Privacy policy

Policy details are unavailable

The operator, contact and retention details could not be loaded. This policy is incomplete without them. Please reload or use Feedback & ideas to contact the maintainer.

About this policy

This policy covers the DragonVale Lair website and mobile app, an unofficial fan project. It does not cover the DragonVale game. The operator and privacy contact are listed below.

Information we use

Accounts use an email address and password through Supabase Auth. We use account identifiers and session credentials to sign you in. Passwords are handled by Supabase Auth and are not stored in our application tables.

Your online collection includes park names, dragon ownership, individual copies, levels, twins and Rift traits. Account games store play state and results. Make a Match also stores private totals and per-dragon guess statistics.

Ranked play publishes the player name you choose, scores, rankings and tournament statistics. Your account email is not published on leaderboards.

Feedback includes your message, category, selected feature, platform and an optional contact email. It is held in a private maintainer inbox, without an account link. Please do not send passwords or sensitive personal information.

Our servers and providers process connection information needed to deliver and secure requests, such as IP addresses. The app uses short-lived request budgets. Optional tool-usage counters are aggregate monthly totals, without account identifiers or an offline telemetry queue.

Why we use it

We use account and collection data to provide the features you request, and game data to run games and calculate results. Where European data-protection law applies, this processing supports providing the service under our terms.

We use limited operational information to protect the service and investigate faults, and feedback to respond to requests and improve the project. These activities support our legitimate interests in operating a safe, useful service. Optional features can be left unused.

The application has no advertising or cross-site tracking integration, and we do not sell personal information.

Storage on your device

The website uses essential HttpOnly session cookies. The native app stores its refresh credential in the operating system credential store. Your collection is online-only; there is no offline collection database.

Public breeding snapshots may be cached for offline calculations. Island Planner drafts stay in memory. Collection and planner files you choose to export remain on your device until you remove them.

Providers and sharing

Supabase supplies account authentication and database storage. Our hosting and email providers process requests and account emails to operate the service. The deployment-specific provider, location and transfer details are listed below.

The optional Google Sheets calculator sends breeding inputs to a dedicated workbook. It does not need your account email or collection. External links open other services governed by their own policies.

Public leaderboard information is visible to other visitors. Private data is otherwise used by the operator and service providers, except where disclosure is required by law.

Deletion and retention

You can delete your account in Account & privacy in the app or on the Delete account web page. Confirm your current password and the permanent deletion. Successful deletion removes your Auth account, parks and dragon copies, player profile, all-time scores, account game sessions and private Make a Match statistics.

Weekly tournament history is retained indefinitely with the saved name replaced by Deleted player and the account reference removed. Separate feedback has no account link: contact support with its receipt to request removal. Aggregate usage counts and files you exported are not removed by deleting an account.

Deletion acts on the active service. Backup expiry, operational logs and feedback retention depend on the deployment and are described below. A failed or interrupted request does not establish that deletion finished; the app explains how to check.

Your choices and rights

You can use public tools without an account, choose guest play, export your collection, and delete your account. Contact the privacy contact below to request access, correction, an export of other personal data, deletion or restrictions on use. We may need to verify account ownership, but will never ask you to send your password.

Depending on applicable law, you may also have rights to portability and to object to processing based on legitimate interests, and may complain to your local data-protection authority. Mandatory rights are not limited by this policy.