Privacy Policy

Last updated October 25, 2026

D4 Build Tracker ("the app") is a personal, non-commercial project operated by Jeff May for invited users. This policy explains what the app collects, how it is used, and your choices.

What we collect

• Account information. If you create an account with a username, we store your username, display name, and a one-way hash of your password (never the password itself). If you sign in with Google, we receive your Google account identifier, name, and email address. We request only the basic sign-in scopes (openid, email, profile).
• Content you add. Characters, build guide links, recorded gear, skill and Paragon progress, rune inventory, questions you ask the advisor, and photos you upload of your game screen.
• Technical data. A session cookie that keeps you signed in, and standard server logs, including IP addresses. Failed sign-in attempts are recorded by IP address for 15 minutes to block password guessing.

How we use it

• To provide the app's features: tracking your character, reading item photos, scoring gear, and generating plans and advice.
• To keep the service secure, including limiting repeated failed sign-ins.

We do not sell your information, show ads, or use third-party analytics or tracking.

Service providers

• Anthropic. AI features send the relevant photos, text, and game data to Anthropic's Claude API for processing under Anthropic's commercial terms. Your account credentials are never sent.
• Google. If you choose Google sign-in, Google authenticates you and shares the basic profile details described above.
• Public game sites. When you import a build, the app fetches that public guide page (for example, from Icy Veins). No personal information is sent.

Google user data

The app uses information received from Google only to create and sign in to your account. Its use of that information adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is not shared with others except as described above, and it is not used for advertising.

Cookies

The app uses one strictly necessary session cookie to keep you signed in and to remember that you entered the site password. There are no advertising or analytics cookies.

Storage, security, and retention

Data is stored on a privately operated server in the United States and transmitted over HTTPS. Passwords are stored only as salted hashes. Your data is kept while your account exists. You can ask for your account and data to be deleted at any time, and it will be removed from the app's database.

Your choices

You can edit or delete your characters and gear in the app, change your password, and request a copy or deletion of your data by contacting us.

Children

The app is not directed to children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes, the updated version will be posted here with a new date.

Contact

Questions or requests: contact the person who invited you to the app.