Privacy

Muster is run by Riley Lum, in Australia, as a free service. Organisations use it to list their games and seat their players. This page says what Muster keeps about you, who sees it and where it lives. Write to privacy@musterhall.org with any question.

What Muster keeps

• Your email address. It is your account. It is kept from your first sign-in, or from when an organiser names you as a game's GM.
• Your seats and waitlist places, and when you took them.
• The record. Every change to an event, session, game, seat or waitlist is kept with who made it and when, so an organiser can see what happened. When a game is cancelled, the record keeps who held its seats and who was waiting.
• Mail waiting to be sent, until it is sent.
• Sign-in requests. The address a link and code were sent to, and the network address the request came from, for a day. Muster keeps only scrambled forms of the link and code.
• If you sign in with Google, Google's id for your Google account, linked to your Muster account. Google tells Muster only your email address and whether Google has confirmed it. Muster asks for nothing else, such as your name or contacts, and gives Google nothing back.
• Cookies. One keeps you signed in for 30 days or until you sign out. While you sign in with Google, a second one, lasting ten minutes, makes sure only your browser is signed in by Google's answer. Muster uses no other cookies, no analytics and no trackers, and its pages load nothing from other sites.
• Server logs, which hold network addresses, to stop attacks, for a week.

Who sees it

• An organisation's organisers see the email addresses of the people holding seats in its games and waiting for them.
• Players see a GM's name, as the organiser gave it. Nobody sees another player's address.
• The public sees events, games and how many seats are free, never who holds them.
• Muster never sells your data or shares it for advertising.

Where it lives

• On a server rented from OVH, in Sydney.
• With Amazon Web Services in Sydney, which sends Muster's mail and holds seven days of backups.
• On Riley's home server in Australia, which restores a backup each night to check it, then deletes it.

Cloudflare answers lookups for the musterhall.org name, and sees none of this.

Getting or deleting your data

Muster can't yet do this for you. Until it can, write to privacy@musterhall.orgfrom your account's address, and Riley will send you your data or delete it. Deleting removes your address, seats and waitlist places, and removes or anonymises you in the record. Deleted data leaves the backups within seven days.

Changes

A change to this policy is shown here, with its date. Last changed 6 November 2026, to add sign-in with Google.