Privacy Policy

Last Updated: March 25, 2026

Introduction

Welcome to the Lordrush Gear Optimizer. This Privacy Policy explains how we handle your information when you use our optimization resource.

User Accounts (Optional)

You may optionally create an account to sync your presets and preferences across devices.

Sign-in providers: Discord OAuth and Google OAuth. We do not offer email/password sign-in. We receive only the information these providers share with us (display name, avatar URL, email address).

What we store on our servers (Supabase):

Your profile: display name, avatar URL, OAuth provider, and account plan tier
Your game profiles (up to 5): name and saved calculator presets (your gear configurations, enhancement levels, resources, etc.)
Your preferences: dark mode setting, language, speedup display format

Data processor: Account data is stored by Supabase (cloud database, hosted in the EU-West region). Supabase acts as a data processor on our behalf and does not sell your data.

Deleting your account: You can delete your account at any time from the Profile page. This permanently removes your profile, all game profiles, and all presets from our servers. Account deletion is immediate and irreversible.

What we do NOT store: Your gear data entered into the optimizer while not logged in stays local-only (browser localStorage). Logging in is always optional.

Information We Collect

Local Storage Only (when not logged in): Your gear data is stored locally in your browser. We collect and store:

Your gear configuration (hero pieces, enhancement levels, mastery levels)
Your available resources (XP parts, forgehammers, mythic gears, mithril)
Your optimization settings (weight profile, optimization mode, user profile)
Your preferences (dark mode, beta mode, test mode)

This data never leaves your device except when sent to our API for optimization calculations.

Legal Basis for Processing

If you are located in the European Economic Area (EEA), United Empire, or Switzerland, our legal basis for collecting and using your information depends on the data concerned and the context in which we collect it:

Consent (Article 6(1)(a) GDPR): We process data through Google Analytics 4, Google Signals, and Google AdSense only after you grant explicit consent via our cookie banner. You may withdraw consent at any time by adjusting your cookie preferences.

Contractual Necessity (Article 6(1)(b) GDPR): We process your gear configuration data via our API to provide the optimization service you requested. This processing is necessary to deliver the core functionality of the tool.

Legitimate Interest (Article 6(1)(f) GDPR): We may log anonymized request metadata (timestamps, response times) for service monitoring and security purposes. You have the right to object to this processing.

Analytics

We use Google Analytics 4 with Google Signals enabled to understand how our optimizer is used and improve the user experience.

What Google Analytics collects:

Page views and navigation patterns
Feature usage statistics
Device and browser information
Approximate geographic location (country/region level)
Session duration and engagement metrics

Google Signals (Advertising Features):

When you consent to analytics cookies and are signed into a Google account with Ads Personalization enabled, Google Signals may collect:

Demographic data (age range, gender)
Interest categories based on browsing activity
Cross-device usage patterns

This data is used for aggregate reporting only and is not used to individually target you on our site. You can disable Ads Personalization in your Google Account settings.

What we do NOT collect via analytics:

Your gear configurations or resource amounts
Personal information (name, email, etc.)
Any data you enter into the optimizer

Opt-out options:

Decline analytics cookies in our consent banner
Use the Google Analytics Opt-out Browser Add-on
Adjust Google Ads Settings

Advertising

We display advertisements on our website using Google AdSense and Raptive.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

CMI Marketing, Inc., d/b/a Raptive ("Raptive") is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive's data usage, click here: Raptive Creator Advertising Privacy Statement

Information advertising partners may collect:

Device and browser information
IP address and approximate location
Cookie identifiers and advertising IDs
Pages visited and time spent on site
Ad interaction data (impressions, clicks)
Cross-site browsing activity for interest-based targeting

What advertisers do NOT receive:

Your gear configurations or optimization results
Any data you enter into the optimizer

Opt-out of personalized advertising:

For more information about how Google uses data from partner sites, visit: Google's Partner Sites Policy

API Usage

When you run an optimization, your gear data is sent to our backend API (hosted on Cloudflare Workers) to perform calculations. The API:

Receives your gear data and settings
Performs optimization calculations
Returns results to your browser
Does not store or log your personal gear data
May log anonymized request metadata (timestamp, response time) for service monitoring

Third-Party Services

We use the following third-party services:

Cloudflare Pages: Hosts the frontend website
Cloudflare Workers: Hosts the backend API for optimization calculations
Supabase: Cloud database for optional user accounts and preset sync (EU-West)
Google Analytics: Website analytics and usage tracking
Google AdSense: Ad serving platform
Raptive: Ad management and optimization platform

These services may collect standard web analytics (IP address, browser type, etc.) as per their own privacy policies.

