Privacy Policy

1. Children & age

The Service is for people 13 and older. It is not directed to children under 13, and we do not knowingly collect their personal information. Before you can publish a profile, we ask you to confirm your birth month and year on your own device — that date is checked locally and never sent to or stored by us; we only keep the yes/no result that you met the age threshold. If you believe a child under 13 has given us information, or you’re a parent who wants a child’s profile removed, use our parent & guardian page and we’ll remove it.

2. What we collect

• Account info — when you sign in with a provider (such as Google or Epic Games), we receive a basic profile: a provider account ID, your display name, profile image, and email address where the provider shares one. Epic accounts may not include an email, and we don’t require one.
• Profile content — the locker/wishlist items, display name, and avatar you choose to publish. Your saved items live in the app on your device; only what you publish is sent to us to show your public profile.
• Age-check result — a simple pass/fail flag (not your birth date), as described above.
• Usage & device data — basic analytics about how the Service is used, plus a device identifier stored in a cookie and your IP address, which we use to keep the Service secure and to enforce rate limits and anti-abuse controls.

We do not collect payment information, and we don’t ask for sensitive personal data.

3. How we use it

• to provide, operate, and improve the Service;
• to create and display your public profile when you choose to publish one;
• to keep the Service secure, prevent abuse, and enforce our Terms;
• to understand usage with privacy-respecting analytics; and
• to respond to your requests and safety reports.

We do not sell your personal information, and we don’t use it for third-party advertising.

4. What’s public

If you publish a profile, your display name, avatar, and the items you choose to show are visible to anyone and may appear in on-site discovery. Public profile pages are excluded from search-engine indexing, but they are still reachable by anyone who has the link. You can unpublish or delete your profile at any time.

5. Who we share with

We share information only with service providers that help us run the Service, including:

• Sign-in providers (e.g. Google, Epic Games) to authenticate you;
• Hosting & database providers (e.g. Vercel and Neon) to run the site and store data; and
• Analytics providers to understand aggregate usage.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users and the Service.

6. Cookies

We use cookies and similar technologies for essential functions — keeping you signed in, remembering your age check, storing a device identifier for security and rate limiting, and measuring usage. You can clear or block cookies in your browser, but some features may not work without them.

7. Your choices & rights

• Access / export — signed-in users can download their data from the profile settings.
• Delete — you can delete your account and associated data at any time from settings.
• Unpublish — you can make your profile private without deleting your account.
• Parent requests — guardians can request removal of a child’s profile here.

Depending on where you live, you may have additional rights (such as access, correction, deletion, or portability). To exercise them, contact support@dilly.gg.

8. Data retention

We keep account and profile data while your account is active. When you delete your account, we remove your personal data, except limited records we must keep for security, legal, or anti-abuse reasons. Aggregated or de-identified data that can no longer identify you may be retained.

9. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is perfectly secure, so we can’t guarantee absolute security.

10. International users

We operate in the United States, and your information may be processed there and in other countries where our service providers operate. By using the Service, you understand your information may be transferred to locations with different data-protection laws than your own.

11. Changes to this Policy

We may update this Policy from time to time. We’ll update the “Last updated” date above and, for significant changes, may provide additional notice in the Service.

12. Contact

For privacy questions or requests, email support@dilly.gg.