# Campaigns and roles

A shared campaign is created by its **owner** from the desktop app. Members join with a
one-use campaign invitation created by the owner.

| Role | Read shared items | Share own items | Invite | Change roles / remove | Delete campaign |
| --- | --- | --- | --- | --- | --- |
| Owner | Yes | Yes | Yes | Yes | Yes |
| Player | Yes | Yes | No | No | No |
| Reader | Yes | No | No | No | No |

- The owner switches members between player and reader and removes members; any player or
  reader can leave. Role changes and removals carry the member's revision, so a decision
  based on an outdated list is refused.
- When a member is removed or leaves, everything they shared is withdrawn for the others,
  and their devices clear what others shared at their next synchronization. Their private
  originals are never touched.
- The owner can **delete the campaign** (typing its exact name). Members see it as
  deleted; everyone keeps what is on their own computer.
- Refusals never reveal whether a campaign exists to someone who is not a member.