Privacy Policy

1. Introduction

ROSE Online Toolbox ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username/display name
• Password (stored securely hashed)

OAuth Authentication

If you sign in with Discord, Google, or GitHub, we receive:

• Your unique ID from the provider
• Email address (if provided by the OAuth provider)
• Display name
• Profile picture URL

User-Generated Content

We store content you create, including character builds, market listings, clan recruitment posts, and other submissions you make through our service.

Usage Data

We may collect basic usage information such as pages visited, features used, and timestamps for service improvement purposes.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Authenticate your identity and manage your account
• Display your content to other users (builds, listings, etc.)
• Improve and optimize our service
• Communicate important updates about the service
• Prevent abuse and enforce our terms of service

4. Information Sharing

We do not sell your personal information. We may share information only in these circumstances:

• Public content: Builds and listings you mark as public are visible to other users
• Legal requirements: If required by law or to protect our rights
• Service providers: With trusted third parties who help operate our service (hosting, etc.)

5. Data Security

We implement appropriate security measures to protect your information, including encrypted connections (HTTPS), secure password hashing, and HTTP-only authentication cookies. However, no method of transmission over the internet is 100% secure.

6. Cookies and Local Storage

We use:

• Authentication cookies: HTTP-only cookies to keep you logged in
• Local storage: To save your preferences and cached data locally in your browser

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Unlink OAuth providers from your account

8. Third-Party Services

When you use OAuth login (Discord, Google, GitHub), your authentication is handled by those providers under their respective privacy policies. We only receive the information described above and do not have access to your passwords for those services.

9. Data Retention

We retain your account information as long as your account is active. If you delete your account, we will delete your personal information within a reasonable timeframe, except where we are required to retain it for legal purposes.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us through our community channels.