Privacy Policy

Last updated: March 22, 2026

1. Data Controller

The data controller is Kacper Rataj, contact: twplanner.dev@gmail.com.

2. Data We Collect

When using TW Planner, we process the following data:

• Account data — email address, name and avatar retrieved from your Google or Discord account during login (OAuth 2.0). We never have access to your passwords for these services.
• Player ID — your in-game player ID from Tribal Wars, used solely for trial activation and abuse prevention.
• IP address — recorded during trial activation to limit abuse of free trials. Not used for any other purpose.
• Payment data — handled entirely by Stripe. We do not store card numbers or banking details. We only store your Stripe customer ID to link subscriptions to your account.
• Action data — planned attacks, targets, groups and settings are stored locally in your browser (chrome.storage). When syncing across devices, data is encrypted and stored on our server.
• Push subscriptions — Web Push subscription public key, used solely to send notifications about upcoming attacks.

3. Purpose of Processing

• User authentication and session management
• License and Premium subscription management
• Cross-device data synchronization
• Sending push notifications
• Abuse prevention (anti-abuse)

4. Legal Basis

We process data based on:

• Art. 6(1)(b) GDPR — performance of a contract (providing the TW Planner service)
• Art. 6(1)(f) GDPR — legitimate interest of the controller (abuse prevention, service security)

5. Where We Store Data

Data is stored on Cloudflare servers (Workers + D1) in the Eastern Europe (EEUR) region. Payments are handled by Stripe, Inc. based in the USA, operating in compliance with PCI DSS security standards.

6. Data Retention

• Login sessions — automatically deleted upon expiration (30 days)
• Schedules and publications — automatically deleted 30 days after creation
• Account data — retained until account deletion

7. Your Rights

Under GDPR, you have the right to:

• Access your data
• Rectify your data
• Erase your data (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing

To exercise these rights, contact us at: twplanner.dev@gmail.com.

8. Cookies

TW Planner does not use cookies. Session data is stored in chrome.storage (extension) and in authorization headers (API).

9. Third-Party Services

• Google OAuth — authentication, privacy policy: policies.google.com/privacy
• Discord OAuth — authentication, privacy policy: discord.com/privacy
• Stripe — payment processing, privacy policy: stripe.com/privacy
• Cloudflare — hosting and infrastructure, privacy policy: cloudflare.com/privacypolicy

10. Changes

We reserve the right to update this policy. We will notify you of significant changes via the extension or email.