the browser, where any passage can be shown to one player and hidden from the others; a character builder and character sheets run by a rules engine; an encounter builder and combat tracker; maps; an in-world calendar; and shops and loot for the DM to run.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

Regional prices

In the countries listed below the prices are lower. Paddle decides which price applies from the country it determines for you at checkout, and the checkout shows that price before you pay. Every other country, including every member state of the European Union, pays the prices in the table above.

About 60%: Brazil, Mexico, Colombia, Chile, Malaysia, Thailand and South Africa.

About 40%: India, the Philippines, Indonesia, Vietnam, Nigeria, Egypt, Pakistan, Türkiye, Argentina and Ukraine.

On a regional price the founding rate takes off the same percentage it would take off the standard price of the same configuration.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place. The one exception is a withdrawal under section 6: once the full refund is approved, the founding place is released and its number goes back to the pool.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

You have 14 days from the start of a paid subscription to withdraw without giving reasons. This applies to every customer, wherever you live and whether or not the law gives you a right of withdrawal.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, use Withdraw and get a full refund on your account page, which is shown while the 14 days run, or write to [email protected] within them. The refund is requested from Paddle at once; most are approved within a few days, and we email you when it goes through.

Withdrawing also gives up a founding place, if you hold one, once the refund is approved (section 4.3).

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Traffic between your browser and our servers is encrypted (TLS). Between our own servers it travels over our hosting provider's private network, which we do not separately encrypt. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Opening your content through the Service happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to. Separately, our operators log in to the servers themselves to run, repair and back up the Service; that maintenance access is not logged campaign by campaign.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability, at hearthmoot.betteruptime.com. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal.

When a new version is published, your account page asks you to accept it, and we record which version you accepted and when. If you have not accepted it by the time the change takes effect for you, continuing to use the Service after that counts as accepting it. If you do not agree to the new version, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

Version: 1.5. Date: 2026-10-09.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games. It brings together a campaign wiki written in the browser, where any passage can be shown to one player and hidden from the others; a character builder and character sheets run by a rules engine; an encounter builder and combat tracker; maps; an in-world calendar; and shops and loot for the DM to run.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

Regional prices

In the countries listed below the prices are lower. Paddle decides which price applies from the country it determines for you at checkout, and the checkout shows that price before you pay. Every other country, including every member state of the European Union, pays the prices in the table above.

About 60%: Brazil, Mexico, Colombia, Chile, Malaysia, Thailand and South Africa.

About 40%: India, the Philippines, Indonesia, Vietnam, Nigeria, Egypt, Pakistan, Türkiye, Argentina and Ukraine.

On a regional price the founding rate takes off the same percentage it would take off the standard price of the same configuration.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

You have 14 days from the start of a paid subscription to withdraw without giving reasons. This applies to every customer, wherever you live and whether or not the law gives you a right of withdrawal.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, use Withdraw and get a full refund on your account page, which is shown while the 14 days run, or write to [email protected] within them. The refund is requested from Paddle at once; most are approved within a few days, and we email you when it goes through.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Traffic between your browser and our servers is encrypted (TLS). Between our own servers it travels over our hosting provider's private network, which we do not separately encrypt. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Opening your content through the Service happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to. Separately, our operators log in to the servers themselves to run, repair and back up the Service; that maintenance access is not logged campaign by campaign.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability, at hearthmoot.betteruptime.com. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal.

When a new version is published, your account page asks you to accept it, and we record which version you accepted and when. If you have not accepted it by the time the change takes effect for you, continuing to use the Service after that counts as accepting it. If you do not agree to the new version, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

Version: 1.4. Date: 2026-10-04.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games. It brings together a campaign wiki written in the browser, where any passage can be shown to one player and hidden from the others; a character builder and character sheets run by a rules engine; an encounter builder and combat tracker; maps; an in-world calendar; and shops and loot for the DM to run.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

Regional prices

In the countries listed below the prices are lower. Paddle decides which price applies from the country it determines for you at checkout, and the checkout shows that price before you pay. Every other country, including every member state of the European Union, pays the prices in the table above.

About 60%: Brazil, Mexico, Colombia, Chile, Malaysia, Thailand and South Africa.

About 40%: India, the Philippines, Indonesia, Vietnam, Nigeria, Egypt, Pakistan, Türkiye, Argentina and Ukraine.

