Privacy Policy

1. What We Collect

Traviadator collects only the minimum data required to provide the service:

• Account data: Email address (for authentication)
• Subscription data: Payment status and plan tier (managed by Lemon Squeezy — we never see your card details)
• Usage data: We do not track your in-game activity, raid targets, or farm list contents on our servers

2. What We Don't Collect

• We do not read, store, or transmit your Travian game data to our servers
• All parsing, exporting, and injecting happens locally in your browser
• We do not use cookies for tracking or advertising

3. Third-Party Services

• Supabase: Authentication and user profile storage (Asia-Pacific region)
• Lemon Squeezy: Payment processing (Merchant of Record — handles billing, invoices, and tax compliance)
• Resend: Email delivery for account and service-related messages (transactional emails such as account confirmation and password reset)
• Google OAuth: Optional sign-in method
• Cloudflare: Web hosting and API delivery (CDN, edge compute)

4. Data Storage & International Transfers

Your account data is stored in Supabase (Asia-Pacific region). Raid list data is stored locally in your browser's extension storage and is never sent to our servers unless you explicitly use a cloud sync feature (coming soon).

Because Supabase hosts data outside the European Economic Area, your personal data may be transferred internationally when you use Traviadator. We rely on appropriate safeguards for these transfers, including the European Commission's Standard Contractual Clauses (SCCs) entered into with Supabase, in accordance with Articles 44–49 of the GDPR.

5. Communications

We may send you the following types of email from support@traviadator.com:

• Transactional emails: account confirmation, password reset, payment receipts, subscription notices, and important service updates. These are necessary for the service and cannot be unsubscribed from while you have an active account.
• Marketing emails: product updates, new features, occasional promotions. We send these only with your explicit, opt-in consent. You can withdraw consent at any time by clicking “unsubscribe” in any marketing email or by contacting us.

Email delivery is handled by Resend on our behalf as a data processor (see Section 3).

6. Your Rights (EU/EEA Users)

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your account and data (“right to be forgotten”)
• Restriction — limit how we process your data
• Portability — receive your data in a portable, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — for marketing emails or any other consent-based processing, at any time

To exercise any of these rights, contact support@traviadator.com. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Data Deletion

You can delete your account at any time by contacting us at support@traviadator.com. All associated data will be removed within 30 days.