Privacy Policy
Last updated: June 27, 2026
1. What we collect
We collect (a) your email address and a hashed password for sign-in, (b) any account data you choose to import (labels, in-game usernames, in-game passwords, levels, notes, timestamps, sensitivity and crosshair settings), and (c) basic technical logs (IP address, browser user-agent, timestamps) needed to operate and secure the Service.
2. How we store it
Data is stored on our managed backend (Lovable Cloud, powered by Supabase) with row-level security so that one user cannot read another user's rows. In-game passwords are stored encrypted at rest using authenticated symmetric encryption and are only decrypted server-side when you explicitly request them. Auth passwords are never stored in plaintext.
3. How we use it
We use your data only to (a) provide the Service to you, (b) operate, secure, and improve it, and (c) comply with law. We do not sell your data. We do not use your data to train AI models. We do not show ads.
4. Sharing
We share data only with infrastructure providers strictly necessary to run the Service (hosting, database, auth). These providers process data on our behalf under their own terms. We disclose data to authorities only when legally required.
5. Your rights
You may at any time: export your account data (via the in-app download), delete individual accounts or all of them, or request full deletion of your user account by contacting the administrator. Deletion is permanent and cannot be undone.
6. Retention
We retain your data until you delete it or until your user account is removed. Backups may persist for a limited period after deletion before being overwritten.
7. Security
We use HTTPS everywhere, row-level security, encrypted password storage, role separation, and HIBP-based password protection. No system is perfectly secure; you use the Service at your own risk and should never reuse a critical password.
8. Children
The Service is not directed to children under 13 (or the minimum digital-consent age in your jurisdiction). If we learn that we have collected data from such a child, we will delete it.
9. International users
By using the Service you consent to processing of your data in the regions where our infrastructure providers operate.
10. Changes
We may update this policy at any time. Material changes will be reflected by the "Last updated" date above.
11. Contact
To exercise any right or ask a privacy question, contact the administrator of your instance.