Privacy Policy.

Who we are and this policy

Realm Planner is an Ontario-registered sole proprietorship based in Canada (“Realm Planner,” “we,” “us,” or “our”). We are responsible for the personal information we process to provide Realm Planner. This policy explains what we collect, why we use it, who receives it, and your choices. It applies to the website and the account, planning, and paid features you use.

You can use the Free planner without an account. Signing in, saving to the cloud, sharing, collaborating, and submitting an optimizer search involve additional processing described below. Feature availability depends on your access and the services enabled.

Browser storage and website visits

Theme, language preference, map selection, and planner settings can be stored in your browser. Local planner drafts are stored in IndexedDB on your device and contain plan geometry, alliance labels, structures, map/rule versions, and save information. Language selection stores a preference; it does not translate all content.

Ordinary local-only planning does not upload your draft to cloud storage. Copying a draft to the cloud sends plan data to our services. Opening the enabled optimizer for a local plan also uploads a scratch copy before you start a search. Viewing a shared plan also requests information from our services. Clearing browser site data removes local storage and can sign you out; we cannot restore a local draft we never received.

Vercel hosts the website and may process network and request data such as IP addresses, URLs, browser/device information, timestamps, errors, and security events to deliver and protect it.

Accounts and authentication

When you choose Google or Discord sign-in, Supabase processes the account identifier, email, and basic profile information returned by that provider, which may include a display name and avatar. We use account identifiers, verified email information, sign-in times, and session information to authenticate you, match invitations, and protect account actions. Necessary authentication cookies keep you signed in.

Ordinary sign-in requests basic identity and email information, not Discord messages or guild lists, or Google Drive files or contacts. We do not receive your Google or Discord password. Those providers also process your sign-in under their own privacy policies.

Cloud plans, workspaces, and sharing

We store workspace names, ownership, memberships, roles, invited email addresses, invitation status, plan assignments, and access records. Members’ email addresses and roles are available to people authorized to manage workspace membership. Invitations use links that the inviter can copy and deliver.

Cloud records include plan names and content, map and schema versions, revisions, optimizer preferences, timestamps, and archive/deletion state. Plan content can include alliance names, colours, structures, and game strategy. We process this information to save, validate, display, export, and synchronize plans and enforce access permissions.

Unlisted share links expose a fixed plan snapshot to anyone who obtains the link. Eligible users can import independent copies. Revoking a link prevents later access through that link but does not erase copies already imported, downloaded, or otherwise saved. Workspace members may also retain copies they were authorized to access. Do not include personal contact details, credentials, private communications, or sensitive information in plans.

Live collaboration

Premium live collaboration uses Supabase Realtime to share editor identity and display name, presence, cursor positions, selections, and short-lived placement changes with other authorized editors. Committed plan changes and revision records are stored separately. Viewers receive assigned static plan access rather than participating in live editor channels.

Hiding cursor labels in your own display is a presentation setting; it does not make your identity anonymous to other participants. Choose your provider display name with this visibility in mind.

Optimizer processing

When you use the optimizer, we process your plan content, selected objectives, and settings to generate suggested game layouts. Opening the optimizer for a local plan uploads a copy before you start a search. We also process usage and diagnostic information to deliver results, manage credits, troubleshoot problems, and protect the service.

Optimization concerns game layouts, not assessments of people. We do not use plan content for advertising profiles.

Billing and support

Paddle processes checkout and payments as merchant of record. We receive customer and transaction identifiers, subscription and trial status, billing periods, purchased items, amounts and currency, and payment, adjustment, or dispute information needed to administer access and credits. We retain billing event and credit ledger records to reconcile purchases, reservations, usage, reversals, and expiry. Realm Planner does not store full payment-card numbers.

Emails to support or privacy are handled through Google Workspace. We receive your email address, message, and any attachments or account/purchase details you send. Send only what is needed to resolve the request, and do not send passwords or full payment-card details. If you contact us through Discord, Discord also processes the interaction under its own policy; community messages may be visible to others in that channel.

Analytics and performance

The website includes Vercel Web Analytics and Speed Insights. Web Analytics collects visit measurements such as page URL, referrer, approximate location, browser, operating system, device type, and time. Speed Insights collects performance measurements such as loading, responsiveness, and layout stability, together with page and browser/device context.

Vercel describes these services as not using cookies for visitor tracking. This does not mean the website has no cookies: account sessions use authentication cookies. See Vercel’s Web Analytics privacy documentation and Speed Insights privacy documentation for their collection methods. Browser privacy tools may block these measurements.

