[Beltiras]

I'm a bit surprised you ask for an email address and then proceed to do OAuth2.0. Why not skip the ask-for-email and get it from the identity provider?

EDIT: I like the idea and some of the execution. I have multiple UX suggestions that I will need time to collect (when not at work). One thing that was particularly jarring was the modal that pops up when you click an entity instead of the information being inlined in the frame. One feature I would highly recommend is the ability to make maps and reveal them piecemeal to players. I think this can really be something to open roleplaying up for a larger audience.