Privacy Policy

Michael Ketzer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect personal data when you use LordTracker, our Top Lords alliance tracker at toplordstats.com and lordtracker.com (the "Service"). Personal data is any information that relates to an identified or identifiable person.

Trial and subscription records

We record the account ID, normalised email address, game kingdom and alliance identity, workspace ID, and trial start and end times to enforce the once-per-user and once-per-alliance trial. Trial eligibility records survive workspace deletion and are retained to prevent repeat trials, subject to applicable data protection rights. Paddle receives your checkout email and workspace/account reference, and we store Paddle customer, subscription and processed event IDs to reconcile billing.

Account deletion and workspace archiving

You can delete your account in Account settings. First leave workspaces you do not own. If you own a workspace with other members, transfer ownership to one of them. If you own a workspace with an active paid subscription, cancel it and wait until it ends, or transfer ownership. These checks protect workspace members and prevent paid workspaces from losing their billing owner.

Deletion removes your display name and email from the account, deletes your passkeys and authentication challenges, removes your support threads and replies, removes your memberships and invitations you created, clears written rating feedback and disables your referral code. Existing sessions stop granting access. We keep a pseudonymous account reference for retained billing and referral ledgers, one-time rating rewards, contribution provenance and audit events; it cannot be used to sign in. Trial eligibility records retain the original normalised email and game identity to prevent repeated free trials. They are subject to applicable data protection rights.

Sole-owner workspaces without active paid billing are archived when you delete your account. Archiving hides a workspace from the dashboard, stops collection and revokes sync credentials while keeping game data and history. Archiving a workspace directly keeps its memberships. These records remain until you request erasure, subject to legal retention duties and other workspace members’ rights. Contact us to request erasure of archived game data or review of retained personal records.

Changing your email requires a six-digit code sent to the new address. Existing sessions stay signed in. Passkeys are optional; email codes remain available for recovery. We store passkey public keys, never your fingerprint, face image or device’s private key. Short-lived passkey challenges expire after five minutes and can be used once.

1. Controller and contact

The controller responsible for processing personal data in LordTracker (formerly TopLordStats), the Service at toplordstats.com and lordtracker.com, is:

For any privacy question or to exercise your rights, contact us at support@lordtracker.com.

2. What we process, why, and on what legal basis

In-game names are pseudonyms chosen by players. We only process in-game data needed to provide the Service. We do not use your data for advertising and we do not sell it.

3. AI processing of screenshots

When you import screenshots, or when auto-sync captures in-game screens for your alliance, the images are sent to Google's Gemini API to extract text and numbers. Google acts as our service provider. The images are used only to process your import; we do not use them to train AI models. Extracted data is stored in your workspace, where you can review and correct it.

4. Payments

Payments are processed by Paddle.com, which acts as our reseller and the Merchant of Record for all orders. Paddle collects and processes your payment details as an independent controller under its own privacy notice. We receive only the information needed to manage your subscription, such as your name, email address, country, subscription status and transaction references — never your full card details.

5. Recipients

We share personal data only where necessary:

• Service providers acting on our instructions: Vercel (hosting and logs), Neon (database), Letterpier (sending and receiving email) and Google (Gemini API for screenshot processing).
• Paddle, as Merchant of Record, for checkout, payments, tax, invoicing and refunds.
• People you invite to your workspace, who see the alliance data their role allows.
• Professional advisers, such as tax advisers or lawyers, where needed and bound to confidentiality.
• Authorities or courts, where we are legally required to disclose data or need to protect our rights.

6. International transfers

Some providers process data outside the European Economic Area, for example in the United States or the United Kingdom. Where this happens, we rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified providers, or the UK adequacy decision) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where required.

7. Cookies and local storage

We use only cookies and local storage that are strictly necessary to provide the Service: a session cookie that keeps you signed in, security tokens that protect sign-in, and local storage for preferences such as your theme. We do not use advertising or third-party tracking cookies, so no consent banner is needed. You can block cookies in your browser, but you will not be able to sign in.

8. How long we keep data

• Account data and passkeys: until you delete your account or revoke a passkey, with the pseudonymous and trial records described above retained for their stated purposes.
• Sign-in codes: expire after ten minutes and can be used once; attempt records are kept only as long as needed to enforce sign-in limits.
• Workspace and alliance data: while your workspace exists, including when archived. A subscription ending does not erase your game history. Contact us to request erasure.
• Screenshots and captures: kept only as long as needed to process and review the import, then deleted. The extracted data and a fingerprint of each image, used to detect duplicates, stay with your workspace.
• Billing records: as long as required by tax and commercial law (up to ten years).
• Support messages: as long as needed to resolve your request and for a reasonable period afterwards.
• Security and administration audit events: pseudonymous account and workspace references, action and time, retained to investigate security, ownership and billing changes. They contain no email addresses, codes or authenticator responses. You can request review or erasure subject to legal duties.
• Technical logs: typically up to 90 days.

9. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure of your data, subject to legal retention duties (Art. 17);
• restriction of processing in certain circumstances (Art. 18);
• data portability — receiving your data in a structured, machine-readable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw consent at any time where processing is based on consent, without affecting earlier processing;
• lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

To exercise your rights, email support@lordtracker.com. We respond within one month; where requests are complex or numerous, this may be extended by up to two further months, and we will tell you why.

10. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit (HTTPS), hashed sign-in codes, role-based access controls and the principle of least privilege. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach where the law requires.

11. Children

The Service is not intended for children under 13 (or 16 where local law requires). We do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. The date at the top shows the latest version; for significant changes we will inform you by email or in the Service. Please also see our Terms of Service and Refund Policy.

13. Contact

Questions about privacy at LordTracker? Email support@lordtracker.com. Top Lords is a game by GAME SPARK PTE. LTD.; its own privacy practices are governed by the publisher's policies, not this one.