Scope
This draft describes data used by the Plucky.GG website, its account features and the local account preview. Public game statistics, a browser preview and a signed-in account are different sources of data.
Account and service data
- When enabled sign-in is used, Plucky processes the email address or external provider identity, verification status, account and session identifiers, and security records used to limit repeated sign-in attempts.
- The registration form can collect a username, date of birth, country or region, and gender selection, including “Prefer not to say”. It also records the versions of documents accepted and the time of acceptance. The final policy must confirm the purpose and retention of each profile field before registration opens.
- Player and guild names, game identifiers, server, portraits and recorded activity come from public game data. Search and profile requests are sent to the service to return that information; adding a player does not establish ownership.
- Connections to the service expose technical request data, including an IP address, request path and time, to the server and hosting infrastructure. These data support delivery, troubleshooting and protection against abuse.
Cookies and browser storage
- When enabled sign-in is used, a necessary sign-in flow cookie lasts up to 10 minutes and a session cookie up to 7 days. Signing out clears the session cookie. Blocking these cookies can prevent sign-in from working.
- Browser storage remembers theme, language, selected region, recently opened player profiles, followed players, calculator preferences and equipment or crafting drafts. It also caches public data to reduce repeated loading. Local preferences generally remain until removed or replaced; some caches expire sooner.
- The local account preview stores its display name, preferences, added characters, following list and trial state in this browser. Its password form records only completion of the step, never the entered password. Reset preview removes that cabinet state; it does not delete other site preferences or a server account.
Providers and external services
Hosting and email delivery providers process data needed for their functions. If you choose an available Google or Discord sign-in option, that provider handles its own sign-in and returns account information needed by Plucky. Its own privacy terms also apply.
The final list of service providers, processing locations and any international transfer arrangements still needs to be published. This draft does not authorize advertising tracking or marketing messages.
Retention and your choices
You can remove entries from search history, adjust local preferences and clear site data through your browser. Clearing local storage does not remove server records or public game data. Cookie expiration is not a promise that every related server record has been deleted.
The final policy must specify retention and backup periods, the applicable grounds for processing, and a working way to request access, correction or deletion and exercise other applicable rights. A contact for those requests has not yet been confirmed in this draft.
Details to complete
The operator’s legal identity, address, jurisdiction and privacy contact are not yet specified. Provider details and retention rules must also be confirmed before this document is presented as the final privacy policy. Future revisions will carry their own date.