On a regional price the founding rate takes off the same percentage it would take off the standard price of the same configuration.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

If you are an EU consumer you have 14 days from the start of a paid subscription to withdraw without giving reasons.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, use Withdraw and get a full refund on your account page, which is shown while the 14 days run, or write to [email protected] within them. The refund is requested from Paddle at once; most are approved within a few days, and we email you when it goes through.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Traffic between your browser and our servers is encrypted (TLS). Between our own servers it travels over our hosting provider's private network, which we do not separately encrypt. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Opening your content through the Service happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to. Separately, our operators log in to the servers themselves to run, repair and back up the Service; that maintenance access is not logged campaign by campaign.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability, at hearthmoot.betteruptime.com. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal. Continuing to use the Service after that means you accept them. If you do not, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

Version: 1.3. Date: 2026-10-02.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games. It brings together a campaign wiki written in the browser, where any passage can be shown to one player and hidden from the others; a character builder and character sheets run by a rules engine; an encounter builder and combat tracker; maps; an in-world calendar; and shops and loot for the DM to run.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

Regional prices

In the countries listed below the prices are lower. Paddle decides which price applies from the country it determines for you at checkout, and the checkout shows that price before you pay. Every other country, including every member state of the European Union, pays the prices in the table above.

About 60%: Brazil, Mexico, Colombia, Chile, Malaysia, Thailand and South Africa.

About 40%: India, the Philippines, Indonesia, Vietnam, Nigeria, Egypt, Pakistan, Türkiye, Argentina and Ukraine.

On a regional price the founding rate takes off the same percentage it would take off the standard price of the same configuration.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

If you are an EU consumer you have 14 days from the start of a paid subscription to withdraw without giving reasons.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, use Withdraw and get a full refund on your account page, which is shown while the 14 days run, or write to [email protected] within them. The refund is requested from Paddle at once; most are approved within a few days, and we email you when it goes through.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Your data is encrypted in transit. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Access to your content happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal. Continuing to use the Service after that means you accept them. If you do not, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

The European Commission's online dispute resolution platform is available at https://ec.europa.eu/consumers/odr.

Version: 1.2. Date: 2026-09-30.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games: a markdown-driven campaign wiki with per-player secret visibility, character sheets with a rules engine, an encounter builder and tracker, and a calendar.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

If you are an EU consumer you have 14 days from the start of a paid subscription to withdraw without giving reasons.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, use Withdraw and get a full refund on your account page, which is shown while the 14 days run, or write to [email protected] within them. The refund is requested from Paddle at once; most are approved within a few days, and we email you when it goes through.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Your data is encrypted in transit. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Access to your content happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal. Continuing to use the Service after that means you accept them. If you do not, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

The European Commission's online dispute resolution platform is available at https://ec.europa.eu/consumers/odr.

Version: 1.2. Date: 2026-09-30.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games: a markdown-driven campaign wiki with per-player secret visibility, character sheets with a rules engine, an encounter builder and tracker, and a calendar.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription, and you confirm that at the checkout.
5. You are responsible for the players you admit. If you admit players under 16, any parental consent their taking part needs is yours to obtain, not ours: we hold no player accounts and cannot check.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

If you are an EU consumer you have 14 days from the start of a paid subscription to withdraw without giving reasons.

If you withdraw within those 14 days we refund the payment in full, even though your campaign began serving the moment you paid. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service.

To withdraw, write to [email protected] within the 14 days, or cancel from your account or your Paddle receipt and say that you are withdrawing. Refunds are processed by Paddle.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you are 18 or older and that you want your campaign to start straight away. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Your data is encrypted in transit. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Access to your content happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal. Continuing to use the Service after that means you accept them. If you do not, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

The European Commission's online dispute resolution platform is available at https://ec.europa.eu/consumers/odr.

Version: 1.1. Date: 2026-09-30.

These terms are between you and Hearthmoot (eenmanszaak), Gijsbrecht van IJselsteinstraat 159, 1082 KH Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce under 42144788, VAT NL005532920B04 ("we", "us"). They govern your use of the hosted Hearthmoot service at hearthmoot.com and its subdomains ("the Service").

By starting a trial or subscribing you accept these terms, the Acceptable Use Policy, and the Data Processing Agreement, which is incorporated into these terms by reference. If you are a consumer in the EU, nothing here limits your statutory rights.

1. What the Service is

Hearthmoot is a campaign platform for 5e-compatible tabletop games: a markdown-driven campaign wiki with per-player secret visibility, character sheets with a rules engine, an encounter builder and tracker, and a calendar.

Your account holds a single subscription. That subscription provides one or more campaign instances, each served as a separate tenant at its own subdomain on infrastructure we operate. The base subscription provides one instance; each extra-instance line item on the subscription adds a further instance ("slot") that a campaign you create fills. A tenant serves one table: you as Dungeon Master and up to six players, extendable to twelve with the table-size expansion.

