Privacy Policy

Data we process

• Server logs: the site is hosted on Cloudflare Pages. When you connect, Cloudflare processes technical data such as your IP address and browser and device information to deliver the site, prevent abuse and keep it secure, under Cloudflare's privacy policy.
• Abuse prevention and rate limiting: features that write data (feedback, build and filter sharing, likes, event sign-ups) keep a one-way hash of your IP address for a short time to limit how often one source can act. The hash cannot be turned back into an IP address and expires automatically within 24 hours to 30 days.
• Feedback: the message you write, the optional contact details, the page you sent it from and your IP address are forwarded to the site owner's Telegram. The message, contact details and page are also stored in the site's database (Cloudflare D1); for the IP address only a one-way hash is stored, never the address itself. This data is used only to reply, to fix the data and to deal with abuse.
• Content you submit: builds and loot filters are anonymous submissions; the title, author name and content you enter are shown publicly to everyone. The edit key stays in your own browser; the site stores only its hash. New submissions are sent, with the IP address, to the site owner's Telegram and used only to deal with abusive content.
• Ad-free for supporters: when you enter an Afdian order number or sign in with Patreon on the ad-free page, the site asks that platform whether the support is active. We keep only the supporter ID the platform gives us and up to 3 random device identifiers (to limit the number of devices); we never store your name, the amount or any payment details, and the Patreon authorisation is used for that one check and not kept. When you support on Ko-fi, Ko-fi notifies the site of the payment; we keep only a one-way hash of the payment email and the ad-free end date — never the email itself, your name or your message — so that entering the same email on the ad-free page can be matched. Also, whenever Afdian, Ko-fi or Patreon notifies the site of a new payment, the amount, plan, the display name you use on that platform and your message are forwarded to the site owner's Telegram (never the email or payment details); the site does not store them.
• Browser local storage: interface preferences (such as the number of columns), unsent drafts, a random device identifier and the ad-free pass are stored on your device. Only the event and ad-free features send the random identifier (and the pass) to the site; nothing else is sent back to us.

Build comments and favourites

• Commenting on a build page needs no account. The nickname (optional) and the text you write are shown publicly on that build page for everyone to see, so please don't put personal information in a comment.
• Along with the comment we store the time, the interface language, a one-way hash of your IP address (used for rate limiting and handling spam; it cannot be turned back into an IP address) and a hash of the delete key. The delete key itself stays in your browser. New comments and reports are sent, with the IP address, to the site owner's Telegram and used only to deal with abusive content.
• You can delete your own comment from the same browser, the author of a build can delete comments under their build, and the site owner removes abusive content. A deleted comment disappears from the page immediately; the record is kept for handling reports and verification. To have the record of a comment erased completely, tell us through the contact page.
• Your favourites list is stored only in your browser and is never sent to the site.

Cookies and third-party services

• This site sets no tracking cookies of its own.
• Analytics: we use Cloudflare Web Analytics for aggregate traffic figures (page views, referrers, device types). It uses no cookies, builds no profiles and does not track you across sites.
• Advertising: this site may show ads served by Google AdSense. Third-party vendors, including Google, use cookies (including the DoubleClick DART cookie) to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising in Google's Ads Settings, or opt out of third-party vendors' personalised-ad cookies at www.aboutads.info. How Google uses data from partner sites is explained here. Visitors in the EEA, the UK and Switzerland are shown a consent choice before any ads are displayed.
• External links: links to Steam, wikis, sponsorship platforms and other external sites are covered by those sites' own privacy policies, not this one.

How long data is kept

Rate-limit hashes expire automatically within 24 hours to 30 days; feedback messages are kept until the issue is dealt with and deleted automatically after one year at most; builds and filters you submit stay published until you delete them or ask us to.

Children

The site is not directed at children under 13 and does not knowingly collect personal data from them.

Your rights

You can ask us at any time to delete content or feedback you submitted, or to tell you whether we hold any data relating to you. Use any channel on the contact page and we will handle it within a reasonable time.

Changes to this policy

Changes are published on this page with the "last updated" date at the top; significant changes are also announced on the home page.

Contact

Questions about this policy: contact@herosiegedata.com.