Privacy policy
Short version: you don't need an account, we run no analytics or tracking, and the tools run in your browser. If you choose to sign in, we keep a random account number, which service you signed in with, and the progress you sync. Nothing else. The details are below, specific to what this site actually does.
Who is responsible
The data controller is Almanauts, the operator of almanauts.com. Contact us at hello@almanauts.com about anything on this page.
What we collect
If you don't sign in: nothing that identifies you. There are no comment forms or newsletters, and we run no analytics or tracking scripts. Signing in is optional; what it stores is listed below.
What stays in your browser
Some tools remember things for you using your browser's local storage. Unless you sign in, that data never leaves your device and we can't see it:
- your theme (light or dark);
- planner setups and builds you choose to keep, such as breeding pairs;
- progress you tick off, such as Hytale memories, map markers (with your notes and tracked markers) or checklists;
- games you follow on the release calendar, and tier lists you build.
The Your data page lists all of it and lets you download a backup file, restore one, or clear it. Clearing this site's data in your browser removes it too. When you first save progress, the site asks your browser to keep its storage even when space runs low; the browser decides, and nothing is shown or sent. A tier list you share puts its contents in the link itself, not on a server.
If you sign in (optional)
You can sign in with Google or Discord to copy your saved progress between your devices. There are no passwords. When you sign in:
- we ask Google only for a sign-in confirmation (the "openid" permission) and Discord only for your account id (the "identify" permission), and keep just that id and the service's name. We don't receive or store your email address, and we don't keep your name, picture or any other profile details;
- we store a random account number, the progress, builds and lists this site keeps in your browser (with the time each last changed), and a sign-in session. The session is a random code kept in a cookie (below); our server only keeps a scrambled (hashed) copy of it. Your theme, cookie choice and map display settings stay on each device;
- the data is stored in Cloudflare D1, Cloudflare's database, as part of our hosting. It is used only to sync your progress, never for advertising, and never shared or sold.
Cookies. Signing in sets two first-party cookies for 90 days: __Host-sm_session(the session; scripts can't read it) and sm_acct (just says "signed in", so pages know to sync). During sign-in a third, __Host-sm_oauth, holds a one-time check for up to 10 minutes. These are strictly necessary for a service you asked for, so they don't need a consent banner. Signed out, the site itself sets no cookies.
Your control. On the Your data page you can download everything your account holds, sign out, or delete the account. Deleting removes the account and all of its data from our database immediately; what's saved in your browser stays there. The legal basis is performing the service you asked for (GDPR Art. 6(1)(b)).
Google's and Discord's own privacy policies cover what happens on their sign-in pages: Google, Discord.
Game saves
When you load a save file into a planner, it is read inside your browser. It is never uploaded, and our servers never receive it.
Who else sees your requests
- Cloudflare hosts the site. Like any web host, it processes your IP address and request details to deliver pages and to block attacks, under Cloudflare's privacy policy. We don't receive or keep these logs.
- Cover art on the release calendar loads from IGDB (images.igdb.com) and Steam's image servers. Your browser fetches those images directly, so those services see your IP address for that request.
- Donations happen on Ko-fi, which processes payments through Stripe or PayPal, under their own privacy policies. We never see your card details.
Advertising
There are no ads on the site today. If we add them, this section takes effect and we update the effective date above.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google's advertising cookies let it and its partners serve ads to you based on your visits to this site and/or other sites on the internet. See how Google uses information from sites that use its services.
- You can opt out of personalised advertising in Google's Ads Settings, or opt out of many third-party vendors at aboutads.info and, in Europe, youronlinechoices.eu.
- Visitors in the EEA, the UK and Switzerland will be asked for consent through a Google-certified consent tool before any advertising cookie is set. You can change your choice at any time from Cookie settings in the footer.
- Ads are always labelled and never placed inside a tool.
Children
The site is not directed at children under 13, and we don't knowingly collect data from anyone. If you believe a child has sent us personal information, email us and we will delete it.
Your rights
Under the GDPR and similar laws you can ask what data we hold about you, and ask us to correct, delete, restrict or export it, or object to its use. Without an account we hold no personal data, so the answer will usually be "none"; with one, the "Your data" page lets you export or delete it yourself at any time. If you email us, we keep that email only as long as we need it to reply. You can also complain to your local data protection authority.
We reply to privacy requests within 3 working days, and always within the 30 days the law allows.
Change log
- The site is now called Almanauts (almanauts.com); contact is hello@almanauts.com. Donations, when they open, go through Ko-fi. The terms gained an Accounts section.
- Added optional sign-in (Google or Discord) to sync progress between devices, the "Your data" page (backup, restore, clear), and what an account stores.
- Rewritten in full: what we store, who else sees requests, ads (not active yet), your rights.