Privacy Policy

What we collect

• Run data. When you submit a run from the desktop app or the Overwolf overlay, we store the run JSON: character, ascension, deck, relics, encounters, floor-by-floor history, and the result. Run files are immutable once submitted.
• Steam identifiers. When you sign in with Steam, we receive your 64-bit SteamID and your public persona name from Steam’s OpenID endpoint. We use these to attribute submitted runs and to surface your name on leaderboards.
• Request metadata. Standard server logs (timestamp, request path, HTTP status, user-agent) and the source IP address. IPs are used for rate limiting and abuse prevention.
• Feedback you send. If you submit feedback through the website or overlay, we store the contact field you provide (Discord handle, email, or GitHub username, whatever you type) along with the message body.

What we don’t collect

• No password, OAuth token, or Steam session token. Steam sign-in is one-shot OpenID; we never see your credentials.
• No email address (unless you voluntarily provide one as a contact value when submitting feedback).
• No cross-site tracking beyond what's described in the Advertising section. We use Google Analytics and self-hosted Umami for aggregate traffic statistics, and NitroPay for advertising, nothing else, no Meta Pixel, no data brokers.
• No payment information. Donations are handled by Ko-fi on its own site.

How we use it

• Run data powers leaderboards, community statistics, and shareable run links.
• Steam identifiers tie submitted runs to a profile so you can claim and manage your own history.
• Server logs are used to debug issues, monitor performance, and stop abuse.
• Feedback is forwarded to a private Discord channel and a GitHub issue tracker so we can act on it.

Advertising

The website shows ads served by NitroPay (GG Software, Ltd). To serve and measure ads, NitroPay and its advertising partners may process: your IP address, approximate (city-level) location derived from it, device and browser information, and cookies or similar identifiers used to cap ad frequency, detect fraud, and, where you have consented, personalize ads.

If you are in the EEA, UK, or Switzerland, a consent dialog appears before any personalized advertising happens. Personalized ads run only if you opt in; declining shows non-personalized ads instead. You can change your answer at any time using the Manage Consent link in the footer of every page, which reopens the consent dialog with the full list of advertising partners and purposes.

If you are a California resident, some of this ad-related data sharing may be considered a “sale” or “sharing” of personal information under the CCPA/CPRA. You can opt out at any time using the Do Not Sell My Personal Information link in the footer of every page. Opting out stops the sale/sharing of your data for personalized advertising; you will still see ads, just not personalized ones. We do not knowingly sell or share the personal information of anyone under 16.

Ads appear only on the website. The API, widgets, desktop app, and overlay carry no advertising.

Retention

Run data, leaderboard entries, and submitted feedback are retained indefinitely so the community archive remains complete. Server logs are kept for up to 30 days.

Sharing

Outside of the advertising described above, we do not sell or rent any data. Submitted runs and persona names are public by design, they appear on leaderboards and on the public API at /api/runs/list. Treat anything you submit as public.

Sub-processors used by the Service: Steam (OpenID sign-in and persona lookup), GitHub (issue tracking for feedback), Discord (real-time feedback notifications), Ko-fi (donations, optional), NitroPay (advertising), Google (analytics).

Deletion requests

To request deletion of your submitted runs, leaderboard entries, or feedback, email im@ptrlrd.com or open an issue on GitHub. Include the SteamID or run hash you’d like removed. We process requests within a reasonable time and confirm by reply.

Your California privacy rights

California residents have the right to know what personal information we collect (described above), the right to request deletion, the right to opt out of the sale or sharing of personal information (the footer link, or the Global Privacy Control signal, which we honor), and the right not to be discriminated against for exercising any of these rights. To exercise the know or delete rights, email im@ptrlrd.com. We verify requests by asking you to demonstrate control of the SteamID or run hashes involved, and respond within 45 days.

Children

The Service is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has submitted data to the Service, contact us and we will remove it.

Changes

We may update this policy as the Service evolves. Material changes will be noted by updating the “Last updated” date at the top of this page. Continued use of the Service after a change indicates acceptance of the revised policy.

Contact

Questions, concerns, or deletion requests: im@ptrlrd.com.