1.What we store

• Overseer account: email, name (if provided) and your password in irreversible form (Argon2 hash).
• Sessions: date, browser (user agent) and IP address of each sign-in, for security.
• Splinterlands accounts you add: the account name and the posting key, encrypted in an isolated vault.
• Game data for those accounts: matches, rating, league, energy and rewards — much of it is already public in the game.

2.How we use it

To play and claim rewards on your accounts, show your dashboard and protect the service (limits on sign-in attempts and abuse). We do not sell data and we use no ads or trackers.

3.Who we share it with

• Splinterlands and Hive: the game actions signed with your posting key — that is how the bot plays.
• Hosting: our servers are in Nuremberg, Germany.
• Email: support is handled from a Gmail inbox, and Overseer's messages are sent through Resend, an email delivery service.
• Backups: encrypted, with one copy in cloud storage outside the server.
• Authorities, when required by law.

4.Cookies

Only two: the session cookie (needed to sign in) and your language choice. No third-party cookies, visitor analytics or advertising.

5.How long we keep it

For as long as your account exists. When you remove a Splinterlands account, the key leaves our database immediately; encrypted backups keep it for up to 5 weeks. Ended sessions are deleted within 30 days.

6.Your rights

You can ask for access to, correction, a copy or deletion of your data, and for information about how it is used, through the contact email below. During the alpha, deleting your Overseer account is done through that contact.

7.Security

Keys encrypted in an isolated signer, hashed passwords, HTTPS, restricted server access and limits against abuse. No system is completely secure: if something happens to your data, we will let you know.