Privacy policy

Who is responsible

HolyCraft is run by ARIEL SPA. Contact: jesucristo69contact@gmail.com.

Without an account

You can use the calculators without logging in. Your settings, specs and typed prices are kept only in your own browser (localStorage) and never reach our servers.

With an account

When you log in with Twitch, Discord or Google we receive and keep: the id of your account in that service, your public name and the address of your avatar. Nothing else: not your e-mail, your password or your friends.

We also keep what you save: your specs, the settings of the calculators and your crafting planner, plus the dates your account was created and last used.

Each login creates a session: a random code stored in a cookie on your device. Our database only keeps a fingerprint (hash) of that code, its expiry date and the browser it was opened from.

If you buy HolyCraft Plus we keep the date it ends and a record of each payment (PayPal order id, amount and date). Your card or PayPal account details are handled by PayPal and never reach us.

Why

Only to run the service you ask for: logging you in, keeping your data and giving you access to what you paid for. We do not sell data, show ads or use analytics or tracking.

Cookies

hc_session: keeps you logged in (30 days, renewed while you use the site).

hc_oauth: protects the login against forgery; it lasts 10 minutes and is deleted when the login ends.

Both are strictly necessary and are only set when you log in. There are no advertising or analytics cookies.

Other services your browser talks to

Albion Online Data Project (albion-online-data.com): live market prices and sales are requested directly by your browser, so that service sees your IP address.

render.albiononline.com (Sandbox Interactive): item images.

Twitch, Discord and Google: only when you choose to log in with them; their own privacy policies apply.

PayPal: only when you buy Plus; the payment window is loaded from paypal.com and their privacy policy applies.

Our servers are hosted by Contabo in the European Union.

How long

Your data is kept while your account exists. Expired sessions are deleted automatically.

Deleting your account (My account → Delete account) removes it and everything saved with it at once; backup copies are overwritten within 14 days. Payment records are the exception: accounting rules require keeping them, so they stay without any link to you (no name, avatar or account).

Your rights

You can see your data in My account, change it in the calculators and delete it with your account. For a copy of your data or any other request, write to jesucristo69contact@gmail.com.

Changes

If this policy changes, the new version will be published here with its date.