Legal
Privacy policy
What this site collects, why it collects it, and how to make it stop. Written against what the code actually does rather than from a template.
The short version
You can use almost all of this site without giving anything. The Squad Builder runs in your browser and saves squads to your own device. The database, guides and class pages need no account and set no tracking cookies. You only hand over anything when you choose to: subscribing to alerts, submitting a correction, or creating an account to post in the forum.
Nothing here is sold, and there are no advertising trackers.
What is collected, and only when
| When | What | Why |
|---|---|---|
| Alert signup | Email address, chosen topics | To send the updates you asked for |
| Correction form | Your claim, any link, and an email address if you give one | To check the claim and reply if it needs clarifying |
| Creating an account | Display name, email address, and either a hashed password or your Discord id and avatar | To attribute your posts and let you sign back in |
| Posting in the forum | What you wrote, and when | It is a public forum; that is the point |
| Any page view | Aggregate page counts, with no cookie and no cross-site identifier | To see which pages are worth writing more of |
Passwords are stored only as a bcrypt hash. Nobody here can read yours, including us — a reset replaces it rather than recovering it.
Your IP address is used transiently for rate limiting, to stop the forms being flooded. It is held in memory, never written to the database, and disappears when the server restarts.
Who else processes it
Named specifically, because “our trusted partners” tells you nothing:
- Vercel — hosting and aggregate analytics. Serves every page and records page counts.
- Neon — the Postgres database holding accounts, forum posts, corrections and alert subscriptions.
- Resend — sends the emails. Sees the address and the message.
- Discord — only if you sign in with it. It tells us your username, avatar and email address. It does not tell us your friends, servers or messages, and we do not ask.
- Bitbucket — holds the source code. No reader data goes there.
Cookies
There is no cookie banner because there is nothing to consent to. The only cookie this site sets is the one that keeps you signed in after you sign in, plus the short-lived tokens that make that sign -in secure. No advertising cookies, no cross-site tracking, no third-party pixels.
Saved squads and your theme preference live in your browser’s own storage. They never reach the server, and clearing your browser data removes them.
Patch alerts are double opt-in: nothing is sent to an address until someone clicks a link delivered to it. Every alert carries an unsubscribe link.
Marketing email — occasional notes about new tools and major data additions — is separate and off unless you tick the box. You can change that any time on your account page, or from the manage-preferences link in the footer of any such email, without signing in.
How long it is kept
- Accounts and posts — until you ask for them to be deleted.
- Alert subscriptions — until you unsubscribe. Unconfirmed ones are not kept indefinitely.
- Corrections — kept after they are handled, because the record of what was changed and why is part of how this site shows its working.
Your rights
Under the UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being processed. Ask and it will be done — there is no form and no fee.
Account deletion is currently by request rather than self-service. It removes the account, its posts and its preferences.
Contact: privacy@zerocompanybuilds.com. If you are not satisfied with the response you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
This site is not aimed at children under 13 and accounts are not knowingly created for them. If you believe one has been, say so and it will be removed.
Changes
If this policy changes in a way that affects what is collected or who processes it, the date at the top changes and anyone holding an account will be told. Silent edits to a privacy policy are how trust in one is lost.