Privacy

Who is responsible

Dan Roberts, trading as Grimoire, at Blaison, Yate, Bristol BS37 8TH, is the data controller. Questions and requests go to info@raidgrimoire.com.

What is stored

• Your email address, which you sign in with to see your own account. That is the whole of your identity here: there is no password, no name and no profile.
• Two-step sign-in, if you turn it on: the secret your authenticator app shares with us, encrypted with a key kept apart from the database, and your recovery codes stored only as hashes.
• Your game data, if you install the sync app: champions, artifacts, resources, progress and live events, read from Raid: Shadow Legends on your PC.
• Your in-game player id and name — the id the game gives your account, and the name you chose in it. This is what lets one PC keep several game accounts apart without you picking from a list. Your Plarium email is not read, and the app does not touch the part of the game that holds it.
• Sign-in and sync tokens, stored only as hashes, so a copy of the database does not let anyone sign in as you.
• A Paddle customer reference, if you subscribe, so a payment can be matched to your account.

Your IP address is used briefly, in memory, to rate-limit abuse. It is never written to the database and never associated with your account.

What is never stored

Your Plarium login. The app never asks for it and never sees it. Your card details, which go to Paddle and never reach this site. And nothing about you from anywhere other than your own game and your own sign-in.

Analytics

The site uses Google Analytics to count visits and see which pages people use, so we know what to improve. Google sets cookies in your browser for this and receives the pages you visit, your approximate location, and your browser and device type. It is used for counting only, and it is not linked to your account or your game data. Nothing is set until you accept in the cookie banner, and declining is remembered; you can change your answer any time from Cookie settings at the foot of every page. Google processes this data on our behalf; its handling is described in Google's privacy policy. You can stop it with Google's opt-out add-on or by blocking cookies for this site.

The site also keeps its own count of arrivals, whatever you answer in the banner: for each day, how many people came, from which kind of site (Reddit or a search engine, say), which page they landed on, and how many downloaded Grimoire Sync. It is a number that goes up. Nothing is set in your browser for it, and nothing about you is kept: not your address, not your device, not the full link you came from.

Apart from analytics and advertising, the only other cookie is the one that keeps you signed in, which is necessary for the site to work and is deleted when you sign out.

Advertising

Visitors without a membership see ads from Google AdSense. Members on any paid tier, and founders, see none: the ad code is not even loaded for them, and there are no ads on the account, checkout, sign-in or pricing pages for anybody.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet. Ad cookies are off until you agree to them in Google's consent message; until then any ads shown are not personalised. You can opt out of personalised advertising at Google's Ads Settings, read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and opt out of other vendors' personalised ads at aboutads.info.

Crash reports

When a page breaks in your browser, it sends us the error message, the technical stack trace, the path of the page it happened on, your browser's version string and the size of the window. Nothing else: no account, no identifier, no record that it was you. The reports go to a server log, not the database, and are kept only while they are still useful for fixing the fault. This is not tracking — a report is only ever sent when something has actually gone wrong, and it exists so a page that breaks for you can be fixed rather than waited on.

Why we are allowed to hold it

• Your email and game data: to perform the contract of providing the service you asked for.
• Payment records: to comply with tax and accounting law.
• Rate-limiting: our legitimate interest in keeping the site up for everyone.

Who else sees it

• Paddle handles payments as merchant of record. They see your billing details; we do not.
• Resend sends the sign-in email, so they process your address to deliver it.
• Supabase hosts the database, in the EU (Ireland).
• Hostinger hosts the site, in the UK.

Nobody else. Your data is not sold, rented or shared for marketing, and there is no arrangement under which it could be.

How long it is kept

• Full copies of your synced account are kept for 30 days. After that the detail is discarded and only the summary needed to draw your progress over time remains.
• Your account and email are kept until you delete them.
• Sign-in links expire after 15 minutes, and sessions expire on their own.
• Payment records are kept as long as tax law requires, which is currently six years.

Sharing links

If you create a share link, the copy of your roster behind it is readable by anyone who has the link, which is the point of it. It is a frozen copy, it does not update, and deleting the link deletes the copy.

Clan hub

When a clan member runs Grimoire Sync, it also sends what the game shows about their clan: each member's in-game name and player id, rank, level, power, contribution, when they joined and were last active, daily activity, and what each did in clan boss, hydra, chimera, siege, clan vs clan and clan quests, including the teams behind their clan boss, hydra and chimera damage. Members of that clan who have signed in to Grimoire can see it; some tools are for its leader and deputies only. Full clan reports are kept for 14 days; the per-member figures are kept to draw the clan's history, and members who leave stay on the clan's list of who left. A Discord address, if a clan connects one, is stored encrypted.

Proven teams

When Grimoire Sync sends a clan's figures, we also pool the teams its members used for clan boss, hydra and chimera, with the difficulty, the damage and the number of keys, into a shared list of teams ranked by the damage they actually did. What is pooled is anonymous: we keep no names, player ids or clan ids with it, only a scrambled code made with a secret key, which lets us count how many different players used a team but not work out who they are. A team is shown only once at least 3 different players have used it, so no figure on the list can be traced to one player. A clan's leader or deputies can turn this off at any time under Clan, Rules, and doing so removes everything that clan has already shared.

Your rights

You can ask for a copy of your data, correct it, or have it deleted. Deletion is immediate and self-service on the account page — you do not have to ask permission or wait for us. For anything else, email us and we will answer within 30 days.

If you think we have handled your data badly, please tell us first so we can fix it. You can also complain to the Information Commissioner's Office at ico.org.uk.