Players are free and are never charged.

2. Your account

1. You need an email address to hold a subscription. That email is your account identity for receipts, password recovery, and tenant ownership.
2. Your players do not need accounts with us. They join your tenant with a name and a passcode you issue. We do not collect player email addresses (see Privacy Policy §7).
3. You are responsible for keeping your account credentials secure and for what happens in your tenant, including what your players enter.
4. You must be 18 or older to hold a subscription.

3. Trial

A 14-day trial is available without a payment card. At the end of the trial the tenant stops serving unless you subscribe. Trial data follows the same retention timetable as a suspended subscription (section 8).

We may limit trials to one per person and may decline a trial without giving reasons.

4. Fees and billing

All prices include tax — the price you see is the price you pay, in every market. Annual billing is charged in advance for twelve months.

The founding rate is a percentage off the list price rather than a fixed figure, so it follows the list price rather than being overtaken by it, and it applies to whatever configuration you buy. The cap limits the saving to €12 per month (€144 per year); it engages only above about €26.67 per month of list price, so a single-campaign configuration is never capped.

1. Paddle.com Market Ltd is the merchant of record for every transaction. Paddle sells the subscription to you, handles payment, tax, and invoicing, and is an independent data controller for payment data. Paddle's own terms and privacy policy apply to the payment relationship. We never receive or store your card details.
2. Subscriptions renew automatically at the end of each billing period until cancelled.
3. Founding-cohort pricing is locked for life, and it is tied to your account rather than to a single unbroken subscription. It survives cancellation: if you resubscribe later, the founding rate applies again, and it follows you through upgrades and downgrades for as long as you hold a founding place.

5. Price changes

We may change prices for future billing periods. We will give at least 30 days' notice by email before a price change takes effect for you. If you do not accept the new price, cancel before it takes effect and the change never applies to you. Founding-cohort pricing is exempt from increases under section 4.3.

6. Right of withdrawal

If you are an EU consumer you have 14 days from the start of a paid subscription to withdraw without giving reasons.

Where you asked us to begin providing the Service during that period, you may still withdraw, and you pay only for what was supplied before you told us. Because the trial in section 3 is free and requires no card, most subscriptions begin only after you have already used the Service, and no charge normally arises.

To withdraw, contact [email protected] or use the cancellation route in your Paddle receipt. Refunds are processed by Paddle.

Before the checkout opens we ask you to confirm, in a box you tick yourself, that you want your campaign to start straight away. That confirmation is what the paragraph above rests on: without it we could not charge you for the part of the period you had used. We keep a record of it, with the exact words you agreed to and the date.

7. Cancellation

You may cancel at any time, effective at the end of the period you have already paid for. There is no cancellation fee, no notice period, and no requirement to contact support: cancellation is available from your account and from your Paddle receipt.

We do not refund the unused remainder of a period you cancel part-way through, except where the law requires it or section 6 applies.

8. Suspension, retention, and deletion

If a renewal payment fails, or a subscription ends for any reason (cancellation, non-payment, or termination under section 13), the following timetable applies:

The start date is the suspension, except where the suspension was for a failed payment and the subscription is afterwards terminated for non-payment. In that case the three periods above run from the termination. A dunning period has no fixed length, and none of the three should be spent on it: while your card is being retried nothing is deleted, the export stays available, and a payment brings the campaign back. Item 4 sets this out in full.

1. Export is available throughout the 30-day retention window, self-service. You get your complete markdown vault and a database export. Your content leaves in the format it went in. A suspended tenant stops serving, so during that window the download comes from your account page here rather than from the campaign itself; you do not have to ask us for it.
2. Deletion at 60 days is irreversible. After that we cannot restore your campaign.
3. Backup purge completes by 90 days. Between day 60 and day 90 your data exists only in encrypted backups that are not accessible to the Service and are not restorable on request. The purge includes destroying the per-tenant backup key, so any copy that outlives its storage is permanently unreadable.
4. A failed payment suspends before anything is terminated, and the clock starts at the termination. If a renewal payment does not go through, the tenant stops serving at the end of the period you have already paid for, while Paddle retries your card. That is a suspension and nothing more: your data is untouched, the export in item 1 is available for the whole of it, and a payment that goes through brings the campaign back on its own. Nothing is deleted while the retries are running, however long they run. If the subscription is then terminated for non-payment, all three periods above — the 30-day export window, deletion at 60 days and the backup purge at 90 — are counted from the day of that termination, not from the suspension that preceded it. You get the full 30 days to take your campaign with you, measured from the day you stopped being a customer. Section 13.2 names those two moments apart.
5. We may suspend immediately, without the timetable above, where the law requires it or where continued operation would expose us or a third party to serious harm. We will tell you why, unless we are legally barred from doing so.

