Privacy policy

We collect the following categories of information:

• Account information. When you create an account we collect your email address, a username, and (optionally) a recovery email address. Your password is handled by our authentication provider and is never visible to us.
• Content you create. Information you add to the Service — such as your display name, profile and theme preferences, organization memberships, blueprints and crafting plans, stock and resource holdings, reservations, ledger and trading-post activity, requests, and reputation records.
• Purchase information. If you buy a subscription or cosmetic item, the purchase is processed by the Apple App Store, Google Play, or our billing provider. We receive confirmation that a purchase or entitlement is valid; we do not collect or store your full payment-card details.
• Integrations you connect. If you connect a Discord webhook, we store the webhook URL you provide so we can post the notifications and event updates you have configured to your Discord server.
• Device & notification data. If you enable push notifications, we store a notification token for your device so we can deliver them.
• Technical & usage data. Like most online services, our hosting and backend providers automatically log technical information such as IP address, browser or device type, and basic usage events. We also use bot- and abuse-protection (reCAPTCHA / App Check), which collects device and interaction signals to verify that requests are legitimate.

We use the information we collect to:

• Provide, maintain, and operate the Service and your account;
• Sync your data across the web, iOS, and Android apps;
• Enable organization features, sharing, and the integrations you turn on;
• Process subscriptions and entitlements;
• Send notifications you have requested;
• Protect against fraud, abuse, and security threats; and
• Diagnose problems and improve the Service.

We do not sell your personal information, and we do not use it for third-party advertising.

We share information only as needed to run the Service, and with service providers that process data on our behalf. The main providers we rely on are:

• Google Firebase — authentication, database storage, push notifications (Cloud Messaging), and abuse protection (App Check / reCAPTCHA).
• Vercel — website and API hosting.
• RevenueCat and the Apple App Store / Google Play — processing and validating purchases and subscriptions.
• Discord — only when you connect a webhook, and only to deliver the messages you configure.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the Service. If Hangarworks is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We keep your information for as long as your account is active or as needed to provide the Service. Some content you contribute to a shared organization (for example, ledger or trading-post history) may remain visible to that organization after you leave. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it.

You can review and update most of your information directly in the app. Depending on where you live, you may also have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

• Push notifications. You can turn these off in your device or app settings at any time.
• Integrations. You can disconnect a Discord webhook at any time in your settings.

You can delete your account from within the app. Deleting your account removes your profile and personal data, including your private blueprints, plans, holdings, and saved settings. If you are unable to access the app, contact us and we will process your request.

We use industry-standard measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to address issues promptly.

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Service is operated using providers located in the United States and other countries. If you access the Service from outside those countries, your information may be transferred to, stored, and processed there, where data-protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at support@sc-hangarworks.org.