Privacy & Terms

Last updated: October 8, 2026

This page explains how One Man [RPG] <studio> handles personal data, cookies and similar technologies, and the terms that apply when you use this website and its content. The privacy information below is a notice about data processing; simply using the site does not by itself replace any consent that may be required by applicable law.

1) Who we are

This website is operated by Francisco Eduardo Bravo Fernández
Brand/project name: One Man [RPG] <studio>
Contact email: [email protected]
Website: oneman-rpg-studio.com
Location: Spain (European Union)

2) What this website is

One Man [RPG] <studio> is an independent tabletop RPG publishing project. The site publishes articles, Dungeon Master tools, downloadable resources, project information, newsletters, Kickstarter-related material, and other tabletop RPG content.

Not affiliated: This website is not affiliated with, endorsed by, or sponsored by Wizards of the Coast or any other third-party brand unless expressly stated. Trademarks belong to their respective owners.

3) Data we may collect

Information you provide

Your email address when you subscribe to a newsletter or request a resource.
Your newsletter interests and preferences, such as Kickstarter launches, free 5e content, or studio news.
Information you enter into contact forms or messages you send to the studio.
Any information you voluntarily provide when communicating with the site.

Information collected automatically

Depending on the page, browser, device, and services currently enabled, the site may collect or process technical and usage information such as:

pages viewed, navigation events, internal-link clicks, downloads, form interactions, and outbound clicks;
referral source and campaign information, including UTM parameters;
approximate location, device type, operating system, browser, screen size, and language;
IP address and other technical identifiers used for security, analytics, fraud prevention, attribution, and advertising measurement;
interaction data such as scroll depth, clicks, mouse movement, page visibility, performance information, and JavaScript or resource errors where behavioural analytics tools are active;
first-touch and last-touch acquisition information used to understand how visitors discovered the site and which campaigns or channels contributed to later actions.

4) How we use data

to operate, secure, maintain, and improve the website;
to deliver newsletters and requested resources;
to answer messages and support requests;
to understand how visitors find and use the site;
to measure content performance, downloads, sign-ups, internal navigation, and outbound Kickstarter traffic;
to measure and optimise marketing and advertising campaigns;
to prevent abuse, spam, automated attacks, and unauthorised access;
to comply with legal obligations and defend legal claims where necessary.

We do not sell personal data.

5) Legal bases for processing

Depending on the activity, personal data may be processed on one or more of the following legal bases:

Consent, for example when you subscribe to marketing emails and, where applicable law requires it, for non-essential analytics or advertising technologies.
Performance of a contract or pre-contractual steps, where processing is necessary to provide something you requested or to respond to a request connected with a service or product.
Legitimate interests, where permitted by law, including website security, abuse prevention, service improvement, basic operational analytics, and protection of the studio’s legal and commercial interests.
Legal obligations, where processing is required by applicable law.

6) Newsletter and Mailchimp

We use Mailchimp to manage newsletter subscriptions and send email. Subscription data may include your email address, selected interests, acquisition source, campaign information, landing page, and form location when those fields are available.

Emails may include free-content updates, studio news, Kickstarter announcements, launches, and related project information. You can unsubscribe using the link included in marketing emails.

7) Analytics and behavioural measurement

The site uses analytics and measurement tools to understand traffic, content performance, navigation, downloads, conversions, and technical behaviour.

Google Analytics 4 (GA4) is used to measure visits, engagement, acquisition, page performance, events, downloads, sign-ups, and conversion-related actions. Google Tag Manager and related site tooling may be used to deploy or coordinate measurement tags.
Microsoft Clarity is used for behavioural and UX analysis. Depending on configuration and regional consent signals, Clarity can process clicks, scrolling, mouse movement, page structure, performance events, and session-replay data. Privacy-sensitive fields are intended to be masked by the service.
Google Search Console and Bing Webmaster Tools are used to analyse search visibility and aggregated search-performance data. These webmaster tools are not treated as a substitute for visitor analytics.

8) Advertising, attribution, and social-platform measurement

The site may use advertising and attribution technologies to measure campaigns, build audiences where available, and understand whether visitors complete actions after arriving from social networks or advertising.

Meta Pixel and, where configured, related server-side conversion measurement may be used for Meta advertising measurement and attribution.
Pinterest Tag may be used to measure visits, conversions, campaign performance, and actions taken after interacting with Pinterest content or advertising.
TikTok Pixel may be used to measure website events, campaign performance, and actions taken after interacting with TikTok content or advertising.
Campaign parameters and referral identifiers may also be used to attribute visits and outbound traffic to channels such as search engines, social platforms, newsletters, AI assistants, and Kickstarter referrals.

9) Cookies, local storage, and similar technologies

The site uses cookies, browser storage, and similar technologies for a combination of technical, functional, analytics, attribution, security, and advertising purposes.

Regional consent choices

For visitors identified as being in the European Economic Area (EEA), United Kingdom, or Switzerland, non-essential analytics and marketing storage is restricted until a choice is made. A regional privacy banner allows those visitors to Accept all or Reject non-essential tracking. The two choices are presented at the same level, and the site remains accessible if non-essential tracking is rejected.

Google measurement uses Consent Mode signals in these regions. Microsoft Clarity is also informed of the visitor’s analytics and advertising-storage choice so it can operate with cookies after consent or in its limited cookieless mode when consent is not granted. Marketing tags such as Meta, Pinterest, TikTok, and similar advertising technologies are held back where this regional consent layer applies until the visitor accepts non-essential tracking.

