Privacy Policy

Last updated: May 2026

Who We Are

BuffOrNerf is an unofficial Overwatch patch tracker operated as a fan tool. We are not affiliated with Blizzard Entertainment.

Controller/contact for privacy requests: buffornerf.legal@gmail.com

What Data We Collect

• If you sign in: your email address and authentication provider details through Firebase Auth.

• If you accept analytics: usage events such as hero views, patch views, searches, sign-ins, sign-ups, and favorite toggles through Firebase Analytics / Google Analytics.

• Your favorite hero IDs and notification preferences are stored in Firestore under your user account.

• The app stores consent preferences, cached app data, rank preference, and install-prompt state in browser local storage.

• If Sentry is configured, error reports may include technical diagnostics such as browser, device, route, stack trace, and non-identifying runtime context. Sentry is configured not to send default PII.

• We collect no payment data, no precise location data, and build no advertising profiles.

Legal Basis and Why We Collect It

Legal basis depends on the feature:

• Account, favorites, and notification preferences: performance of the service you request.

• Analytics: your consent, which you can withdraw at any time.

• Local app caches and auth session: legitimate interest and service necessity so the app loads, stays signed in, and remains reliable.

• Error monitoring and security logs: legitimate interest in keeping the app reliable and secure.

• Legal requests: compliance with applicable law.

Third Parties and Processors

• Google Firebase (Auth, Firestore, Hosting, and Analytics) processes authentication, database, hosting, and optional analytics data.

• Google Analytics only initializes after you accept analytics consent.

• Sentry may process error diagnostics if an error-monitoring DSN is configured.

• We do not work with advertising networks and we do not sell your data.

Cookies and Local Storage

• Firebase Auth session: strictly necessary; persists your login across visits.

• Firebase Analytics identifiers: only set if you accept analytics consent.

• Consent preference: stored locally in your browser to remember your choice.

• App cache entries may store public hero and patch data locally to improve speed.

• Cookie Preferences withdraws analytics consent, clears this site's consent value, and removes analytics identifiers available to this origin. Some browser or provider-managed identifiers may require clearing browser data or provider settings.

International Transfers

Firebase, Google Analytics, and Sentry may process data in countries outside your own. Where required, these providers rely on their data-processing terms and transfer safeguards. Contact us if you need the current provider links for a data-rights request.

Your Rights

• EU residents (GDPR): right to access, rectify, erase, restrict, or port your data; right to object to processing; right to lodge a complaint with your local supervisory authority.

• California residents (CCPA/CPRA, if applicable): right to know what personal information is collected, right to delete, right to correct, and right to opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising.

• All users: withdraw analytics consent at any time via Settings → Cookie Preferences.

• Delete your account or request deletion by emailing buffornerf.legal@gmail.com from the email associated with your account. We may ask for information needed to verify the request.

• To exercise any right: email buffornerf.legal@gmail.com — we aim to respond within 30 days.

Data Retention

• Analytics events: retained according to the configured Google Analytics retention period, currently intended to be no longer than 14 months.

• Account data, favorites, and notification preferences: retained until you delete your account or request deletion.

• Error diagnostics: retained only as long as needed for reliability and security review.

• Local storage data remains on your device until you clear it, withdraw consent, or your browser removes it.

Children

BuffOrNerf is not directed to children under 13. Do not create an account or send us personal information if you are under 13. If you believe a child under 13 provided personal information, email buffornerf.legal@gmail.com and we will delete it.

Changes to This Policy

We will update this page when the policy changes. Continued use of the app after changes constitutes acceptance of the revised policy.