Privacy Policy

We keep collection to the minimum needed to run the service:

• Account information — the email address you provide when you register, used for sign-in and identification. We do not require your real name.
• Content you create — build favorites, saved items and similar activity you actively perform while signed in, used to power your profile features.
• Anonymous usage analytics — aggregate, non-identifying statistics such as page views and button clicks, used to understand what is useful and improve the site. These are not tied to your real-world identity.
• Technical data — standard server/CDN logs (such as IP address, browser type, and request time) processed by our hosting provider for security and reliability.

We use the information above to:

• Provide and maintain the service (sign-in, favorites, saved builds, personalization);
• Keep the site secure and prevent abuse;
• Understand usage and improve features and content;
• Respond to your requests and correspondence.

Where the GDPR applies, we rely on: your consent (for creating an account and its associated data); our legitimate interests (running, securing and improving the site, and anonymous analytics); and performance of a contract (delivering the features you request). You may withdraw consent at any time by deleting your account or contacting us.

We use browser local storage and essential cookies rather than advertising trackers. These store: your sign-in session (so you stay logged in), and your preferences (such as language and light/dark theme). Essential storage is required for the site to function; you can clear it any time via your browser, though signed-in features will stop working until you sign in again.

We rely on a small number of processors, each governed by its own privacy policy:

• Supabase — authentication and database hosting; processes your account email and the content you create.
• Cloudflare — website hosting, CDN and security; processes technical data such as IP address and request metadata.
• Anonymous analytics — aggregate visit statistics as described above, with no personal identifiers.
• Google Fonts — the heading font may be loaded from Google’s font CDN, which can receive your IP address as part of a normal web request.

We do not sell your personal information, and we do not share it for advertising. We share data only with the processors listed above, strictly to operate the service, or where required by law. Links to third-party sites (for example the official Path of Exile trade site) are provided for your convenience; those sites have their own privacy policies and are outside our control.

We retain account information and the content you create for as long as your account is active. Anonymous analytics may be kept in aggregate indefinitely. You may request deletion of your account data at any time, after which we will remove it within a reasonable period, except where we must keep certain records to comply with the law.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and — for California residents — to know what is collected and to opt out of any “sale” of personal information (we do not sell it). To exercise any of these rights, contact us at the address below. We do not discriminate against you for exercising your rights.

Our hosting and processing providers operate globally, so your data may be processed in countries other than your own, including outside the EU/EEA. Where required, such transfers are covered by the providers’ own safeguards and privacy commitments.

The site is intended for a general gaming audience and is not directed at children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We take reasonable technical and organizational measures to protect your data, and rely on reputable providers (Supabase, Cloudflare) for infrastructure security. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the site after changes take effect constitutes acceptance of the updated policy.

For any privacy question, or to exercise your rights, write to us at:

cowmaxs001@gmail.com