Skip to content
Collector Coach

Privacy Policy

Last updated:

Collector Coach is a fan-made tool that reads the public roster of a game account from its ally code and turns it into a report. You do not need an account and we never ask for your game login. This policy explains what we handle when you use this website.

1. Who is responsible

The data controller is Ives Laurent, based in Mexico City, Mexico. For anything related to your data write to [email protected].

2. What we handle and why

  • The ally code you type

    What for:
    Look up the public roster and build your report. The report address includes it (/r/…), so anyone you share the link with can open it.
    Legal basis:
    Providing the service you ask for; legitimate interest

  • Public roster data: player name, guild name, characters, ships, stars, gear and relic levels

    What for:
    Build the report. This is public game data: anyone who knows an ally code can see it in the game and in community tools.
    Legal basis:
    Providing the service; legitimate interest

  • Waitlist: email, ally code (optional), language, the page where you signed up and the date

    What for:
    Write to you once, when early access to the coach opens.
    Legal basis:
    Your consent (the checkbox)

  • Anonymous visit measurement (section 3)

    What for:
    Count visits, see which parts of the report help and fix what fails.
    Legal basis:
    Legitimate interest

  • Google Analytics cookies, only if you accept them

    What for:
    Aggregate site statistics.
    Legal basis:
    Your consent (the cookie banner)

  • Emails you send us

    What for:
    Answer you and handle your request.
    Legal basis:
    Legitimate interest; legal obligation for rights requests

To read a roster, our server asks the game's servers for the public profile of that ally code through Comlink, a community tool we run on our own server. We do not ask for, receive or store game passwords, and we never act on any game account.

3. Visit measurement that does not identify you

We count visits ourselves, without cookies. For each event (for example, a page view, a report viewed or a waitlist signup) we keep: the event name, the page path, the domain you came from (never the full address), the campaign tags of the link you used, the test variant if one is running, the country reported by Cloudflare, the device type (mobile, tablet or desktop) and a few small details such as how many legendaries are pending.

  • We do not store your IP address, your full browser string, your name or your email.
  • To count distinct visitors within one day, your IP and browser string are turned into a one-way code with a secret key that changes every day (UTC). The key is deleted after one day, so a visit today cannot be linked to you or to your visits on other days.
  • Report pages are recorded as /r/:code, without the ally code. If an event carries an ally code, it is kept only as a code made with that same daily key.
  • Visits from known bots are not recorded.

We also use Cloudflare Web Analytics, which counts page views without cookies and without storing anything on your device. Google Analytics is separate and loads only if you accept it. Details on the Cookie Policy.

4. Artificial intelligence

The free report does not use artificial intelligence. When the AI coach opens to the public (chat and plans), the roster of the ally code you use and the messages you write will be sent, as processors, to the AI providers that generate the answers: OpenAI, Google (Gemini) and Anthropic. We will update this policy, including how long conversations are kept, before that happens.

When a chat turn is blocked (limits, off-topic or unsafe content) we keep only the type of event, never the message, for 90 days.

5. Who else takes part

  • Cloudflare: content delivery, proxy and protection against attacks. It handles your IP to deliver the site, tells us your country and gives us cookieless page-view statistics (Cloudflare Web Analytics).
  • Hosting: a server operated by the owner in Mexico, where the app and its database run.
  • Google (Google Analytics 4): only if you accept analytics cookies.
  • The game's servers (Electronic Arts / Capital Games): receive the ally code when we read a public profile.
  • OpenAI, Google and Anthropic: only for the AI coach, once it opens (section 4).

There are no ads on this site today; if that changes we will update this policy and the cookie banner first. We do not sell your data or share it with data brokers.

6. International transfers

Some of these providers process data in the United States and other countries. We use them because the service needs them, and we choose providers that offer contractual safeguards for personal data (such as standard contractual clauses).

7. How long we keep it

  • Visit measurement events

    Kept for:
    13 months, then deleted automatically

  • Daily key used for visitor codes

    Kept for:
    1 day

  • Blocked chat events (type only)

    Kept for:
    90 days

  • Roster copy of an ally code

    Kept for:
    Refreshed when a report is requested; the last copy is kept to show the report when the game servers do not answer. Deleted on request.

  • Waitlist entry

    Kept for:
    Until early access opens and we write to you, or until you ask to be removed, whichever comes first

  • Google Analytics data

    Kept for:
    As set in our GA4 property: 14 months

  • Emails with requests

    Kept for:
    As long as needed to answer and to show we did

8. Your rights

Wherever you live you can ask us to access, correct or delete your data, to stop using it, or to withdraw a consent you gave (for example, leaving the waitlist).

  • European Union and United Kingdom (GDPR): access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and the right to complain to your data protection authority.
  • Mexico (LFPDPPP): ARCO rights (access, rectification, cancellation and opposition), revocation of consent and limiting the use or disclosure of your data.

Write to [email protected] with the subject "Privacy request" (or "ARCO"), saying what you want and which email or ally code it is about. We may ask you to confirm that the email is yours. We answer within the legal deadline: 20 business days under Mexican law and one month under the GDPR.

9. Minimum age

This site is for people aged 13 or older. If you are under 16 in the European Union (or under the age your country sets), ask a parent or guardian before joining the waitlist. If we learn that a child under 13 gave us an email, we delete it.

10. Security

  • Encrypted connections (HTTPS) and security headers on every page.
  • Secrets live only in the server environment, never in the site code.
  • Request limits against abuse, and restricted access to the admin console.
  • No game credentials are ever requested or stored.

11. Changes

When this policy changes we update the date at the top. If a change affects how we use the waitlist emails, we will tell those people by email before it applies.

12. Contact

Privacy questions and requests: [email protected].