Privacy Policy

Crimson Desert Guide ("we", "us", or "our") operates this Service. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service you agree to the practices described here. If you do not agree, please stop using the Service.

2.1 Information you provide

• Email address — when you create an account.
• Google account info — name and email, if you sign in with Google OAuth.

2.2 Information collected automatically

• Questions you ask — every query submitted to the Service is stored in our database. This includes the question text, the spoiler tier selected, and the AI response generated.
• IP address — logged with each query for rate-limiting and abuse prevention. We do not link IP addresses to user identities for tracking purposes.
• Usage data — daily query counts per account, subscription tier, and timestamps.
• Error logs — technical error details (stack traces, request context) to help us diagnose and fix problems.

2.3 Cookies and local storage

We use cookies required for authentication (Supabase session tokens). If Google AdSense is enabled, Google may set additional advertising cookies. See Section 5 for more on third-party services.

• To answer your in-game questions using our AI pipeline.
• To cache responses and reduce redundant API calls.
• To enforce rate limits and prevent abuse.
• To manage your account and subscription tier.
• To diagnose errors and improve the Service.
• To serve relevant advertisements to free-tier users (via Google AdSense).

We do not sell your personal information to third parties.

• Cached query responses are retained for 7 days and then eligible for removal.
• Query logs (question text, IP, tier) are retained for analytics and abuse monitoring. You may request deletion — see Section 7.
• Account data is retained for as long as your account is active. You may delete your account at any time.
• Error logs are retained for up to 90 days.

The Service relies on the following third-party providers, each with their own privacy practices:

• Supabase — database and authentication hosting. Data is stored on Supabase-managed infrastructure.
• Anthropic (Claude) — AI language model used to generate answers. Your question and retrieved context are sent to Anthropic's API to produce a response.
• Voyage AI — generates vector embeddings of your questions for semantic search. Your question text is sent to Voyage AI's API.
• Vercel — hosting and edge network. Standard server logs apply.
• Google AdSense — advertising shown to free-tier users. Google may use cookies and device identifiers to serve personalised ads. You can opt out via Google's Ad Settings.
• Google OAuth — optional sign-in method. If used, Google shares your name and email address with us.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at privacy@crimsondesertguide.com. We will respond within 30 days.

We implement reasonable security measures including HTTPS, security headers (HSTS, X-Frame-Options, nosniff), input validation, and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of the page. Continued use of the Service after changes constitutes acceptance of the revised policy.

Questions about this policy? Email us at privacy@crimsondesertguide.com.