Privacy notice

Who is responsible

Eldritch Sword Games Ltd, Finland, operates The Stygian Archive and is the controller of your account information. Finnish Business ID (Y-tunnus): 3547593-8. Contact us about support or privacy at support@conquestbuilds.com.

What we use and why

We use your email address to send login links and identify your account. We store your account ID, verification status, sessions, chosen profile name, fixed avatar, optional description, saved build imports, and the date and version of your terms acceptance. Email is required for an account; you can browse without providing it. Your email and saved imports are private. This test site has no public publishing.

Providing the account and saving or exporting the content you request is necessary to perform our agreement with you (GDPR Article 6(1)(b)). Preventing abuse and protecting accounts is our legitimate interest (Article 6(1)(f)). We use temporary counters derived from keyed hashes of email or IP addresses, rather than recording raw IP addresses in the application database. Network providers still process connection information to deliver and protect the service.

If you contact support, we use your message and reply address to answer and resolve the request. We do not use these details for marketing. There is no advertising, analytics tracking, or automated decision-making with legal or similarly significant effects.

Providers and locations

Cloudflare provides hosting, the database, login email delivery and support email forwarding. The account database uses Cloudflare’s EU jurisdiction. Hosting and email involve global infrastructure, so this does not mean all processing stays in the EU. Cloudflare describes international-transfer safeguards, including standard contractual clauses, in its data processing addendum.

Support messages are forwarded to a Gmail mailbox operated by us. Google processes these messages under its privacy policy, including its international-transfer arrangements. Sending a login email also involves your chosen email provider. We do not sell account data.

Cookies and how long data stays

The essential, HTTP-only session cookie keeps you signed in for at most 30 days from sign-in. It is not renewed by activity. Login links last 15 minutes and can be used once. Signing out revokes that session; your account also offers sign-out on all devices. No optional tracking cookies are installed.

Account details and saved imports remain until you delete them or the test service closes. Account deletion removes your account, sessions, profile and saved imports from the active database. Daily maintenance removes expired login records, sessions and abuse counters; an expired record may remain until that cleanup runs. Cloudflare D1 recovery history can retain earlier database content for up to 30 days. We do not restore deleted test accounts: a lost staging database will be reset instead.

We remove resolved support messages within 90 days, unless an ongoing dispute or a legal obligation requires retaining relevant correspondence. Provider-held operational records follow the providers’ retention policies.

Your choices and rights

From your account, you can correct your profile, download your account data, revoke sessions and delete your account. Contact the support address above to request access, correction, erasure, restriction or portability, or to object to processing based on legitimate interests. These rights depend on the circumstances. We normally respond within one month and may need to verify your identity.

You can complain to Finland’s Office of the Data Protection Ombudsman or your relevant data protection authority. Accepting our terms is not consent to marketing or a waiver of your privacy rights.