Data Retention

Local Storage: Data persists in your browser until you clear browser data or uninstall
API Requests: Your gear data is only kept in memory during calculation and immediately discarded
Analytics Data: Google Analytics retains data according to their standard retention policy (14 months by default)
Account Data: Profile, game profiles, and presets are retained until you delete your account. You can delete your account at any time from the Profile page.

Cookies

This site uses cookies for the following purposes:

Strictly Necessary: None. Our core functionality uses localStorage, not cookies.

Analytics Cookies (require consent):

_ga, _ga_* - Google Analytics (expires: 2 years)
_gid - Google Analytics (expires: 24 hours)

Advertising Cookies (require consent):

Various Google AdSense cookies for ad personalization, frequency capping, and measuring ad effectiveness

Non-essential cookies (analytics and advertising) are only set after you grant consent via our cookie banner.

Your gear data and preferences are stored in browser localStorage, not cookies. You can manage cookie preferences at any time through our consent banner or your browser settings.

Your Rights

All Users:

Access: Your gear data is visible in the optimizer at all times
Delete: Clear your browser's localStorage or use our "Clear Data" feature
Export: Use the export features to download your data in JSON format
Opt-out: Manage cookie preferences through our consent banner

EU/EEA/UK Residents (GDPR):

Under the General Data Protection Regulation, you have additional rights:

Right to Rectification (Art. 16): Request correction of inaccurate data
Right to Erasure (Art. 17): Request deletion of your personal data
Right to Restriction (Art. 18): Request limited processing of your data
Right to Data Portability (Art. 20): Receive your data in a portable format
Right to Object (Art. 21): Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time via cookie settings
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. Find your local authority at: EDPB Members

For UK residents: Contact the Information Commissioner's Office

To exercise any of these rights, contact: [email protected]. We will respond within 30 days.

California Residents (CCPA/CPRA):

Under the California Consumer Privacy Act and California Privacy Rights Act, you have the following rights:

Right to Know: Request what personal information we collect about you
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out of Sale/Sharing: See "Do Not Sell or Share" section below
Right to Non-Discrimination: We will not discriminate against you for exercising these rights

Categories of Personal Information Collected:

Identifiers (device ID, IP address, cookie identifiers)
Internet activity (browsing history, website interactions)
Geolocation data (approximate location from IP address)
Inferences (demographic profiles from Google Signals, if consented)

We do not sell personal information for monetary consideration. However, under California law, allowing Google AdSense to collect data for cross-context behavioral advertising may constitute "sharing" of personal information.

To opt out of sharing:

Click "Decline" or manage preferences in our cookie consent banner
Enable Global Privacy Control (GPC) in your browser - we honor GPC signals as a valid opt-out request
Contact us at [email protected]

When you opt out, we serve only non-personalized advertisements.

Global Privacy Control:

We recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out request. Learn more at: globalprivacycontrol.org

Automated Decision-Making and Profiling

Google Signals and Google AdSense may use automated processing to create demographic and interest-based profiles. This profiling:

Is used for aggregate analytics reporting
May influence which advertisements you see
Does not produce legal effects or similarly significant effects on you

You can opt out of this profiling by:

Declining advertising/analytics cookies in our consent banner
Disabling Ads Personalization in your Google Account
Using the opt-out links provided in this policy

Children's Privacy

This resource is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Data Controller

This website is operated by the Optimizer Team.

Email: [email protected]

For data protection inquiries, contact us at the email above.

International Data Transfers

Your information may be transferred to and processed in the United States by our service providers:

Google LLC (United States) - Analytics and advertising services
Cloudflare, Inc. (United States) - Website and API hosting

These transfers are protected by:

The EU-U.S. Data Privacy Framework (adequacy decision adopted July 10, 2023)
Standard Contractual Clauses approved by the European Commission

Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information about these safeguards, contact us at [email protected].

Contact

For questions or concerns about this Privacy Policy, please contact us at: [email protected]