Privacy policy

This policy explains what personal data UniqueDrop collects, why, and what you can do about it. UniqueDrop ("we") runs this website from the United Kingdom and is the controller of the data described here. Contact us at .

What we collect

• Account details. Your email address, the display name you choose, and your password. Passwords are stored in hashed form by our account provider; we cannot read them.
• What you do on the site. The builds you save, your account tier, and any articles you write if you are a member of staff.
• Technical data. Your IP address and basic browser information, recorded in our providers' server logs when you load a page.

You can read the site without an account. We do not collect payment details, and we do not buy data about you from anyone.

Why we use it

• To create and run your account and remember what you saved. The legal basis is our contract with you under the Terms.
• To send you account emails: confirming your address, resetting your password, or confirming a change of email. Same legal basis.
• To keep the site secure and working, for example by spotting abuse. The legal basis is our legitimate interest in running a safe service.

We do not send marketing emails, show targeted advertising, or sell or rent your data.

Storage in your browser

The site keeps a small amount of information in your browser's local storage: the token that keeps you signed in, and your Diablo IV or V preference. These are needed for the site to work. We do not use advertising or analytics cookies.

Who processes data for us

• Supabase stores accounts and site data in a data centre in Europe.
• Netlify hosts the website and records server logs.
• Google Fonts and jsDelivr deliver fonts and a script file to your browser, and receive your IP address when they do.
• Our email delivery provider sends account emails on our behalf.

Some of these companies are based in the United States. Where data leaves the UK, it is covered by the transfer safeguards those providers offer, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep it

We keep your account data for as long as your account exists. When you ask us to delete your account, we remove your profile and saved builds within 30 days. Server logs are kept for the periods set by our providers.

Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. You can change your display name, email and password yourself on your account page. For anything else, including deleting your account, email . We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Age

UniqueDrop accounts are for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, tell us and we will delete it.

Changes

If we change this policy we will update the date at the top, and tell account holders by email if the change is significant.