Privacy Policy

This Privacy Policy explains what information GloryAllStars (“we”, “us”, “our”) collects when you use gloryallstars.co, how we use it, and the choices you have. By using the site you agree to this policy.

Information we collect

• Account information. When you sign in with Discord or Google, we receive and store the basic profile details those services share with us — your username or display name, your profile picture (avatar) URL, and your email address. We never receive or store your Discord or Google password.
• Profile you create. Your optional GloryAllStars display name, uploaded profile picture, “About me” text, and displayed Glory Forge regalia. Your account editor may preview the avatar supplied by your sign-in provider, but public pages use a placeholder until you upload a GloryAllStars profile picture. These profile fields and displayed regalia are public when someone opens your profile.
• Verified in-game identities. If you claim an Evony identity, we store the in-game name, server, battlefield, claim status, and verification details needed to review it. Approved names, server numbers, battlefield associations, and verification dates appear publicly on your profile and in the Commanders directory. Your verification code and review notes are not public.
• Public competitive data. The player names, alliance names, servers, and scores shown on our leaderboards are captured from publicly visible in‑game event standings. This is competitive reference data — not account information you provide to us.
• Technical data. Like most websites, our hosting provider automatically logs basic technical information (such as IP address, browser type, and pages requested) to operate and secure the site. We use cookies and browser local storage to keep you signed in.
• Community Favorite activity. If you participate, we store your event wallet, complimentary grant, finalist allocations, scoring inputs, the event-rules version and content fingerprint you accepted, and the timestamps needed to operate and audit the event.
• GloryForge purchases. If you buy a GloryForge Echo, we store the product, entitlement, edition serial where applicable, accepted purchase-terms version, and the order, capture, refund, reversal, and dispute identifiers needed to deliver it and maintain fraud and accounting records.
• Solo issue reports. When you choose to report a problem, we store the description, reproduction steps, expected result, and screenshots you submit, linked to your website account. Limited diagnostic context can include the simulation session or battle identifier, release identifier, browser information, and screen dimensions. We do not automatically upload your saved KEEP or troop setups.

How we use information

Solo Attack Simulation. Your troop setups and locally saved reports stay in this browser, separately for each account. When you run an attack, its selected setup is sent to our Cloudflare server for calculation. Account-linked session times, quota usage, accepted terms version, and request identifiers are kept for up to 31 days to enforce access limits and prevent duplicate requests. Server battle-result copies are scheduled for removal when the session ends or expires. Clearing browser storage removes your local setups but does not reset server-side allowances. Do not put sensitive personal information in simulation fields.

We use this information to create and display your profile, keep you signed in, operate and improve the site, and protect it against abuse. We do not use your information for advertising, and we do not sell your personal information.

How information is stored and shared

Account data and uploaded profile pictures are stored using Supabase (authentication, database, and file storage). We rely on the following third‑party services to run the site, each governed by its own privacy policy:

• Supabase — account authentication, database storage, and public profile-picture delivery.
• Cloudflare — website hosting, content delivery, security, and private issue-report storage.
• Google and Discord — optional sign‑in providers.

We only share information with these providers as needed to operate the site, and never sell it to anyone.

Issue reports and screenshots

Issue reports help us investigate bugs and compare simulation behavior with examples you provide. They are not public: only the submitting account and authorized site administrators can access a report or its screenshots. Internal review notes are administrator-only. Please crop or hide private chat, personal information, and details you do not have permission to share before uploading an image. Image metadata is removed as part of validation, but names and other information visibly written in a screenshot remain visible to reviewers.

Submitted reports, screenshots, and review records are scheduled for removal after 90 days. Screenshots from unfinished submissions are scheduled for removal after 24 hours; submission records remain until their normal expiry so an abandoned upload cannot reset abuse limits. Provider recovery backups may retain deleted records for a limited additional period. We use Cloudflare Turnstile and request limits to help prevent automated abuse; verification can process browser signals and your IP address. You can contact hello@gloryallstars.co about access to or deletion of an issue report.

Payments

Community Favorite voting is free and has no paid point checkout. For the separate GloryForge Echoes catalogue, PayPal processes fixed cosmetic purchases. We store the minimum order and entitlement records needed to prevent duplicate fulfillment, resolve payment issues, revoke a refunded cosmetic, and maintain accounting and fraud evidence. A cosmetic purchase never changes voting data. PayPal—not GloryAllStars—collects and processes your full payment credentials. Financial and anti-fraud records may be retained after account deletion where required for legal, accounting, dispute, or security purposes.

Your choices and rights

You can change your display name, profile picture, or “About me” text and sign out at any time. Because profile pictures and approved in-game identities are public, do not upload or publish information you want to keep private. To request access to, correction of, or deletion of your account and associated data, contact us at hello@gloryallstars.co.

Children

GloryAllStars is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect their personal information.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent version.

Contact

Questions about this policy? Reach us at hello@gloryallstars.co.