Purposes and legal bases

We use information to provide requested planning, account, workspace, optimization, billing, and support services; enforce access and usage limits; detect abuse; investigate errors; and maintain service reliability. We also process information to meet legal obligations and handle disputes or valid legal requests.

Where the GDPR or UK GDPR applies, we rely on performance of our contract for requested services, legal obligations where processing is required by law, and legitimate interests for proportionate security, abuse prevention, and service diagnostics, subject to your rights. Where consent is required, it must be obtained for that processing and may be withdrawn without affecting earlier lawful processing.

We do not sell personal information, share it for cross-context behavioural advertising, or send promotional marketing email. Account, authentication, billing, security, legal, and support communications are service communications.

Service providers and other disclosures

We use service providers for hosting, data storage, authentication, planning and optimization, analytics, security, and support. Depending on the service, they process relevant account information, plan content, usage information, or correspondence to perform those functions.

Payments are handled by Paddle as merchant of record and an independent controller under its Privacy Policy. Your chosen sign-in provider also processes information under its own privacy policy.

Information may be shared with authorized workspace members or people with your share links, as described above. We may also disclose relevant information when reasonably necessary to comply with law, protect rights and safety, obtain professional advice, or transfer the business, subject to applicable protections.

Retention and deletion

Local data remains until you clear it, your browser removes it, or it becomes unavailable. Cloud plans are retained to provide storage and recovery features until deleted through the available controls or otherwise removed under our retention obligations. Subscription cancellation restricts access but does not automatically delete cloud plans or purchased-credit records on a fixed timetable.

Optimizer records are scheduled to become eligible for cleanup after 24 hours for failed, cancelled, and no-solution jobs; 7 days for completed unapplied results; 30 days for applied jobs and undo records; and 24 hours after undo. Cleanup is periodic and may be delayed by operational recovery. Saved canonical plans, optimizer scratch copies, and billing/credit records are separate and do not expire with a job. A scratch copy may be replaced when you prepare another local plan for optimization; contact us to request deletion of stored personal information.

Account deletion requires recent sign-in and resolution of any owned workspace through transfer or explicit deletion. It removes the active account and associated records according to their relationships; it does not remove other users’ independent copies, local browser data, or all provider records. Cancel your subscription through Paddle separately before deleting your account or workspace.

Support correspondence, security logs, financial records, and residual backups can remain where needed for support, security, recovery, legal obligations, or disputes. Retention depends on the record and provider; we do not promise that all backups or financial records disappear immediately after deletion. We review deletion requests for applicable legal requirements and explain relevant exceptions.

International processing and security

We are based in Canada. Our providers and their subprocessors may process information in other countries, including the United States. Your information is not guaranteed to remain in Canada. Foreign courts and authorities may be able to access information under local law. Applicable data-transfer safeguards and privacy rights continue to apply; contact us for information about processing relevant to your account.

We use access controls, server-side authorization, private storage, and other safeguards appropriate to the service. No internet service is perfectly secure. If an incident requires notification or reporting, we will act as required by applicable law. Report suspected data or account security issues to privacy@realmplanner.com.

Children and teenagers

Realm Planner is not available to children under 13. Users below the age of majority need a parent or guardian to agree to the Terms and authorize purchases. If you believe a child under 13 has provided personal information, contact our privacy email so we can investigate and address the account and data as required.

For younger users: local plans stay in your browser unless you use a feature that sends them to us. Cloud plans, optimizer searches, invitations, and collaboration involve sharing information. A share link can be forwarded, and other editors can see your display name. Ask a parent or guardian for help if these choices are unclear.

Your choices and privacy requests

Depending on the law that applies, you may request access, correction, deletion, or a portable copy of personal information; object to or restrict processing; withdraw consent; or ask about sources, recipients, purposes, and retention. Contact privacy@realmplanner.com. We may need to verify your identity and authority before releasing information or changing records.

We respond within applicable legal time limits and explain any lawful refusal. Where an appeal right applies, reply to the same address asking for review. Authorized agents may submit requests where permitted. We do not discriminate against you for exercising privacy rights. You may also complain to the Office of the Privacy Commissioner of Canada, your provincial regulator, your EEA supervisory authority, the UK Information Commissioner’s Office, or another regulator with jurisdiction.

Use browser controls to clear local data, workspace controls to manage access and links, and account controls to request deletion. Clearing browser data does not cancel billing or delete cloud records. Where we cannot access local-only data, we cannot retrieve or delete it on your behalf.

Changes and contact

We will post changes with a new effective date and provide an appropriate service notice of material changes affecting account holders. Where a change requires consent, we will seek it. Send privacy questions or requests to the address below.

For other assistance, contact support@realmplanner.com.