Privacy Policy
Your data is yours. We don't sell it. That's the whole policy, really.
We don't sell your data
Not to advertisers, not to data brokers, not to "partners." We don't rent it or trade it either. Your data exists so we can run the service for you. That's it.
What we collect
Only what we need to make the service work:
- •Email address so you can log in and we can send you password resets and security alerts.
- •Password, hashed with Argon2id. We never store or see your actual password.
- •Save files that you upload. Stored securely and only accessible to your account.
For website analytics we use Plausible, which is cookie-free, collects no personal data, and can't identify individual users. We don't use tracking cookies or ad networks.
Your saves are private
Saves are isolated per account. Nobody else can see them. Our system does parse your save files to extract useful metadata (like in-game progress, platform detection, and checksums) so we can show you that info in the dashboard and keep sync working correctly. We don't use that data for anything else.
Delete means delete
If you delete your account, we delete everything. Your profile, your saves, your devices, your history. No shadow copies, no "we'll keep it for 30 days." It's gone.
Security
Passwords are hashed with Argon2id and peppered. Sessions use HTTP-only cookies. We support two-factor authentication via TOTP. All traffic is encrypted in transit, and save files live in private storage that isn't publicly accessible.
Third-party services
We use a handful of third-party services for hosting, payments, and error monitoring. They get the minimum data they need to work. We never share your save files with anyone.
Changes to this policy
If this policy ever changes, we'll email you about it. No quiet updates.
Last updated: March 2026