The regional banner is not shown by default in countries where this specific consent layer is not applied. Applicable privacy rights can differ by jurisdiction.

Where the regional consent layer applies, a Cookie settings link is added beside the Privacy & Terms link in the site footer so the choice can be reviewed or changed later.

Technical and functional storage

Some storage is used to make the site work, remember interface choices, prevent repeated popups, remember when a campaign bar has been closed, maintain forms, support security controls, remember the visitor’s privacy choice, or provide other requested functionality.

Analytics and attribution storage

Analytics and attribution systems may use cookies or browser storage to distinguish visits, understand sessions, retain campaign/referral information, and measure events. The site may also store first-touch and last-touch attribution information, such as source, medium, campaign, landing page, referral source, or form location. In regions where non-essential consent is required by this site’s regional consent layer, this attribution storage is withheld until consent is granted.

Advertising and social-platform storage

Meta, Pinterest, TikTok, Google, Microsoft, and other measurement providers may use cookies or similar identifiers according to their own technologies and policies when their tags or services are active. In regions covered by the regional consent layer, advertising-related storage is restricted until the visitor accepts non-essential tracking.

Your browser or device may also allow you to block, restrict, or delete cookies and other site data. Doing so may affect attribution, analytics, or personalised advertising features.

10) Cloudflare, security, and infrastructure

We use Cloudflare and WordPress security tooling to improve site availability, caching, DDoS protection, abuse prevention, traffic filtering, and security monitoring. These systems may process IP addresses, request metadata, browser information, security events, and other technical data necessary to provide their services.

11) Service providers and data sharing

Personal data may be processed by service providers when necessary to operate, secure, measure, or promote the site. Depending on which features are active, these providers can include:

Mailchimp — newsletter delivery and list management;
Google — analytics, tag management, and search-performance tools;
Microsoft — Clarity behavioural analytics and Bing webmaster services;
Meta — advertising measurement and audience tools;
Pinterest — campaign measurement and attribution;
TikTok — campaign measurement and attribution;
Cloudflare — security, CDN, caching, and traffic filtering;
hosting, email-delivery, backup, security, and technical service providers used to operate the WordPress site.

We do not give third parties permission to use personal data for unrelated purposes merely because they provide infrastructure to the site.

12) International transfers

Some service providers operate internationally and may process data outside Spain or the European Economic Area. Where required, such transfers are handled through the safeguards made available by the relevant provider and applicable data-protection law, such as adequacy decisions, standard contractual clauses, or other recognised transfer mechanisms.

13) Data retention

Data is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, security, accounting, and operational requirements.

newsletter information is retained while you remain subscribed and as needed to maintain suppression/unsubscribe records;
analytics and advertising data is retained according to the settings and retention periods of the relevant platforms;
security and server logs are retained for operational, diagnostic, and security purposes;
contact messages may be retained for as long as needed to answer the request and maintain relevant records;
browser-side cookies or storage remain until they expire, are replaced, or are deleted by the user or browser.

14) Your data-protection rights

Where the GDPR or other applicable data-protection law applies, you may have rights including access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent where processing is based on consent.

To exercise a right or ask a privacy question, contact [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

15) Security

Reasonable technical and organisational measures are used to protect the site and the information processed through it. No online service can guarantee absolute security, and no method of transmission or storage is completely risk-free.

16) Third-party links and embedded services

The site links to third-party services such as Kickstarter, social networks, video platforms, and other external websites. Those services have their own privacy practices and terms. When you leave this site or interact with an embedded third-party service, the third party may receive information according to its own policies.

17) Children

This site is not directed at children under 14 years of age. In Spain, where processing is based on a child’s own consent, a person must generally be over 14 to provide that consent without the authorisation of a parent or legal guardian. If you believe a child has provided personal data improperly, contact us so the situation can be reviewed.

18) Acceptable use

You agree not to:

attempt unauthorised access to the website, accounts, servers, APIs, or administrative systems;
disrupt, overload, damage, or interfere with the site or its infrastructure;
run automated requests, scraping, or extraction at a scale that places unreasonable load on the service or circumvents access controls;
use the site for unlawful activity;
impersonate another person or submit deliberately false information through forms.

19) Intellectual property and content licence

Unless stated otherwise, original text, original game material, tables, downloadable files, layouts, graphics, brand assets, and other original content on this website are owned by Francisco Bravo / One Man [RPG] <studio> and are protected by applicable intellectual-property law.

Free downloads

Unless a specific resource states a different licence, free downloads are provided for personal tabletop use.

You may not, unless expressly authorised:

resell the files;
redistribute or mirror the files on another website, repository, marketplace, or file-sharing service;
claim the work as your own;
use the files commercially outside the licence stated for that specific resource.

For commercial licensing or permission requests, contact [email protected].

20) Availability, accuracy, and warranties

The website, articles, game material, downloads, and related services are provided on an “as is” and “as available” basis. No guarantee is made that every page, file, link, rule interpretation, or external service will always be accurate, complete, compatible, available, or error-free.

21) Limitation of liability

To the maximum extent permitted by applicable law, One Man [RPG] <studio> is not liable for indirect, incidental, special, or consequential loss arising from use of the website, free downloads, third-party links, or external services.

22) Changes to this page

This Privacy & Terms page may be updated when the website, its measurement stack, services, publishing activity, or legal requirements change. The “Last updated” date at the top identifies the current version.

23) Contact

Privacy, legal, licensing, or website-use questions: [email protected]