Privacy policy

The short version

To collect your gifts, this service has to hold a login for each game account you add. That login is encrypted before it reaches the database with a key that is not stored in the database. Nothing is sold, shared for advertising, or used for anything other than collecting your gifts. You can delete any account, and everything attached to it, at any time.

What is stored

Three kinds of data, and nothing else:

• Your sign-in. Signing in with Google gives this service your email address and the display name on your Google account. It does not give access to your Gmail, Drive, contacts, or anything else.
• Your game accounts. For each one: the in-game user ID, player name, citadel level, platform, and an encrypted copy of the login token used to collect gifts. The Security Code you paste is never written to the database — it is exchanged for that token immediately and discarded.
• Your claim history. One row per account per day: the date, whether it succeeded, what was collected, and any error message.

No payment details are collected, because the service is free. No analytics, advertising, or tracking scripts run on this site, so there are no cookies except the one that keeps you signed in and the one that remembers your light/dark preference.

How the game login is protected

Each stored token is sealed with AES-256-GCM under a key held in the server's environment and never written to the database. Somebody who obtained a complete copy of the database would hold ciphertext and no way to read it.

Tokens are never sent to the browser. Every database query names the columns it wants so that the encrypted token cannot be included in a page by accident, and the administrator's view of the service does not include it either.

Who else sees it

Four services are involved in running this, and each one only receives what it needs:

• Google — handles sign-in. It knows you signed in here.
• Supabase — hosts the database and the sign-in session.
• Vercel — runs the site, and keeps standard server logs including IP addresses for a limited period.
• Mecha Fire's own servers — receive the gift-collection request, exactly as they would if you tapped the button in the game yourself.

Nobody else. Your data is not sold, rented, or shared with advertisers, and there are no third-party trackers on this site.

Who can see your data here

Only you and the administrator. Database rules restrict every query to rows belonging to the signed-in user, so one user cannot read another's accounts or history even if they try.

The administrator can see which users exist, which game accounts they have added, and whether collection is succeeding — this is what makes it possible to notice the service is broken. The administrator cannot see any stored game login and cannot sign in as you.

How long it is kept, and how to delete it

Everything is deleted from your own dashboard, without asking anyone. Removing a game account deletes its stored login and its entire claim history immediately and permanently — there is no soft delete and no recovery window.

Removing every game account therefore erases everything this service holds about your play. What remains is the sign-in record itself: the email address and display name Google gave us when you first signed in, and nothing attached to them.

If the service is ever shut down, all stored data is deleted with it.

Your rights

Everything stored about you is already shown back to you: your dashboard lists every game account and its full claim history, which is the complete set of records this service keeps. Deleting any of it is one button, described above.

Deleting a game account here does not affect the game account itself. It only removes this service's ability to collect gifts for it.

Children

This service is not directed at children under 13, and accounts are not knowingly created for them.

Changes

If this policy changes, the date at the top of this page changes with it. There is no mailing list and no notification — the service sends no email at all — so the date is the honest way to check, and it is the only promise made here about it.