Privacy

This is a fan site with no accounts, no email and no advertising. It counts how often each page is looked at, and records nothing that could identify who looked. Almost everything it remembers about you never leaves your browser, and the one part that can is something you have to switch on.

The short version

No account, no email address, no password. There is nothing to sign up for and nowhere to put an email address, so there is none to store.
Page views are counted. You are not. Four things are recorded when a page is opened: which page, which site linked to it, the date, and whether the screen is phone-sized. No IP address, no browser string, no cookie, no identifier of any kind - so two visits cannot be recognised as the same person, by us or by anyone reading the table. There is no advertising and no third party involved. What the site remembers about your own use of it, it remembers in your browser's own storage.
One cookie exists, and it is not for you. Signing in is available to the person who runs the site and to nobody else, and it sets a session cookie for them when they do. Reading the site sets no cookie, and there is nothing here for a reader to sign in to.
Your save file is read in the browser and never uploaded. Importing one reads the file you picked and keeps what it learned locally.
Saving a build to the cloud is opt-in, so is syncing a character's progression with it, and so is letting the game mod publish one. None of it happens unless you ask.
The game mod sends nothing until you pair it and ask. Vampidex Companion reads the save your game already has open and can publish a list of what you have unlocked and what the game has counted. It sends that list and never the save file, to this site and nowhere else, and only for the saves you publish. Each paired device gets its own key, and you can revoke one without touching the others.

What is kept in your browser

All of this lives in your browser's own storage, on the device you are reading this on. It is not sent anywhere, it is not readable by another site, and clearing your browser's site data for this domain removes every last piece of it.

Your planned build and your saved builds - the characters, weapons, stage and modes you picked.
Your saves and their progression - what an imported save said you had unlocked, and which named save each one belongs to.
Preferences - the content-pack filter, whether portraits animate, which view a page was last in, the music toggle and its volume.
Your personal link, if you have made one - see below.

What can leave your browser, and only if you ask

The site can keep builds for you so they follow you between devices. That uses a database, and it is the only part of this that involves one.

A personal link is the identity. There is no sign-in. Pressing "Get your personal link" asks the database to mint a random token and hands it to you as a URL. Anyone holding that URL can read and change that account's builds, which the site says before it gives you one.
Only a hash of the token is stored. The database keeps a one-way hash of your link, never the link itself, so a copy of the database hands out no keys - and losing yours loses the account, because there is nothing to recover it from.
A saved build holds the build and the name you gave it. A character can also carry its progression, which is what an imported save said you had unlocked. That is the "sync progress" switch, it is off unless you turn it on, and it is per character.
Sharing a build mints a second random id and makes that one build readable by anyone holding it. Nothing else on the account becomes readable, and unsharing revokes it.

Who else is involved

Vercel hosts the site. Serving a page means their servers see the request: the address you asked for, your IP address and your browser's user agent, the way every web server does. There is no application code running there - the site is a folder of files - so nothing of yours passes through anything of ours on the way to you.
Supabase runs the database, in their eu-west-1 region (Ireland). It is only contacted if you have made a personal link or opened a shared build; a visitor who never does never talks to it.

Both are ordinary infrastructure providers acting on instructions. Neither is sent anything about you that is not described above.

Your rights, and the buttons that exercise them

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Because there is no account and no profile of you, most of them come down to controls the site already has:

See what is held: everything local is on the page in front of you - My saves lists them and their progression, the planner holds the build. Everything remote is what you saved, listed on the same pages.
Correct it: edit or re-import. A save import replaces what the previous one said.
Erase it: delete a build or a character to remove it, including its cloud copy. Forget this link in the personal-link panel removes the link from this device. Clearing your browser's site data removes everything local in one go.
Stop sharing: unsharing a build revokes its share id, and the link stops working.
Object: there is nothing to object to - no profiling, no advertising, and nothing in the page-view counts that points at you - and using the site without ever making a personal link means nothing that identifies you reaches a database at all.

Deleting an account outright means deleting its builds and characters and then forgetting the link. Once the link is forgotten there is no way back in, by anyone, including us.

Children

The site is written to be comfortable for a teenager and collects nothing that would identify anyone, of any age.

Who to contact

This is a personal, non-commercial project run by one person, who is the data controller for the little that there is.

Contact: there is no address, which is less an oversight than a theme. The owner has no idea who you are, you have no idea who the owner is, and neither of you can do anything about that. It also means there is nothing to write in and ask for: every right this page grants you is already a button you have, and the delete one is on your own characters.

Changes

If this changes, it changes here, and the release it changed in is listed in the site's changelog. There is no mailing list to announce it on, because there is no mailing list.