What the game keeps about you

Sign-in goes through Firebase, Google’s authentication service: it keeps your email address and, if you have one, your password in encrypted form. With a Google account, it receives your Google address and name. Your email is never shown to other players.

The game keeps your username, your avatar, your collection, your coins, your trades, your auctions, your wishlist, your friends and your referral. Your username, avatar, collection and ranking are visible to other players: that is how the game works.

Notifications are deleted after 30 days.

If you turn on notifications on a device, the game only keeps the address your browser gives it to receive them. They go through your browser’s notification service (Apple, Google or Mozilla), which cannot read them: they are encrypted for your device. This address is deleted when you turn notifications off or sign out.

To enforce the one-account-per-person rule, the game records two things on each of your visits:

• a fingerprint of your connection: your IP address put through a one-way calculation. The game can see that two accounts share the same one, but cannot recover the address or where you connect from;
• a random number drawn the first time you open the game, stored in your browser. It only tells that two accounts were opened in the same browser, not which device you use.

With each one, the game keeps the date of your last visit. They are deleted 90 days after your last visit with that connection or browser. They are only used to spot accounts played by the same person, and are never shown to other players.

If you link your account to Comics Tracker, the game only asks it whether you support the site, for your supporter perks. If you link Discord, Comics Tracker keeps your Discord ID so the bot can send you the alerts you chose. You can unlink Discord at any time from your profile.

The game stores in your browser your sign-in session, the number mentioned above and a few display preferences, such as the last tab you opened. It uses no advertising or tracking cookies.

The site is served by Cloudflare, accounts are handled by Firebase (Google), and the rest is on the game’s server.

You can ask to see what the game keeps about you, to correct it or to delete your account. Write on Discord with your username: requests are handled by hand, within one month at most.