隐私政策

1. Introduction

ROSE Online Toolbox ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address (guest accounts have none until you add one)
• Username/display name
• Password (stored securely hashed)
• When your sign-in sessions started and expire, one entry per signed-in device

OAuth Authentication

If you sign in with Discord, Google, or GitHub, we receive:

• Your unique ID from the provider
• Email address (if provided by the OAuth provider)
• Display name
• Profile picture URL

User-Generated Content

We store content you create, including character builds, ratings and favorites, market listings and price reports, clan recruitment posts and reports, UI mods you upload, and other submissions you make through our service.

Synced Progress

When you are signed in, progress the site keeps in your browser (hero quest checkmarks, your own calendar events, king and respawn timers) is also saved to your account so it follows you to other devices.

Usage Data

We use PostHog analytics to understand how the toolbox is used and to find bugs. It records:

• Pages you visit, buttons and links you click, and features you use
• Your browser, device type, screen size and approximate country (IP addresses are anonymized and not stored)
• Errors the site runs into and page load performance
• If you are signed in, your account ID, display name, email address and role, so we can tell accounts apart

We do not record your screen (no session replays). To protect against abuse, some submissions such as price reports and anonymous clan reports store a one-way hash of your IP address instead of the address itself.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Authenticate your identity and manage your account
• Display your content to other users (builds, listings, etc.)
• Improve and optimize our service
• Communicate important updates about the service
• Prevent abuse and enforce our terms of service

4. Information Sharing

We do not sell your personal information. We may share information only in these circumstances:

• Public content: Builds and listings you mark as public are visible to other users
• Legal requirements: If required by law or to protect our rights
• Service providers: With the third parties that operate our service, listed under Third-Party Services below

5. Data Security

We implement appropriate security measures to protect your information, including encrypted connections (HTTPS), secure password hashing, and HTTP-only authentication cookies. However, no method of transmission over the internet is 100% secure.

6. Cookies and Local Storage

We use:

• Authentication cookies: HTTP-only cookies to keep you logged in
• Analytics: A PostHog cookie and local storage entry holding a random ID, so visits from the same browser can be counted together
• Local storage: To save your preferences, builds, timers and cached data locally in your browser

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data (change your name, email and password on your account page)
• Delete your account and associated data (from your account page)
• Export your data (the "Download my data" button on your account page)
• Unlink OAuth providers from your account

8. Third-Party Services

• Cloudflare: Hosts the website and our API, database and uploaded files.
• PostHog: Analytics and error reports as described in Usage Data, stored in PostHog's EU region.
• Discord, Google, GitHub: When you sign in with one of them, authentication is handled by that provider under its own privacy policy. We only receive the information described above and never see your password for those services.
• Push services: If you turn on notifications, your browser's push service (for example Google, Mozilla or Apple) delivers them to your device.

9. Data Retention

We retain your account information as long as your account is active. If you delete your account, we will delete your personal information within a reasonable timeframe, except where we are required to retain it for legal purposes.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us through our community channels.