Privacy Policy

This policy covers LordScanner accounts, the website and information about players read from the public in-game kingdom map. You can ask us to remove your castle by email even if you have never registered with LordScanner.

1. Controller and contact

Michael Ketzer, Germany, is responsible for LordScanner's processing of personal data. For privacy questions or rights requests, contact:

2. Data we process and why

• Account: email address, account identifier, creation time and sign-in time, used to create your account, deliver access and support you. The legal basis is performance of our contract (GDPR Article 6(1)(b)).
• Authentication and security: hashed one-time codes, hashed email/IP identifiers used for rate limiting, session token hashes, expiry and last-seen times and browser user-agent information. We use these to authenticate you and prevent abuse, on the basis of contract performance and our legitimate interest in securing the service (Article 6(1)(f)). Codes expire after 10 minutes; sessions expire after 30 days.
• Billing: Paddle customer, transaction and subscription identifiers, purchased plan, payment/subscription status and access dates. These enable paid access and billing support under our contract. Records required by tax or accounting law are processed under a legal obligation (Article 6(1)(c)).
• Public map data: player names, alliance tags, castle levels and coordinates, home kingdom, shield state and scan times, as publicly visible on the in-game kingdom map. We process this to provide on-demand kingdom charts and search, relying on our legitimate interest in providing a useful read-only map service (Article 6(1)(f)). Player names and map positions may be personal data even though visible in the game. Our service makes them easier to search; you can object and request removal by email.
• Support and technical logs: emails you send us, request/error details, IP addresses and browser information processed by our hosting provider. These help answer requests and diagnose or prevent failures and abuse, based on contract performance or legitimate interests as appropriate.

We do not ask for your game login, read private game messages, or receive your full card number. We do not use scan data to make automated decisions with legal or similarly significant effects about you.

3. Payments

Paddle receives checkout details such as your email, billing address and payment information and acts as an independent controller for its payment, fraud prevention and legal obligations. LordScanner receives billing identifiers and status needed to grant access. See Paddle's Privacy Policy and Buyer Terms.

4. Providers and recipients

• Paddle: reseller and Merchant of Record for checkout, receipts, subscriptions and refunds.
• Letterpier: email delivery provider receiving your email address and the sign-in email content.
• Vercel: website hosting and technical request processing.
• Neon: database hosting for accounts, sessions, billing state and scan records.
• LordScanner (Michael Ketzer): we run the scanning service ourselves in Germany and the EU; the public map data listed above is processed there before it reaches the database.

Hosting, database and email providers process data on our behalf. We access data only as needed for support and service operation. Paid users can see the displayed map data; free accounts see summary counts. We do not sell account details. We may disclose records where legally required or necessary to protect legal claims.

5. International transfers

Providers may process data outside the European Economic Area. Where a transfer requires safeguards, we rely on an applicable adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact us for information about safeguards applicable to your data.

6. Cookies and local storage

We use an essential session cookie to keep you signed in and, for invited testers, an access cookie. Session cookies are HttpOnly, Secure in production and SameSite=Lax. Local storage remembers interface preferences such as theme and sidebar state. These are used for the service you request, not advertising. Paddle may use its own cookies or storage when you open checkout; its policy explains that processing.

7. Retention and deletion

• We keep your account while you use it. You can request deletion by email. We remove account data no longer needed, while retaining records required by law or for unresolved billing/security matters.
• Sign-in codes expire after 10 minutes. Short-lived authentication/rate-limit records are cleaned up during authentication activity. Sessions expire after 30 days and can be revoked earlier; expiry prevents access even if cleanup has not yet removed the database record.
• Castle records hold the latest scan state, not a player movement history. A later scan replaces that state; a castle missed in two completed scans is hidden, which does not itself delete its stored row. Raw scan results are purged from the LordScanner database after 7 days. The scanning service we operate keeps its own copy and does not yet delete it automatically; we delete it on request and will state the retention period here once it is set.
• Castle removal requests are sent by email to support@lordscanner.com and handled by hand, without undue delay and normally within 30 days. We delete the castle's stored records and confirm by email. LordScanner cannot yet block a castle automatically, so a later scan of the kingdom can read it again from the public map; tell us if that happens and we will remove it again.
• Billing records are retained for the applicable statutory accounting/tax period; Paddle retains its own records under its policy. Support correspondence and security logs are kept only as long as needed to handle the request, investigate abuse or meet legal obligations.

8. Your rights

Under the GDPR, where applicable, you can request access, correction, erasure, restriction of processing and portability. You can object to processing based on legitimate interests, including publication of your castle data, and withdraw consent where processing depends on consent. Withdrawal does not affect earlier lawful processing.

Email support@lordscanner.com. For map data, include your player name and kingdom as described on Opt-out. We may ask for proportionate evidence that you are the affected player or account owner, but never your game password. We normally respond within one month; if a lawful extension is necessary, we will explain why.

You can complain to a data protection supervisory authority, particularly in the EU country where you live, work or believe an infringement occurred. These rights do not require a paid LordScanner account.

9. Security

We restrict access to operational data, hash authentication tokens and codes, and use encrypted transport. No system can eliminate every risk. Contact us if you suspect unauthorised access or a data exposure.

10. Children and policy updates

LordScanner is not directed at children under 16. Contact us if a child's account data has been submitted so we can review and remove it where appropriate. Material changes to this policy will be communicated through the service or by email where appropriate; the review date is shown above.

11. Contact and independence

LordScanner (lordscanner.com) is fan-built and not affiliated with, endorsed by, or connected with Top Lords or GAME SPARK PTE. LTD. Privacy questions and requests go to support@lordscanner.com.