Privacy

Browser-only progress

Your exact Sprite IDs and complete owned and mastered lists stay in localStorage on your device; they are not uploaded to Epic Games or this site's server. If you allow analytics, Google Analytics may receive an anonymous owned or mastered toggle event (added or removed), but never the Sprite ID or your complete progress. Clarity receives only a fixed generic event name without those toggle details.

Account-free feedback

If you choose to send feedback, we store the category (bug, feature, or other), short title, details, current page path without its query string, submission time, and an internal review status. The form does not ask for an email address, Epic ID, account, or tracker progress. Please do not put personal information in the free-text fields.

Cloudflare Turnstile is an essential abuse check for this form, not optional analytics. It loads when you open the feedback form, verifies a short-lived token, and may process browser, device, and network signals under Cloudflare's privacy terms. The token is not stored with your feedback.

Like other web requests, the submission reaches Cloudflare with a source IP address. The feedback service immediately converts that address into a secret-salted HMAC-SHA-256 value for short-lived 10-minute and daily rate-limit buckets. The original IP address is not written to D1, and the hash is not attached to the feedback row. Expired rate-limit buckets are removed during routine cleanup.

We review feedback at least quarterly and delete the original title and details no later than 12 months after submission. Closed items and accidental personal information may be deleted earlier; if an idea is still useful, we can retain a non-identifying product note instead of the original feedback text.

Optional analytics

Analytics stay off until you allow them. If allowed, Google Analytics measures aggregate page and feature use. Microsoft Clarity may record masked interaction sessions and heatmaps so we can find dead taps, confusing controls, and mobile layout problems.

We do not call Clarity identify, and we do not send search text, Sprite IDs, owned or mastered lists, progress backups, Epic IDs, or account data to Clarity. The search field is explicitly masked.

Cookies and withdrawing consent

When analytics are allowed, Google Analytics and Microsoft Clarity may set analytics cookies. You can change your choice below at any time. Turning analytics off stops new tracker events in this browser and removes accessible Google Analytics and Clarity cookies; it does not erase data already processed by the providers.

Provider details

Read the providers' own terms at Google Privacy and Microsoft Privacy, and Cloudflare Privacy.