Privacy Policy

Information we collect

• Account email — collected only when you sign in. We use it to send one-time sign-in codes (OTP) and to attach your published content to your account. We do not send marketing email.
• Profile details — display name, optional public handle, and avatar you choose. These are shown publicly alongside any builds or heroes you publish.
• Content you publish — custom heroes, Stadium builds, comments, and their associated metadata (timestamps, role, mode, reactions you make).
• Anonymous session cookie (recall_session) — a random token we set the first time a signed-out visitor likes, reacts, or picks a build. It lets us deduplicate those actions without collecting identifying information. It is not used to track you across other sites.
• Request metadata — IP address, user-agent, and request timing, used for rate limiting and abuse prevention. Retained for up to 7 days in rolling logs.
• Aggregate analytics — counts and patterns of feature usage. These are not tied to an individual user profile.

Cookies we set

• Session cookie — keeps you signed in after OTP verification.
• recall_session — anonymous dedup token described above.
• Consent preference — remembers that you dismissed the cookie banner.

These are first-party cookies used only for the functionality described. We do not set advertising or cross-site tracking cookies.

Third parties

• Cloudflare hosts the site, database, and object storage, and provides DDoS protection and aggregate analytics.
• Our transactional email provider delivers sign-in codes to your email address. They process only the email address and the code.

We do not sell your information and do not share it with advertisers.

Your choices

• You can delete individual builds or heroes from your account page, or delete your account entirely to remove your profile and content.
• Residents of the EU, UK, and California (among other jurisdictions) may have additional rights to access, correct, or erase personal information. Email us at support@recallprotocol.com and we will respond within a reasonable time.
• You can clear the recall_session cookie at any time from your browser. Your prior likes/reactions will not carry over.

Children

Recall Protocol is not directed to children under 13. If you believe a child has submitted information, contact us and we will delete it.

Security

We take reasonable steps to protect the information we hold. No online service is perfectly secure; please use a strong, unique password on any linked accounts and do not share sign-in links.

Changes

If we change this policy, we will update the date above. Material changes will be announced on the homepage.