This privacy policy describes how The Quinfall Crafting Workshop ("the site", "we") handles information when you visit quinfallcrafting.com. The short version: the core tools work entirely in your browser and need no account. Some optional features do involve a server — signing in with Discord syncs your data, Workshop Premium is billed through Stripe, and price alerts can be delivered by browser push or Discord. We only hold the data those features require, detailed below. The site also uses Google Analytics for traffic measurement and Google AdSense to serve advertising; both use cookies, described below.
What We Store Locally On Your Device
The site is a fully client-side application. When you use features like the inventory tracker, profession settings, theme preference, language, or favorited recipes, that information is saved in your browser's localStorage under keys prefixed with quinfall-. This data never leaves your device and is never transmitted to any server controlled by us.
You can clear this data at any time by clearing your browser's site data for quinfallcrafting.com, or by using the export/clear controls in the in-app Settings tab.
Account & Synced Data (Optional Sign-In)
You can use the site without an account. If you choose to sign in, we use Discord OAuth and receive your Discord user ID, username, and avatar. While signed in, the data you create — inventory profiles, watchlist pins, and price alerts — is stored in our server-side database (hosted on Railway) so it syncs across your devices. You can clear it in-app, or ask us to delete your account and its data (see Contact).
Payments (Workshop Premium)
Workshop Premium is an optional subscription processed by Stripe. We never see or store your full card details — Stripe handles all payment information. We retain only your subscription status and the Stripe customer/subscription identifiers needed to manage and renew it.
Price Alerts & Notifications
If you enable browser push alerts, we store the push subscription token your browser issues so we can deliver them. If you enable Discord-DM alerts (Premium), we use your Discord account to send the message through our bot. You can turn either off at any time, which removes the associated delivery data.
What We Don't Collect
- We never ask for a password — sign-in is handled entirely by Discord.
- We don't store your full payment-card details — Stripe does.
- We don't sell or share your personal data with advertisers or anyone else.
Third-Party Services We Use
Google Analytics
We use Google Analytics 4 (measurement ID G-PYKYJYQ9D1) to understand aggregate traffic patterns — which pages get visited, where visitors come from, and roughly how long they stay. Google Analytics sets cookies (typically _ga and _ga_*) and may collect your IP address (which Google anonymizes), browser/device type, referrer URL, and pages viewed. See Google's Privacy Policy for details, and you can opt out site-wide by installing the Google Analytics Opt-out Browser Add-on.
Google AdSense
We use Google AdSense (publisher ID ca-pub-2052895629993345) to display advertisements on the site. AdSense and its third-party vendors use cookies (including the DoubleClick DART cookie) to serve ads based on your prior visits to this site or other websites. You can opt out of personalized advertising by visiting Google Ads Settings, or you can opt out of some third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.
Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our site and/or other sites on the Internet.
Ko-fi
We embed the Ko-fi floating support widget (loaded from storage.ko-fi.com) so visitors can optionally tip the project. The widget itself is a button — it does not set tracking cookies just by being on the page. If you click the button and proceed to make a contribution, you will be interacting with Ko-fi's site directly, which has its own cookies, analytics, and payment processors (Stripe and PayPal). See Ko-fi's privacy policy for what they collect during a donation.
Netlify Hosting
The site is hosted on Netlify, which may log standard server information (IP addresses, request timestamps, browser user agents) for security and operational purposes. See Netlify's privacy policy for details.
Cookies Summary
- Strictly necessary: none beyond what your browser uses to load the site.
- Analytics: Google Analytics cookies (
_ga,_ga_PYKYJYQ9D1). - Advertising: Google AdSense / DoubleClick cookies for ad serving and personalization.
You can disable cookies in your browser settings, though doing so may affect how the site looks for you (for example, your saved theme preference relies on localStorage, which most browsers control under the same setting).
Users in the European Economic Area (GDPR)
If you are visiting from the EEA or UK, the lawful basis for our limited processing is your consent (for analytics and personalized advertising) and our legitimate interest (in operating the site). You have the right to withdraw consent for personalized ads at any time via Google Ads Settings. If you have signed in, the limited account data we hold (your Discord identity, synced inventory/watchlist/alerts, and subscription status) can be exported or deleted on request — contact us and we'll action it.
Users in California (CCPA)
We do not sell or share personal information. If you have an account, you may request access to or deletion of the data we hold about you via the Contact page.
Children
The site is not directed at children under 13, and we do not knowingly collect personal information from children.
Changes To This Policy
We may update this policy from time to time as the site or the third-party services we use change. The "Last updated" date at the top will reflect the most recent revision.
Contact
Questions about this policy can be sent via the project's Contact page.