Privacy Policy

Last updated: January 2026

TL;DR (We Value Your Privacy)

We collect only what we need to make the site work. We don't sell your data – ever. This is a free passion project with no profit motive. Your privacy and safety matter more to us than anything else. Simple as that. 🛡️

1. What We Collect (Very Little)

We collect the bare minimum needed to make the site work:

Email address: Required for login and account recovery
Display name: Optional – you can set one or we use what your OAuth provider shares
Game data: The matches you submit (factions, scores, notes) – this is the whole point of the site

That's it. We don't collect your IP address, location, or any tracking data. Our hosting providers (Vercel, Supabase) may keep standard server logs per their own policies, but we don't access or use them.

2. How We Use Your Data

To let you log in and track your campaigns
To display community statistics (aggregated, anonymized)
To improve the site and fix bugs
That's it. No marketing, no selling, no weird stuff.

3. What We DON'T Do

This is important:

❌ We don't sell your data to anyone
❌ We don't share your data with advertisers
❌ We don't make money from this project
❌ We don't track you across other websites
❌ We don't use your data for anything shady

4. Third-Party Services

We use a few trusted services to run RTWHQ:

Supabase: Our database and authentication provider
Vercel: Hosts the website
Discord/Google: For OAuth login (optional – you can use email instead)
Resend: Sends password reset and verification emails

These services have their own privacy policies. We chose them because they're reputable and take privacy seriously. Any server logs are retained only as long as necessary for security and debugging purposes.

5. Data Security

We use industry-standard security practices: encrypted connections (HTTPS), secure authentication, and database-level security policies (Row Level Security). Is it Fort Knox? No. But we take reasonable precautions to keep your data safe.

6. Your Rights (Including GDPR)

Whether you're in the EU or anywhere else, you have these rights:

Access: Ask us what data we have about you (spoiler: not much)
Rectification: Update or correct your information anytime
Erasure: Request we delete your account and all associated data
Portability: Get a copy of your data in a usable format
Objection: Object to how we use your data

Just email us at hello@rtwhq.com and we'll help you out. No hoops to jump through, no forms to fill. We aim to respond within 30 days.

7. Data Retention & International Transfers

How long we keep data: We keep your account data as long as your account is active. If you delete your account, we remove your data. Simple.

Where data is stored: Our services (Vercel, Supabase) may store data on servers outside the EU. They use standard contractual clauses and security measures to protect data transfers. Since we collect minimal personal data (just email), the risk is low.

8. Cookies

We use essential cookies to keep you logged in. That's it. No tracking cookies, no advertising cookies, no cookie consent banner nightmare. 🍪

9. Questions?

Privacy concerns? Questions about your data? Email us at hello@rtwhq.com. We're happy to help.