Privacy

What we collect

Browsing and searching need no account and collect no identifier that follows you. If you never sign in and never star anything, we hold nothing about you beyond an anonymous record of which filter combinations came back empty — which is how we work out what to fix.

If you use the watchlist, saved filters, the wipe radar or the vote button, your browser generates a random id and keeps it in local storage. It is meaningless to anyone else and is the only thing tying those lists together. Clearing site data ends it, and the site says so above the list rather than after you have built one worth losing.

If you sign in we hold your email address and which provider you used. If you vote we hold the in-game name or Steam id you gave us, so you only type it once, and the address the vote came from — for twenty-four hours of duplicate checking, then nulled after seven days. If you pay, Stripe holds the card details and we hold a customer id and the dates of your term. We never see a card number.

What we do not do

No advertising, no advertising cookies, no third-party trackers embedded in the pages, and no selling or sharing of anything to anybody. There is no data to sell that anyone would want, and the business model is a listing fee rather than attention.

The only cookies are the session cookie that keeps you signed in and, for one person, an admin session cookie. Neither is used to profile anybody.

Who processes it

Supabase hosts the database and handles sign-in. Vercel serves the site. Fly runs the process that reads the server feed. Stripe takes payments. Resend sends the few emails we send. Each of them sees only the part they need, and each has its own privacy terms.

How long it is kept

Population history: fourteen days, then deleted. Search and view analytics: ninety days. Feedback you send us: ninety days. Vote addresses: seven days. Admin sign-in attempts: fourteen days. Your account, claims and watchlist: until you delete them.

Getting it back, or getting rid of it

Your account page lists everything the account holds and has a button that deletes it: the account, every claim, every listing and everything written on it, votes, watchlist, saved filters and uploaded images. It runs immediately and it is not reversible.

Two things survive on purpose. A record that a payment happened stays, because that is a financial record and because founding places are counted from every row ever written — deleting one would resell a place somebody already bought. And a moderation log of what we did stays, because a log the subject can erase is not a log. Neither holds anything you wrote.

If you want a copy of what we hold rather than its deletion, ask through the feedback button and we will send it.