Privacy notice

Unapproved staging draft. Operator details, retention periods and legal review are pending. Not ready for public launch.

Operator: [OPERATOR LEGAL NAME - pending]
Location: [COUNTRY AND BUSINESS ADDRESS - pending]
Registration: [BUSINESS REGISTRATION - pending]
Privacy contact: [PRIVACY CONTACT EMAIL - pending]

Information we process

Account email and sign-in identifiers/display metadata; authentication session security metadata such as provider-supplied IP and browser information; grants and linked Twitch subscription-benefit records; manual skills and optional character aliases/profession recipes; contributor invitation, token metadata, quota and uploaded observations; guide revisions and image metadata. Authentication credentials are handled by Supabase and the selected sign-in provider. Twitch viewer access/refresh tokens are not stored by Toolbelt.

Purposes and unresolved legal bases

We use this information to authenticate users, deliver account features, manage access, prevent repeat benefits, operate contributions and publish guides. Operator identity, applicable law, lawful bases and final retention periods require owner review before public launch. This draft is not a declaration of regulatory compliance.

Hosting and recipients

The current staging service uses Vercel for web hosting/protection, Supabase for authentication/database services, Resend for sign-in email, and AWS for media and cleanup. Discord and Twitch process data when you choose their integrations. AWS media/cleanup is in Frankfurt; this does not mean every provider processes all data only there. Provider locations, contracts, transfers and backup/log policies must be reviewed before launch.

Public-page analytics

When enabled in Vercel, deployed public pages use Vercel Web Analytics for aggregated traffic statistics, not advertising profiles. Vercel describes this service as cookieless and uses a short-lived request-derived visitor hash, discarded after 24 hours; it may process timestamps, browser/device information and approximate location. Toolbelt permits page views only for the home page, free calculators, published blog routes and legal pages. Guide slugs are aggregated, URL query strings and fragments are removed, and account, authentication, editor, contribution, referral and Pro routes are excluded. Custom events, imported AH prices, calculator inputs and character/account identifiers are not sent by this integration. We respect browser Do Not Track and Global Privacy Control signals and use a no-referrer page policy. Provider processing, retention, legal basis and any locally required consent must still be reviewed before public launch; cookieless does not establish universal consent exemption.

Export and account deletion

When enabled, Account offers a JSON export of stored account data and confirmed deletion after a fresh sign-in. Ordinary account/profile/token rows are removed, and shared contribution rows lose their contributor account reference. Guides and images survive with author/uploader links removed; owner-managed transfer and permanent article deletion are separate actions. Text or images you submitted can still identify you; account deletion is not automatic content redaction.

Records retained after deletion

Minimal Twitch identity and Toolbelt redemption identifiers prevent repeating a one-time benefit. Referral and administrative/editorial audit records also remain. These contain pseudonymous identifiers and are not fully anonymous. Their retention periods and lawful justification are not finalized; approval of staging behavior does not approve indefinite legal retention. Deletion does not immediately erase provider backups, operational logs, downloads or copies already held by others.

Local data and rights requests

Calculator prices, imported Auctionator snapshots and device settings are stored locally, not included in the server export, and are not removed by account deletion. SavedVariables files are parsed locally without executing Lua; raw files and imported prices are not uploaded. Clear imported prices and manual overrides from Account, or clear browser site data to remove local data. The companion/addon has separate local files and tokens. Applicable access, correction, erasure, objection and complaint procedures, supervisory authority and response commitments must be finalized with the operator details. Contact details below are placeholders until approved.