Политика конфиденциальности

Who we are

Conquest Points (conquestpoints.com) is a free, unofficial fan tool that helps Total Battle commanders post a CP race, share one link, and claim seats. It is not affiliated with, endorsed by, or connected to Scorewarrior, Total Battle, or their trademarks. We never ask for a Total Battle password, and we do not scrape the game.

Contact

Privacy and deletion requests: privacy@conquestpoints.com.

TODO: privacy@conquestpoints.com is a placeholder. No monitored contact address is set in this project yet. Replace it before you rely on this page for real requests.

Data we collect

We collect only what the board needs to run a race:

• Account email. Sign-in is a magic link or a one-time email code through Supabase Auth. We store the email address so you can sign back in. We do not collect a password for this site or for the game.
• Profile you choose to save. Display name, timezone, time-format preference, clan, might, kingdoms, and in-game chat handle.
• Army notes you choose to save. Troop tiers (Guardsmen, Specialists, Mercenaries, Monsters, Engineers) and Leadership, Authority, and Dominance.
• Races and seats. Title, type, kingdom, start time, rules, compensation notes, whether the race is public, the role and RSVP of each person on the roster, and CP city coordinates. Coordinates are shown to people already on that roster. They are not pasted into Chat by the board.
• Standing offers. Roles you offer (tank, defender, or CP city), an optional note and compensation line, optional troop tiers, and when the offer expires.
• Feedback. The message, the page URL, and a contact email (your account email if you are signed in, otherwise an address you type). If you are signed in, we also store your account id. A display name may be prefixed to the message.
• Mail delivery. Sign-in messages and optional calendar invites are sent through Resend to the email on the account.

Cookies

• PARAGLIDE_LOCALE. Remembers the language you picked. It lasts about 400 days, is not HttpOnly, and uses SameSite=Lax. It is a preference cookie, not an advertising cookie.
• Supabase Auth session cookies (names starting with sb-). They keep you signed in. They hold a session token, not a game password.

We do not use advertising cookies, and we do not sell personal information.

Analytics

We use Vercel Web Analytics. It is cookieless. It records page views plus these product events: landing view, sign-in started, sign-in completed, race created, invite link copied or shared, and seat claimed. An event may include a non-identifying detail such as race type, role, or whether you copied, used the device share sheet, or opened an outbound share link.

Those events do not include your email, display name, chat handle, or city coordinates. Server events send a user-agent and IP-forwarding header to Vercel so the event can be counted. They do not include your sign-in cookie. Vercel may also see the page URL, referrer, browser, device, and a coarse location derived from the IP address. We do not run a separate analytics database. Vercel keeps this data under its own Web Analytics retention.

Why we process it

• To provide the roster you asked for: creating an account, hosting a race, and claiming a seat.
• For legitimate interests in keeping the service secure, preventing abuse, and understanding whether commanders can finish a race. Cookieless product analytics sits in this category.

You can object to analytics, or ask us to stop using your account data, by emailing the contact address above.

How long we keep it

Account, profile, army, race, roster, offer, and feedback records stay until you delete them or you ask us to. We do not run an automatic purge. Sign-in links and email codes expire shortly and work once. Locale and session cookies expire on the schedules above. Analytics records stay with Vercel, not in our database.

Who else processes it

• Supabase stores accounts and the roster database.
• Resend delivers sign-in and calendar email.
• Vercel hosts the site and provides Web Analytics.

Those providers may process data in the United States and in other countries where they operate. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

GDPR and UK GDPR

If you are in the EEA, the United Kingdom, or Switzerland, you can ask to access, correct, export, or delete your personal data, and you can object to or restrict certain processing. You can also lodge a complaint with your local supervisory authority. Email the contact address above and we will respond. Where a race still has other commanders on it, we remove or detach your personal data and can take the race down when the roster no longer needs it.

CCPA / CPRA

If you are a California resident, you can ask us to know, correct, or delete the personal information we hold about you. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. Email the contact address above to make a request. We may need to confirm that the email matches the account.

Children

The board is not directed at anyone under 16. We do not knowingly collect their personal information. If you believe a child has signed up, email us and we will delete the account.

Changes

When this policy changes, we will update this page and the date at the top. How you may use the board is covered in the Условия использования.