Privacy

[operator name or company], [postal address]. E-mail: [contact e-mail].

When you log in with Discord or Google, we store:

• the provider (Discord or Google) and your user id there;
• your display name;
• your e-mail address, only when the provider marks it as verified;
• the link to your avatar picture;
• the time of your first login and of your last login.

We use this data to log you in and to know which accounts have admin or paid access. We keep it until you ask us to delete your account.

The site sets two cookies. Both are necessary for the login:

• fp_session keeps you logged in for 30 days.
• fp_oauth protects the login step. It is deleted after 10 minutes or after the login.

The site sets no tracking cookies and no advertising cookies. The site has no analytics service.

The characters and the guide progress you save, and the alert rules and the Discord webhook address you enter. We use them only to show your progress and to send your alerts. We keep them until you delete them or your account.

Your browser keeps your filters, your recent searches and your calculator character. This data stays on your device. We do not receive it.

For each page load, the site writes the time, the page, your account key when you are logged in, and a short code made from your IP address and the date, not the address itself. We use the log to count visitors per day. We keep it 90 days.

The web server in front of the site logs each request with your IP address, the time and the page. We use these logs to find errors and attacks. We keep them [N] days.

• Some item and monster pictures load from api.flyff.com.
• Avatar pictures load from Discord or Google.

These services receive your IP address when your browser loads a file from them. The login sends you to Discord or Google. An alert goes to Discord, to the webhook address you entered.

The site runs at [hosting provider and country].

There are no payments during the beta. When paid plans start, a payment provider processes the payments. We receive the payment status, never your card data. This page will name the provider.

You can ask for a copy of your data, a correction, a limit on its use, or its deletion. You can object to its use. Write to [contact e-mail]. You can also complain to a data protection authority.

On your profile page, "Download my data" gives you a copy at once, and "Delete my account" deletes your account, your saved characters and your alert rules, and removes your account from the visit log.