Privacy Policy
Tarnished's Ledger (“the site”, “we”) is a community tool for tracking and analysing Elden Ring bingo matches. This policy explains what personal data we hold, why, and your rights. Questions: privacy@tarnishedledger.com.
Data we collect
- Account & identity — when you sign in with Twitch or Discord we receive a provider identity (and, where the provider supplies it, an email). You choose a username.
- Gameplay data — matches you record or import (results, boards, square text, weapons, formats, timings), tournaments/leagues, and lobby play.
- Social/UGC — lobby chat, follows, coaching messages, wiki/format submissions, colour profiles, feedback you send.
- Optional — a Twitch handle you add for stream embeds.
- Technical — standard server logs (IP address, request metadata) kept by our hosting providers for security and reliability.
How we use it
- To run the service: your account, recording/analysing matches, lobbies, tournaments, the public stats and profiles you opt into.
- To show matches to the people you tag in them — see “Sharing” below.
- To keep the service safe (moderation of user-generated content, abuse/rate-limit controls).
Legal bases (where GDPR applies): performance of our agreement with you (running your account), our legitimate interest in operating and securing the service, and your consent where you opt into a public profile or add optional data.
Cookies
We use only strictly-necessary cookies — the authentication/session cookies that keep you signed in (set by our auth provider) and a short-lived cookie used during account linking. We do not use analytics, advertising, or tracking cookies, so no cookie-consent banner is required. See Cookies for the list.
Sharing
- Other players you tag. When a match tags another account, that match appears on their profile and shared-match views — recording a game is inherently shared between its players.
- Public surfaces you opt into — a public profile, public tournaments/leagues, and aggregate community stats (no private rows or emails).
- Service providers (sub-processors) that host and run the site: Supabase (database & authentication), Vercel (web hosting), Fly.io (live-play server). Signing in uses Twitch / Discord. We don't sell your data.
Retention
We keep your data while your account exists. Deleting your account (Account settings) permanently removes your account and associated data; some content already shared with other players (e.g. a match they also recorded, or chat retained for moderation) may persist as part of their records or our abuse logs.
Your rights
Depending on where you live you may have the right to access, correct, export, or delete your data, and to object to or restrict certain processing. In Account settings you can download a copy of your data (“Download my data”, a JSON export) and delete your account yourself; for any other request, contact privacy@tarnishedledger.com.
Children
The site isn't directed at children under 13 (or the minimum digital-consent age in your country, up to 16 in parts of the EU). Don't use it if you're under that age.
Changes
We may update this policy; we'll change the “last updated” date above and, for material changes, give notice in-app.