Privacy Policy

Browsing without an account

You can use every reference page on this site — items, runewords, builds, calculators — without creating an account or signing in. Doing so collects no personal data about you. The site runs no analytics, no advertising trackers, and no third-party tracking scripts of any kind.

What we collect if you sign in

Signing in is optional and only needed for the Grail Tracker (tracking which items you own, saving notes on your finds, and setting game preferences like server/mode/platform). Signing in uses Google, and we receive your email address, display name, and profile picture from your Google account — the same basic info any "Sign in with Google" button shares, nothing more.

Once signed in, we store what you actively choose to save: which items you've marked as owned, any notes or details you enter about item finds, and the profile preferences you set (in-game battle tag, public display name/username, avatar choice, server region, game mode, platform, and ladder season). We don't collect anything beyond what these features need.

Comments are public

If you post a comment on an item or runeword page, it is public — visible to every visitor, including people who aren't signed in, and it isn't private data the way your owned-items list or finds are. A comment shows the display name (username) you've set — a name you choose yourself, not necessarily your real name — plus the comment text and the date posted. It never shows your email address, your Google account name, or any other account details.

By default your display name is a randomly generated placeholder (e.g. "Anonymous1234") until you change it on your profile page; nothing about it identifies you personally unless you choose a name that does.

Comments aren't covered by the self-service "delete individual entries" tools available for owned-items/finds. To have a comment removed or edited, contact us (see below).

How we use it

Your data is used only to run the features you're using — showing your saved collection back to you, remembering your preferences, and letting you sign back in later. We don't use it for advertising, we don't build profiles about you, and we don't sell or rent it to anyone.

Third-party services we rely on

Running the site depends on a small number of outside services, each of which has its own privacy policy governing how they handle data:

• Google — provides the optional sign-in. Google's own privacy policy covers what Google itself does with your account data.

• Supabase — hosts the database and authentication system that stores your account ID and saved data (owned items, finds, profile preferences) if you sign in.

• GitHub Pages — hosts the site's files. Like any web host, GitHub's servers log standard technical request information (e.g. IP address, browser type) as part of normal web hosting; this is governed by GitHub's own privacy policy, not something myD2R itself collects or has access to.

Cookies and local storage

myD2R itself doesn't set any tracking or advertising cookies. If you sign in, your browser's local storage (not a cookie) keeps you signed in between visits, the same way most "remember me" sign-ins work — this is functional storage needed for the sign-in itself to work, not used for tracking.

We don't sell your data

We don't sell, rent, or share your personal data with advertisers or data brokers. Data is only shared with the third-party services listed above, and only as needed to run the features you're using.

Keeping and deleting your data

Your saved data stays until you delete it or close your account. You can remove individual owned-items and finds directly within the Grail Tracker at any time. To delete your account and all associated data entirely, contact us (see below) and we'll remove it.

Children's privacy

myD2R isn't directed at children, and the optional sign-in features aren't intended for use by anyone under 13. We don't knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we'll remove it.

Where your data is processed

This is a small, independently-run site without dedicated infrastructure in every region — your data may be processed on servers located in a different country than you, via the third-party services listed above.

Changes to this policy

This policy may be updated as the site's features change. Material changes will update the "Last updated" date above.

Contact

Questions about your data, or want your account deleted? Open an issue on the project's GitHub repository and we'll get back to you.