Privacy policy

1. What we collect

We don't take payments until launch. We start receiving the subscription payment details below once paid subscriptions start after launch.

Google sign-in: email address, Google profile name and Google account identifier. We never receive your password or profile photo.

Usage records: IP address, request time and path, and the sign-in session cookie. We use them for rate limiting, security and troubleshooting.

Subscription payments: card and other payment details go directly to Paddle, which processes payments. We don't receive them. From Paddle we receive a customer identifier, subscription identifier, subscription status and billing dates, payment transaction identifiers and amounts, and whether and how much was refunded or charged back.

GGG character import (optional): if you connect it separately, we receive your Path of Exile account name and character data. It is connected separately from your site account.

Stored in your browser: a language cookie and the screen theme (browser storage). Some of these values never reach our server.

2. Why we use it

Only to identify you and keep you signed in, provide subscription access and reflect payment status, prevent abuse and enforce rate limits, answer your requests, and meet legal obligations. We don't use it for advertising and we don't sell it.

3. How long we keep it

We keep your account until you delete it. When you delete it, we promptly erase your email, name, Google account identifier, sessions, subscription grants and payment link, and keep only the member number so it is never reused.

Admin records of subscription grants and revocations (audit log) remain under the member number to resolve disputes.

Sign-in sessions end after at most 30 days. Server access logs are rotated, oldest first, once they reach a set size.

Records that law requires us to keep (for example contract, payment and dispute records under Korea's Act on Consumer Protection in Electronic Commerce) are kept for the period that law sets.

4. Processors and international transfers

Google LLC (USA): sign-in. Paddle.com Market Limited (UK): subscription payments, tax and refunds. Our server hosting provider: storing service data. Each receives only what its role needs, and transfers to providers abroad happen over encrypted connections when you sign in or pay.

Cloudflare, Inc. (USA): visitor statistics. When you open a page, the page address, the referring page, your browser, operating system and device type, your country estimated from your IP address, and page load timings are sent to Cloudflare. It uses no cookies or browser storage and does not identify or track individual visitors; IP addresses are not stored in the statistics. Data is sent over an encrypted connection when a page loads.

5. Cookies

We use cookies to keep you signed in (up to 30 days), for GGG character import and for your language. We don't use advertising or tracking cookies. Clearing cookies signs you out.

6. Your rights

You can ask to access, correct or delete your information, or to stop its processing, at any time. You can delete your account yourself on the Account page. Send other requests to the contact below.

If you have a paid subscription, cancel it in subscription management before deleting your account.

7. Security

Session values are stored as hashes, not in plain form, and every connection uses HTTPS. Admin features are limited to designated accounts, and admin changes to subscriptions are kept in the audit log.

8. Children

The Service isn't directed to children under 14, and we don't knowingly collect their information.

9. Contact and changes

Privacy contact: mypoe2forge@gmail.com

If we change this policy, we post the change here at least 7 days before it takes effect.