Privacy Policy
Effective date: July 11, 2026
The short version
We collect the minimum needed to sign you in, bill Pro, and run the service. Your screenshots never upload. We don't sell your data or share it with third parties. Ask and we delete your account.
Who is responsible
Arbiter operates this service and decides how the data below is handled (the "controller" under Brazil's LGPD, Lei nº 13.709/2018). For any privacy request, email [email protected] or contact us on the Discord.
What we collect
- Account: your email address, handled by our authentication provider (Supabase). We never see a password — sign-in is one-time email codes.
- Billing (Pro only): handled by Stripe. Card details never touch our servers; we store your subscription status and a Stripe customer reference.
- Service data you generate: the market reads the app produces, and your recent market observations (market, rate, time) used to build your Flip Calculator and check the best currency to sell in. Stored under your account and used to run and improve the service.
- Server logs: standard technical logs (timestamps, endpoints, status codes, IP addresses) kept for security and debugging, rotated routinely.
What we deliberately do not collect
- Screenshots, image captures, or crops — the Loot Valuer processes images entirely on your machine.
- Your file paths, local configuration, or the game's event log contents.
- Client telemetry: the desktop app collects no analytics or telemetry — no usage tracking and no profiles. (Website analytics are separate and described below.)
Website analytics
On this website (not the app) we use first-party analytics — Google Analytics and Microsoft Clarity — to see how many people visit, which pages they read, where they arrived from, and where they get stuck, so we can improve the site (our legitimate interest). These set first-party cookies and may record anonymized session interactions such as mouse movement, clicks, and scrolling. We use this only to understand and improve the site — not for cross-site advertising — and we don't sell it. You can opt out by blocking cookies or turning on your browser's tracking protection, and the site works exactly the same.
Why we may process your data
Under the LGPD we rely on: performing our contract with you (running the service, computing signals, billing Pro); complying with legal obligations (such as tax records); and our legitimate interest in keeping the service secure and working. Where the law requires your consent, we ask for it first.
How we use data
To authenticate you, to compute the verdicts, Flip Calculator, and radar you request, to operate billing and entitlement, and to keep the service secure. Not for advertising; not sold; not shared with third parties.
Who processes it, and where
- Supabase — authentication.
- Stripe — payments and subscription management.
- Render — server hosting and databases.
- Cloudflare — hosting and content delivery.
- Microsoft Clarity — session replay and heatmaps (website only).
- Google Analytics — website analytics measurement.
These providers may process your data outside Brazil, including in the United States. We use providers that commit to recognized data-protection safeguards for such international transfers.
Retention and deletion
Account and service data are kept while your account exists. Contact us from your account address and we delete your account and its data within 30 days (billing records are retained where tax law requires).
Your rights
Under Brazil's LGPD you can ask us to confirm what we hold, access it, correct it, anonymize or delete it, port it, and learn who we share it with — and you can complain to the ANPD (the national data-protection authority). If you live elsewhere (for example under the GDPR), equivalent rights apply. Contact us and we will honor them.
Changes
If this policy changes materially, we note it in the app and on this page before it takes effect.
Contact
Email [email protected] or reach us on the Discord.