Privacy
What we store, why, and how to get rid of it. We keep as little as we can, because what we do not hold cannot leak.
Plain English · This text has not been reviewed by a lawyer. It is published so the rules are readable before anyone is asked for money. Where it is unclear, the plainest reading against us is the one we will apply.
1. Controller
Amber Stack LLC, registered in New Mexico, United States, decides how your personal data is handled.
Registered address: 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States. Contact: [email protected].
We have not appointed a data protection officer, because we are too small to be required to. The address above reaches the people who make these decisions.
2. What we collect
Account: your email address, and the display name and avatar you choose. You sign in with a link sent to your email; we do not store passwords.
Purchases: amounts, dates, the place and faction they belong to, and the payment reference. Card details are handled by our payment provider and never reach our servers.
Technical: request logs with IP address and browser, kept short-term to detect abuse and fix failures.
We do not collect location data, we do not buy data about you, and we do not run advertising trackers.
3. Why we are allowed to
To provide the service and take your money for it (performance of a contract).
To keep accounting and tax records (legal obligation).
To prevent fraud, abuse and unlawful content (legitimate interest).
To send optional alerts about places you follow (consent, withdrawable at any time).
4. What is public
Your faction's name, emblem and message are public on the map and on shared cards from the moment you set them. They only appear on our social accounts once a person has approved them.
Your email address is never public. Your individual contribution is visible only inside your faction.
5. Who else sees it
Our payment provider (Stripe), our email provider (Resend), our hosting and our error logging. Each sees only what it needs to do its job. Stripe also sets its own cookies on the checkout step to detect fraud; the Cookies page says more.
Public authorities, when the law requires it.
6. How long we keep it
Accounting records: as long as tax law requires.
Account data: until you delete your account.
Logs: a short period, measured in weeks.
Deleting your account removes your identity from the service. It does not remove the money already credited to a faction, and it does not rewrite a sealed season record — those are facts about the game, not about you.
7. Your rights
You can ask for a copy of your data, correct it, delete it, restrict how it is used, object to it, or take it elsewhere. Write to [email protected] and we will answer within one month.
You can also complain to your national data protection authority.
8. Where your data lives
Our servers are in the European Union. The company that operates the service is registered in the United States, and two of our providers (Stripe and our email provider) are American, so some data reaches the United States.
For those transfers we rely on the European Commission's standard contractual clauses, which our providers have signed. If you would rather your data never left the EU, the honest answer is that we cannot offer that while taking card payments.
9. Cookies
We use a cookie to keep you signed in and one to remember your language and theme. We do not use advertising or analytics cookies that identify you. Details are on the Cookies page.