Privacy

What we store

• Your sign-in identity. When you sign in with Google or Discord we receive and store the account id that provider gives us, your display name, and your avatar image URL. That is what lets you keep one collection across devices.
• An age band — never your full birthdate. We ask for your birth year the first time you use trading, matches, or set a contact handle — never to use the tracker itself — and throw the year away immediately, keeping only whether you are 13–17 or 18+. We never ask for or store a day or month of birth.
• The collection and trade data you enter. Which sprites and finishes you have, their levels, your notes, what you are hunting, what you have marked tradeable, and the trade offers and vouches you exchange with other players.
• Ordinary server logs. Our host records the usual request lines — IP address, browser user agent, path and timestamp — which we use to keep the site up and to investigate abuse.

If you never sign in, your collection lives only in your own browser’s storage and never reaches us at all. Clearing your browser data erases it.

What we never store

• Passwords. Sign-in happens entirely at Google or Discord. We never see, receive, or hold a password of yours.
• Payment card details. Paddle is the merchant of record for supporter purchases and handles the whole payment. Card numbers never touch our servers; all we record is that a purchase with a given transaction id succeeded.
• Your real name, address, phone number, or full birthdate. We have no field for any of them, and you should not put them in a note either. There is no chat or trade message anywhere on SpriteGrove — trades are built from templated offers only.

How long we keep it

• Account data. Ask us to delete your account and everything tied to it — identity, age band, collection, trades, vouches — is deleted within 30 days of your request.
• Server logs. Kept for 90 days, then deleted. Logs are not tied to your collection and are not used to build a profile of you.
• Purchase records. We keep the transaction id and date of a supporter purchase after account deletion, because tax and accounting rules require a record of the sale. It is not linked to a usable profile.
• Moderation records. If an account was removed for breaking the rules, we keep a minimal note of the ban so the same person cannot immediately return.

Who else sees it

Other players see your handle, your avatar, and whatever collection and trade information you choose to publish. Behind the scenes we rely on a small number of service providers — our hosting and database providers, Paddle for payments, and Google and Discord for sign-in — who process data on our behalf. We do not sell your data, and we do not run advertising trackers.

Your choices

You can sign out at any time, keep using the tracker signed out, or ask us for a copy of your data or for its deletion. If you are a parent and want your child’s account removed, email us and we will do it — you do not need to prove anything beyond control of the sign-in address.

Contact

Privacy questions, data requests and deletion requests go to support@spritegrove.app. See also our terms of use.