Privacy Policy

Last updated: May 25, 2026

TFT AlphaSim (“the Service”, “we”, “us”) respects your privacy. This policy explains what data we collect, how we use it, which third parties we share it with, and the rights you have. By using the Service, you agree to this policy.

1. Data We Collect

1.1 When You Sign In with Overwolf OIDC

• Overwolf account unique identifier (sub): used to identify your account and subscription state.
• Email address: used for subscription receipts and important notifications.
• Display name and avatar URL: shown only in your account menu.

We do not access Overwolf account data unrelated to this Service.

1.2 Automatically Collected When You Use the Service

• Daily API usage counters: stored in Upstash Redis with key quota:{date}:{type}:{user}, auto-deleted after 28 hours.
• IP address: used as the quota identifier for anonymous users (signed-in users are identified by Overwolf sub). IP is used only for abuse prevention and is not linked to your account.
• Comp saves: stored in your browser’s localStorage; not uploaded to our servers.

1.3 When You Subscribe to Pro

• Overwolf / Tebex subscription status: used to confirm whether Pro is active, cached briefly in Upstash Redis to reduce API calls.
• Credit card, billing address, and other payment information: collected and processed directly by Overwolf App Subscriptions / Tebex; we never receive or store your credit card number.

2. How We Use Data

• To provide and maintain the Service and process your subscription.
• To enforce daily API usage limits and prevent abuse.
• To contact you about service-related matters (sign-in anomalies, renewal notices, material Terms changes, etc.).
• We do not sell or rent your data to third parties for marketing.

3. Third-Party Services

The Service relies on the following third parties, each with its own privacy policy:

• Overwolf (OIDC sign-in, App Subscriptions) — overwolf.com/legal/privacy
• Tebex (Overwolf App Subscriptions billing) — tebex.io/privacy
• Vercel (site hosting, server logs) — vercel.com/legal/privacy-policy
• Upstash (Redis data storage) — upstash.com/trust/privacy

4. Cookies and Local Storage

• NextAuth session cookie: an HTTP-only, encrypted JWT that maintains sign-in state; expires automatically after 30 days.
• localStorage: holds your comp saves and theme preference (dark/light). Data stays in your browser and is never uploaded.
• We do not use any third-party tracking cookies (e.g., Google Analytics, Facebook Pixel).

5. Data Retention

• Daily quota counters: auto-expire after 28 hours.
• Subscription data: retained for 12 months after subscription ends (for tax records), then deleted.
• Account data: removed within 30 days after you request account deletion.

6. Your Rights

Under Taiwan’s Personal Data Protection Act and, where applicable, the EU GDPR, you have the right to:

• Access: know what data we hold about you.
• Rectify: correct inaccurate data.
• Erase: request deletion of your account and related data.
• Portability: obtain a copy of your data (JSON format).
• Restrict processing: require us to stop using your data (which may prevent continued use of the Service).

To exercise these rights after the Service formally launches, contact us via the support email that will be published on this page; we will respond within 30 days. For urgent data erasure during the beta phase, contact Overwolf support or revoke authorization via your Overwolf account settings.

7. Data Security

We apply reasonable technical and administrative measures to protect your data: site-wide HTTPS encryption, 256-bit JWT secrets, sensitive environment variables accessible only server-side, and subscription checks through official Overwolf APIs. However, no internet transmission is absolutely secure; in the event of a data breach, we will notify affected users within 72 hours.

8. Minors

The Service does not knowingly collect data from children under 13. If you are a parent or guardian of a child under 13 and discover that your child has registered for the Service, please contact us and we will delete the account immediately.

9. Policy Changes

If this policy changes materially (e.g., new data collection, changes to third-party services), we will announce it on the site or via email and update the “Last updated” date at the top.

10. Contact Us

The Service is currently in beta/testing phase. The official support email will be published on this page when the Service formally launches. For urgent personal-data matters in the meantime, you can contact Overwolf support or revoke third-party authorization via your Overwolf account settings.