This Privacy Policy describes how Exilefolio ("we", "us", or "our") collects, uses, and shares information when you use our website and services at exilefolio.com (the "Service").
1. Information we collect
Account and authentication data
When you sign in with your Path of Exile account, we receive information from Grinding Gear Games through OAuth, including your PoE account identifier and related profile data made available by the official PoE API.
Game data
With your authorization, we access stash and character data from the official Path of Exile API to provide currency monitoring and snapshot features. We store the data needed to display historical wealth tracking within the Service.
Technical data
We collect standard server and application logs, including IP address, browser type, request timestamps, and error diagnostics. Session cookies are used to keep you signed in.
2. How we use information
- Provide, operate, and improve the Service
- Authenticate you and maintain your session
- Store and display your wealth snapshots over time
- Monitor reliability, security, and abuse
- Respond to support requests
3. Legal bases (EEA/UK users)
Where GDPR applies, we process personal data on the basis of contract performance (to provide the Service you request), legitimate interests (security, reliability, and product improvement), and consent where required (for example, optional communications).
4. Sharing and subprocessors
We use trusted infrastructure providers to run the Service. A current list of subprocessors is available on our Subprocessors page. We do not sell your personal data.
5. International transfers
Your data is primarily stored in the European Union (AWS EU via Neon). Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable.
6. Retention
We retain account and snapshot data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at contact@exilefolio.com.
8. Security
We implement technical and organizational measures designed to protect your data, including encryption in transit (HTTPS), access controls, and environment isolation between production and staging.
9. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.
11. Contact
Questions about this Privacy Policy can be sent to contact@exilefolio.com.