Privacy Policy
This policy explains what information Squad Builder collects, why, and what you can do about it. The site is run by a private individual, not a company, so the policy is kept short and in plain language.
Who is responsible for your data
Squad Builder is operated by a private individual (referred to as "we", "us" or "the operator"). The operator is responsible for the personal data processed through this website. For any privacy question or request, contact [email protected].
What we collect
You can use the squad builder without an account. Depending on how you use the site, we process:
- Account data: your email address, nickname and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Content you create: saved squads, community ratings of player cards, preferred platform and language.
- Technical data: IP address, approximate country (derived from the IP address), browser type (user agent), and the pages you open on this site.
- Device identifiers: a random device ID stored in a cookie and a hashed browser fingerprint (built from basic browser and screen properties). These are used only for security and to stop abuse of free trials, never for advertising.
If you buy VIP, payment is handled by Dodo Payments (merchant of record). We do not collect or store card or bank details: they are entered only on the Dodo Payments checkout page. We receive only what is needed to manage your subscription: its status and plan, and basic purchase details such as date, amount, currency and country. We do not ask for your EA account or game login.
Why we use it
- To provide the service: sign you in, keep your saved squads and settings.
- To keep the site secure: prevent spam, fake accounts, repeated free trials and other abuse.
- To send service emails, such as email verification and password reset. We do not send marketing emails.
- To understand which pages are used, fix bugs and improve the site.
Where the GDPR or similar laws apply, the legal bases are performance of our agreement with you (providing your account), our legitimate interests (security, abuse prevention, improving the site) and, where required, your consent.
Cookies and local storage
We only use cookies that the site needs to work: a session cookie that keeps you signed in, a device cookie used for security, and a cookie that remembers your language. Your current draft squad and some interface settings are stored in your browser's local storage.
We do not use advertising cookies or third-party tracking pixels.
Who we share data with
We do not sell or rent personal data. We only share it with service providers that help run the site, and only as far as needed:
- Hosting provider (servers where the site and its database run).
- Cloudflare (network protection and content delivery).
- An email delivery provider (to send verification and password-reset emails).
- Google, only if you choose to sign in with Google.
- Dodo Payments (payment processing, merchant of record), only if you buy VIP. Its own privacy policy applies to the payment data you give it.
We may also disclose data if required by law. Some of these providers may process data outside your country; they are expected to protect it under their own privacy commitments.
How long we keep it
Account data and saved squads are kept while your account exists. Technical and security records are kept only as long as needed for security and abuse prevention. When your account is deleted at your request, your personal data is deleted or anonymised, except where we must keep limited records to prevent abuse or comply with the law.
Your rights
You can ask to access, correct, export or delete your personal data, or object to its processing. Send your request from the email address linked to your account to [email protected]. As a one-person project we handle requests manually, usually within 30 days. If you are in the EU/EEA or the UK, you also have the right to complain to your local data protection authority.
Children
Squad Builder is not intended for children under 13 (or the minimum age required in your country to consent to data processing). If you believe a child has created an account, contact us and we will delete it.
Security
Passwords are stored only as secure hashes, connections use HTTPS, and access to the server is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
Changes to this policy
If this policy changes, the new version will be published on this page with an updated date. For significant changes, we will make a reasonable effort to let registered users know.