WYCKIT Privacy Policy

WYCKIT is operated by Wyck I.T. Solutions LLC. This notice explains the information we handle for your account and the connected products.

What your Wyckit account holds

• Your account identifier, email address, public username, and profile details you choose to provide.
• Your password, stored only as a hash. We cannot read it.
• A mobile number and SMS consent record, if you choose to opt in for account messages.
• Which second factor you use, if you turned two-factor sign-in on.
• A record of which version of these documents you accepted, when, and the network address the acceptance came from.

Product data, game content, and public listings

Each product stores the data needed for its features and links owned records to your WYCKIT account identifier. The Community feed combines public ideas, public project listings, and published Build components. A public listing can include its title, description, creator's public name, and a link to the relevant workspace.

Build stores game component drafts, imported artwork, saved rehearsal tests, and component versions. Content included in a component you publish is intended for sharing. Adventure Plots store your scenes, characters, GM notes, board and card state, story entries, and rehearsal checkpoints. Adventure access requires the owner's account, even when the associated project listing is public. The owner-only player preview omits hidden scenes, GM notes, private entries, and private cards.

Removing a project listing prevents access to its linked Adventure through that listing; it does not by itself erase all stored Adventure records. Contact us to request removal of stored product data.

Phone numbers are not shared between products

A number you provide for account messages stays with your WYCKIT account. It is not copied into the game workshop, Adventure Plots, Wyckit Idea, or other products. The optional Account Settings checkbox is the opt-in method for WYCKIT account SMS. Verifying a number does not enroll you in marketing or a separate product's messaging campaign.

Messages we send

Account email — confirmation, password recovery, and security notices — and any text message we send are delivered through Pingram, a messaging provider acting on our behalf. They receive the address or number the message is going to and the content of that message.

Cookies

We set a cookie so you stay signed in, and a cookie that protects forms against cross-site submission. We do not use advertising cookies.

Your choices

• Reply STOP to opt out of SMS, or remove your verified number in Account Settings.
• Turn two-factor sign-in off in your account security settings.
• Ask us to close your account and remove your data.

Getting in touch

Write to support@wyckit.com with any question about this notice or about the data held about you.

Mobile information and SMS consent

We will not share or sell your mobile information or opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

Communications and opt-out

If you choose to opt in using the optional checkbox in Account Settings, you agree to receive SMS verification codes and account notifications from WYCKIT. Message frequency may vary. Standard Message and Data Rates may apply. Reply STOP to opt out. Reply HELP for help. We will not sell or share mobile information with third parties for promotional or marketing purposes.

Providing a phone number alone does not enroll you. SMS consent is optional and is not required to create or use your account. We record the phone number, time, consent wording version, and Account Settings source of your opt-in. You can also remove your phone number in Account Settings. For assistance, contact support@wyckit.com.

Passkeys, authenticator apps, and device approval

If you choose these sign-in methods, we keep authenticator configuration, recovery-code records, and your public passkey credentials and chosen passkey names. WYCKIT does not receive your passkey private keys or your device’s biometric data. Requests to approve sign-in on another device expire after five minutes and can be used only once. Authenticator apps and passkeys do not require a phone number or SMS consent.