We publish this timetable on the pricing page. Leaving with all of your markdown is a feature of the Service, not an exception to it.

9. Your content, and what we do with it

1. Everything you and your players create is yours. The markdown vault, database contents, characters, maps, notes, and house rules remain your property. We claim no rights in it.
2. You grant us only the licence we need to run the Service for you: to store, copy, transmit, parse, index, back up, and display your content to you and to the players you admit. That licence exists for operating the Service and ends when your data is deleted.
3. We do not scan your content. No indexing of your content into any shared or cross-tenant search, no analytics on page bodies, no automated inspection, no use of your content to train any model. This is a commitment, not a description of current practice we might change quietly.
4. Encryption. Your data is encrypted in transit. At rest, your backup archives are encrypted with AES-256. The storage volumes and the live database behind your campaign are not separately encrypted at rest: a deliberate scope decision taken on 2026-08-13 rather than an oversight. This is a real gap against a stolen disk or a compromise of the host, and we state it as one instead of describing it as covered. What stands in its place is that our hosting runs in data centres certified to ISO 27001 for physical and infrastructure controls, your data is held EEA-only, and access to the data underneath is bounded by the break-glass rules in the next clause rather than by cryptography. Encryption at rest would in any case not mean we are unable to read your content: the Service must parse your markdown to build your wiki, resolve rules, and run search. Anyone describing a service of this kind as "zero-knowledge" is describing encryption at rest under a better name. We will not make that claim.
5. Break-glass access. Our staff do not browse tenant content routinely. Access to your content happens only when a support ticket requires it, is logged, and you are notified that it happened. This, rather than encryption, is what "we do not look" means in practice and is the part you can hold us to.
6. You are responsible for having the rights to the content you upload. See Acceptable Use Policy.

10. Acceptable use

The Acceptable Use Policy forms part of these terms. It also sets out how anyone can report unlawful content to us and how quickly we respond.

11. Data protection

We are a processor for the campaign data in your tenant, where you are the controller. We are a controller for your account and billing data. The Data Processing Agreement sets out the art. 28 terms and is incorporated into these terms by reference; Privacy Policy explains both roles in plain language.

12. Availability and support

1. There is no service level agreement. We do not guarantee uptime, do not offer service credits, and do not promise a response time.
2. We publish a status page showing real availability. If we will not promise uptime, you should at least be able to see the truth yourself.
3. Planned maintenance is announced in advance on the status page where it is likely to be noticeable.
4. Support is by email at [email protected].
5. The Service is run by a very small team. Take that into account when deciding whether it fits a use that cannot tolerate interruption.

13. Termination by us

1. We may terminate for material breach of these terms or the AUP if you do not cure the breach within 14 days of written notice, or immediately where the breach is unlawful conduct, or where notice would be futile or unsafe.
2. We may terminate for non-payment after a failed payment and a dunning period run by Paddle. The tenant is suspended before that, at the end of the period you have already paid for — see section 8, item 4. Suspension for non-payment and termination for non-payment are two different moments, and only the second one starts the deletion clock.
3. We may discontinue the Service entirely on 90 days' notice. In that case we refund the unused portion of any period you have paid for, and the export window in section 8 runs from the shutdown date rather than being shortened by it.
4. Termination triggers the section 8 timetable in every case.

14. Liability

1. Nothing here excludes liability for intent, gross negligence, death or personal injury, or any liability that cannot be excluded under Dutch or EU law.
2. Subject to point 1, our total liability in any twelve-month period is capped at the amount you paid us in that period.
3. We are not liable for indirect or consequential loss, or for loss of content you could have exported and did not, given that export is available at any time while your subscription runs and for 30 days after it ends.
4. If you are an EU consumer, the statutory conformity rules for digital services apply and your remedies under them are unaffected by this section.

15. Changes to these terms

We may change these terms. For changes that materially affect you we give at least 30 days' notice by email, and the change takes effect at your next renewal. Continuing to use the Service after that means you accept them. If you do not, cancel under section 7 before the change takes effect.

We keep previous versions available so you can see what changed and when.

16. Governing law and disputes

These terms are governed by the laws of the Netherlands. If you are a consumer you also keep the mandatory consumer protection of your country of residence and may bring proceedings in your local courts as EU law provides.

The European Commission's online dispute resolution platform is available at https://ec.europa.eu/consumers/odr.

Version: 1.0. Date: 2026-09-30.