Exile Town Privacy

This Privacy Policy explains what information Exile Town ("we", "us") collects when you use the site at exiletown.com, what we do with it, and what rights you have. Reading the site without signing in does not require any account or personal data.

1. Who runs the site

Exile Town is a privately operated Path of Exile 2 companion site. It is not affiliated with, endorsed by, or sponsored by Grinding Gear Games. Contact: support@exiletown.com.

2. Information we collect

When you sign in with Google we receive, through Google's standard OAuth flow:

Your Google account ID (the sub claim)
Your email address
Your display name

We do not request access to your Drive, Calendar, Contacts, or any other Google service.

When you use signed-in features we save your in-app state so it can sync across your devices. This covers things like campaign progress and notes, saved data for the various tools on the site, your presets, and your preferences. The data is technical, contains no real-world identifiers, and is meaningless outside the site.

Automatic server logs. Like every website, the servers we use record standard request metadata (IP address, timestamp, user-agent, requested URL). These logs exist for security, abuse prevention, and basic operation.

3. How we use your information

To sign you in and keep your session active
To sync your in-app state across devices
To prevent abuse (rate limiting, blocking malicious traffic)

We do not profile you, do not sell your data, do not run advertising, and do not share your data with marketing partners.

4. Legal basis (GDPR / KVKK)

For users in the European Economic Area or Turkey, processing relies on:

Consent for the Google sign-in and the storage of in-app state (you can withdraw at any time by deleting your account)
Legitimate interest for security logs and abuse prevention

5. Where your data is stored

We use the following sub-processors:

Supabase Inc. hosts the authentication system and the database row that holds your in-app state. Supabase is GDPR-compliant and provides a Data Processing Addendum.
Cloudflare Inc. serves the website, runs the small server-side functions that proxy public data sources, and stores request logs.
Google LLC handles the sign-in step itself.

Data may be processed in the United States and the European Union. Transfers outside the EEA rely on the providers' Standard Contractual Clauses.

6. How long we keep it

In-app state: until you erase it. You can erase your synced data at any time from the Settings page.
Account record: erasing your data leaves only your login record (email, Google ID). To remove that as well, contact support@exiletown.com.
Server logs: Cloudflare's default retention applies (typically days to weeks).

7. Your rights

Wherever you live, you can:

Correct anything inaccurate
Delete your account and all associated data
Export your in-app state
Stop processing your data

Most of these can be done from the Settings page. For anything else, contact support@exiletown.com.

8. Cookies, local storage, and analytics

Exile Town uses your browser's localStorage to keep your in-app state and the Supabase authentication token. We do not use tracking cookies, advertising cookies, or browser fingerprinting.

We use Cloudflare Web Analytics for aggregated traffic statistics (page views, top pages, country breakdown, performance metrics). It does not use cookies, does not store personal data, does not track users across sites, and anonymizes IP addresses. See Cloudflare's Web Analytics privacy notice for details.

9. Children

Exile Town is not directed at people under 18. We do not knowingly collect data from anyone under 18. If you believe an underage user has signed up, contact support@exiletown.com and we will remove the account.

10. External links and embedded data

The site links to and embeds public data from third-party sources (Grinding Gear Games, Poe2Scout, Reddit, YouTube, Twitch, Steam, Poe2DB, and others credited on the Credits page). Those sites have their own privacy policies and we have no control over them.

11. User content, notes, and shared presets

Some tools let you write your own notes and build presets (for example, the campaign tracker and the Atlas presets). This content is yours: we do not review, moderate, or endorse it, and it is kept only for you, in your browser and synced to your account if you are signed in.

Notes can contain links you add yourself. Presets can also be exported and imported as share codes, so a preset you import may include notes or links written by another user. We do not control, verify, or take responsibility for any third-party site or content reached through such a link. Follow imported links at your own discretion, and treat them as you would a link from any unknown source.

12. Contact

Questions or complaints: support@exiletown.com.