Privacy Policy

Last updated: 17 September 2026

What we collect

• Account data: your email address, a password (stored hashed by our authentication provider, Supabase) and, if you set one, a username.
• Usage & security data: session records, per-user access and clone/download tokens needed to operate the service, and — for security and abuse prevention — the IP address and timestamp of your logins and rate-limiting counters. We do not run analytics trackers or advertising.
• Download records: which wizard code you download and when, attributed to your account. Downloaded files may carry a per-user identifier so that leaked or redistributed copies can be traced. This is used only to protect our intellectual property.
• Anti-bot: when enabled, sign-up/login may use Cloudflare Turnstile, which processes limited technical data to tell humans from bots. We do not receive your browsing history from it.
• If YouTube-verified registration is enabled: a one-time, read-only check of whether your Google account subscribes to our channel, via Google's YouTube API. We store only the yes/no outcome, never your subscription list.

Cookies

Only functional cookies: an HttpOnly session cookie that keeps you logged in. No tracking or third-party advertising cookies.

Where data lives

Authentication data is processed by Supabase; the site, its database, and anti-bot run on Cloudflare. The wizards themselves run on your own machine and send us nothing beyond the requests needed to authenticate and download the code you asked for.

How we use it

Only to operate and secure the service: to sign you in, give you access to the wizard code, prevent abuse, and protect our intellectual property. We do not sell your data or share it except with the processors above or where required by law.

Your rights

You can request access to or deletion of your account and data at any time: support@wizardverse.org. We keep data only while your account exists, plus a short period for security logs.