Privacy notice

Who controls your information

Wyrmwise is an independently operated service in the United Kingdom and is the controller of personal information used to provide the service. Contact Wyrmwise about privacy at wyrmwisesupport@gmail.com.

Information we collect

• Account information, including your email address, authentication identifiers and optional display name.
• Your saved dragon roster, Star Ranks, Dragon Levels, Habit progress, notes and roster-completeness confirmation.
• Army and recommendation information generated from your confirmed roster.
• Product feedback, ratings, page context and optional willingness-to-pay response.
• Security and operational records such as request times, safe error codes and account-deletion requests.
• If billing is enabled, subscription status and Stripe customer, subscription and price identifiers. Wyrmwise does not store full payment-card details.
• If screenshot import is enabled, the screenshots you submit are processed in memory. Wyrmwise stores structured detections, review decisions and usage metadata, but not the original images or their original filenames.

Why we use it

• To create and secure your account and provide the roster and optimiser you request.
• To save, recalculate and explain recommendations from your confirmed data.
• To protect accounts, control excessive automated requests, diagnose faults and prevent misuse.
• To review voluntary product feedback and improve accuracy and usability.
• To manage subscriptions, payments, cancellations and legal accounting obligations if billing is enabled.

Our main lawful bases are performance of our agreement with you, our legitimate interests in securing and improving Wyrmwise, and legal obligations relating to payments and records. Where consent is required for a future feature such as non-essential advertising or analytics storage, that processing will stay off until you make a choice.

Who processes it

Wyrmwise uses Supabase for authentication and database hosting and Netlify for application hosting and delivery. Stripe will process payments only when billing is enabled. OpenAI will receive user-submitted screenshots only when screenshot import is enabled; API response storage is disabled and saved roster data is not automatically sent with an image.

These providers may process information outside the United Kingdom. Where this occurs, Wyrmwise relies on the provider’s contractual transfer safeguards and applicable data-protection mechanisms.

How long we keep it

Account and roster information is kept while your account remains open. When you request deletion, Wyrmwise first checks that any active subscription is safely cancelled, then deletes the authentication account and account-owned database records. Security, audit and feedback records are kept only for as long as they remain necessary to investigate use, demonstrate service integrity or meet legal obligations. Payment and accounting records may be retained for the period required by UK law.

Your choices and rights

You can correct roster information inside your account and request permanent account deletion from the Access page. Depending on the circumstances, you may also ask for access, correction, erasure, restriction, portability or object to our use of your personal information. Contact wyrmwisesupport@gmail.com. You may complain to the UK Information Commissioner’s Office at ico.org.uk.

Children

Wyrmwise is not designed to collect a child’s real name, location or game-chat content. A parent or guardian who believes a child has provided personal information should contact us so it can be reviewed and removed where appropriate.

Changes to this notice

We will update this page when the service, processors or data uses materially change. The date at the top identifies the current version.