Privacy Policy

This Privacy Policy describes how Brant LLC ("we", "us", or "our") collects, uses, and shares your personal information when you use any of our services.

1. Information We Collect

We collect the following categories of information:

Account information

When you create an account or interact with our Services, we collect:

• Username
• Email address
• Account credentials used to sign you in
• If you sign in with Google: your Google account ID and the email address associated with that account
• Optional profile fields: country, age, and sex
• Your votes (upvotes and downvotes) on games

Usage information

We automatically collect:

• IP address
• Browser type and user agent
• Pages visited, referring URL, and timestamps
• HTTP status codes and basic request metadata recorded in server logs
• Aggregate analytics through Google Analytics (GA4)

Communications

When you contact us we collect: email correspondence, contact form submissions, and support ticket information.

Cookies

We use essential cookies to maintain your preferences and improve your experience on our website. These include a session cookie that keeps you signed in, a CSRF-protection token, an NSFW age-gate cookie that remembers you confirmed you are an adult, and a Google Analytics cookie that helps us measure aggregate traffic.

2. How We Use Your Information

We use your information to:

• Create and operate your account, including signing you in and saving your votes
• Send transactional email such as account verification and password reset messages
• Display aggregate, non-identifying community trends (for example, total upvote counts)
• Detect, prevent, and respond to fraud, spam, abuse, and security incidents
• Debug errors and improve the Services
• Comply with legal obligations and respond to lawful requests

3. Information Sharing

We share your information only with the service providers required to operate the Services:

• Amazon Web Services (AWS) — hosts the Services on EC2 in the us-east-1 region (Northern Virginia, USA), where your account data, votes, and tokens are stored.
• Google LLC — provides Google Sign-In, Google Analytics, Google Search Console, and Google Fonts.
• Resend — sends transactional email (account verification and password reset).
• Let's Encrypt — issues the TLS certificate that secures idledb.com.
• Tailwind CDN — serves a stylesheet asset.

We may also disclose information when required by law, court order, or to protect the rights, safety, or property of IdleDB or its users.

We do not sell personal information to third parties.

4. Data Retention

We retain data for varying durations:

• Account information and votes: retained until you delete your account.
• Email verification tokens: 24 hours, or until used.
• Password reset tokens: 1 hour, or until used.
• Server and access logs: rotated regularly and retained only as long as needed for security and debugging.
• Email correspondence: retained for as long as necessary to resolve your inquiry and for reasonable record-keeping.

5. Data Security

We implement security measures including encryption, secure hosting, and access controls to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Your Rights

You can contact us at brantsllc@gmail.com to:

• Access personal information
• Delete your account or unsubscribe from communications
• Update your personal information
• Object to our processing of your information
• Request a copy of your data in a portable format
• Withdraw consent for potential marketing communications

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising privacy rights

EU/UK Privacy Rights

If you are in the European Union or United Kingdom, you have rights under GDPR including:

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with supervisory authorities

7. International Users

Our Services are hosted in the United States. If you access the Services from regions with different data protection laws (for example, the EU), your information may be transferred to and processed in the United States. By using our Services, you consent to this transfer.

8. Marketing and Communications

We currently send only transactional email — account verification and password reset messages — to the address you provided when creating your account. We do not send marketing or promotional email. If we ever begin sending marketing communications, we will obtain your consent first and every such message will include a clear unsubscribe link.

9. Do Not Track Signals

Our Services do not currently respond to Do Not Track browser signals. However, you can control cookies through your browser settings.

10. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us immediately at brantsllc@gmail.com.

11. Third-Party Links

Our Services may contain links to third-party websites or services (such as app stores or the Steam store). We are not responsible for the privacy practices of these third-party apps.

12. Data Breach Notification

If we experience a data breach that may compromise your personal information, we will notify affected users via email within 72 hours of discovering the breach, as required by applicable law.

13. Legal Basis for Processing (EU/UK Users)

For users in the EU/UK, we process your personal information based on:

• Consent: for marketing communications and optional data collection.
• Contract: to provide our Services and fulfill our Terms of Service.
• Legitimate interest: for analytics, security, and service improvements.
• Legal obligations: to comply with applicable laws.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page along with the updated effective date. We will notify you of material changes via email or through our Services.

15. Contact Information

If you have questions about this Privacy Policy, please contact us:

Email: brantsllc@gmail.com