Privacy Policy

Last updated: March 2026

Welcome to AFKJ Tracker. This Privacy Policy explains how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data Controller

The "Data Controller" for this application is the project operator. For any privacy-related inquiries, please contact: sacrifar85@gmail.com.

2. Data We Collect and Why (Legal Basis)

• Authentication Data (Performance of Contract): When you sign in using Google or Email, we process your email address and profile ID to provide account synchronization services.
• Game Progress Data (Performance of Contract): We store your hero roster, wishlists, and recruitment sessions to ensure your progress is saved and synchronized across your devices.
• Usage Metrics (Legitimate Interest): We use Vercel Web Analytics to collect anonymous usage data to improve our service's performance and stability. No PII is collected via this service.

3. Data Storage and Retention

Your data is securely stored using Supabase (EU regions where available) with Row Level Security (RLS) policies. We retain your data as long as your account is active. You can delete your data at any time via the Profile Settings.

4. Third-Party Services

We use the following processors to operate the service:

• Supabase: Database and Authentication.
• Vercel: Application hosting and anonymous analytics.
• Google: OAuth 2.0 Identity Provider.

5. Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: You can download a copy of your data via the "Download My Data" button in your profile.
• Right to Rectification: You can update your data directly through the tracker interface.
• Right to Erasure (Right to be Forgotten): You can permanently delete all your data via the "Delete My Data" feature in your profile.
• Right to Object/Restrict: You may object to the processing of your data by ceasing use of the application and deleting your data.

6. Right to Lodge a Complaint

You have the right to lodge a complaint with a Data Protection Authority if you believe your data is being handled improperly.