Privacy Policy

Last updated: September 8, 2026

This Privacy Policy describes how TB Oracle ("we", "us") collects, uses, and protects information when you use our website and clan analytics services at tboracle.com.

1. Information we collect

• Account data: display name and login credentials. Your sign-in email is stored only for authentication (hashed password, OAuth tokens) and is never shown to other clan members or leaders.
• Discord sign-in: if you choose "Continue with Discord", we receive profile information Discord provides (such as your Discord user ID, username, and email) to create or link your account
• Tracker utility accounts: dedicated Total Battle login credentials you provide are encrypted at rest (AES-256-GCM). Only a masked hint (e.g. t•••@g•••.com) is shown in settings. The full address stays hidden.
• Clan and game data: chest logs, member activity, kingdom snapshots, and related metrics collected through configured utility accounts and scans
• Technical data: session cookies, IP address, browser type, and usage logs needed to operate and secure the Service. Google Analytics also receives page and device information so we can understand which public pages are useful.
• Error and performance diagnostics: we use Sentry, our error and performance monitoring provider, to detect errors, crashes, and slow pages. When a problem occurs (and for a sample of normal page loads), Sentry receives technical reports that may include error details, the page and actions involved, browser and device information, IP address, identifiers such as your account or clan, and a record of recent in-app activity leading up to the problem. We may also use Sentry features such as session replay, which reconstructs your screen activity during a session (with sensitive text masked) to help diagnose problems, and in-app feedback tools, whose submissions reach us along with the diagnostic context above. Reports from our automated scanners are stripped of credentials before they are sent.
• Support data: messages you send through the in-app support inbox and limited diagnostic context needed to investigate them, such as the selected dashboard element and displayed value, current page and visible filters, browser type, screen size, theme, time zone, deployed version, and latest scan status. We do not attach passwords, game sessions, cookies, local storage, or arbitrary page contents. Screenshots and their visible page contents are stored only when you deliberately paste, drop, or select them for a support request.

2. How we use information

We use collected information to:

• Provide dashboards, reports, and clan management features
• Authenticate users and enforce clan-level access controls
• Operate automated scanners and maintain service reliability
• Respond to support requests and protect against abuse

3. Sharing

We do not sell your personal information. We share data only with infrastructure providers that operate the Service, including cloud hosting, databases, billing, email, Google Analytics, and Sentry (error and performance monitoring), when required by law, or with your clan's authorized leaders as part of normal product functionality (e.g. activity reports visible to clan officers).

4. Cookies and sessions

We use essential cookies to keep you signed in and remember preferences such as theme. We use Google Analytics to understand which pages and guides are useful. We do not use third-party advertising trackers or create advertising profiles.

5. Data retention

Account data is retained while your account is active. Clan scan history may be retained for analytics and historical reporting. You may request deletion of your account by contacting us; some clan records may remain in aggregated or anonymized form.

6. Security

We use industry-standard practices including encrypted connections (HTTPS), hashed passwords, encrypted tracker credentials, and role-based access. Email addresses are not exposed in clan dashboards or APIs. No method of transmission or storage is 100% secure.

7. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Your rights

Depending on your location, you may have rights to access, correct, or delete personal data we hold about you. Contact us to make a request.

9. Changes

We may update this policy. The "Last updated" date above will change when we do. Continued use after updates constitutes acceptance.

10. Contact

Privacy questions or requests: oracle@tboracle.com