Privacy

What we store on your device

Four things, and the first three are what signing in means:

• A session cookie that keeps you signed in. It ends when you close the browser.
• A token that proves a request came from this page and not from another site.
• If you asked to be remembered, a token that outlives the session. It changes every time it is used, and signing out on one device does not drop the others.
• Three preferences: your language, whether the navigation is folded, and which game account you had open last.

What you tell us about your game account

Everything on your profile is something you typed: your state, your in-game name, your Chief ID and whatever you have filled in about your account. There is no connection to the game and nothing is read from it — the game has no public interface for that, and we do not scrape one. You can ask us to delete any of it.

Screenshots are never stored

When you upload a screenshot to be read, it is decoded in memory, read, and released when the request ends. It is not written to disk, does not go into the database and does not leave our server. There is no identifier that could call it back, because there is nothing to call back.

When something breaks

If the site fails while you are using it, a report of the failure is sent to Sentry, who hold it for us on servers in Europe. What goes in it is the fault itself: what broke, where in the code, which build you were running, which screen you were on, and which browser and operating system. Nothing you typed goes with it, and no screenshot ever does.

It carries no name, no e-mail address and no account id — that is switched off deliberately, in the browser and on the server alike. The network address your browser connects from is not kept either: Sentry is told to discard it. What does stay on the report is what that address is worth as a location — a country, and usually a city.

This is not behind the switch above, because it is not measurement. Nothing is counted and nothing is sold. A report exists only because something went wrong, and it is the only way we find out that it did.

Measurement

With your permission, Google Analytics counts which screens are opened and how often. What is sent is the shape of the address and not the address itself: every number in it — your profile id, an alliance id — is removed first, and the query string is dropped whole, so a link from your inbox never reaches Google with its token in it.

Without your permission the analytics script is not loaded at all. It is not loaded and silenced; it is never fetched.

Advertising

This site carries Google AdSense. It pays for the server, and it is shown to everyone.

Whether the ads are tailored to you is your decision, and it is the same switch as the one above. Refuse, and Google is told it may not use advertising identifiers here; the ads still appear, chosen from the page rather than from you.

Your choices

You can change the answer above at any time, from here or from settings. You can correct anything on your profile. If you want your account and everything on it deleted, ask and it is deleted — not hidden.

Questions about any of this: privacy@frostline.team