Privacy Notice
Document version: 2026-05-19
1. Overview
This Privacy Notice explains what information TBPal ("we") collects when you use our website and desktop application (the "Service"), how we use it, and your choices. It should be read together with our Terms of Service.
2. Information we collect
Account and billing
- Email address and account identifiers;
- Authentication data (hashed passwords or third-party sign-in tokens via Google, where enabled);
- Subscription status, plan name, and payment-related identifiers from our payment processor (we do not store full card numbers);
- Timestamps of sign-in, website visits, and desktop application heartbeats;
- Device label, application version, and a machine identifier used to enforce one active desktop session per account.
Legal acceptance records
- Which version of the Terms of Service and this Privacy Notice you accepted;
- Date and time (UTC) of acceptance.
Automation and support data
- Calibration coordinates and settings you save locally or in your user profile (e.g. button positions);
- Activity logs you opt into on the server (event types and messages, not continuous screen recordings);
- Crash or diagnostic text logs on your device when applicable.
What we do not routinely store
We do not save screenshots or video recordings of your game screen on our servers. The desktop application may capture the game window in memory temporarily to perform optical character recognition (OCR) and detection, then discards those frames. Rarely, a short-lived temporary image file may be created on your computer for OCR and deleted immediately afterward.
3. Cookies and similar technologies (website)
Our website uses cookies and similar storage required for operation:
- Authentication cookies — keep you signed in to your account (session or persistent login, typically up to 14 days with sliding renewal);
- Security cookies — protect sign-in and form submissions (anti-forgery tokens);
- Preference cookies — remember choices where applicable.
We do not use advertising or cross-site tracking cookies on the website. The desktop application does not use browser cookies; it stores a local session token in your user profile folder on your PC.
4. How we use information
- Provide, secure, and improve the Service;
- Verify subscriptions and deliver updates;
- Enforce one desktop session per account;
- Record legal acceptances when Terms or this Notice change;
- Respond to abuse, outages, or legal requirements.
5. Legal basis (EEA/UK users)
Where applicable, we process data based on contract performance (providing the Service), legitimate interests (security, fraud prevention, product improvement), legal obligation, and consent where required (e.g. non-essential cookies if we add them in future with a banner).
6. Sharing
We share data with service providers that help us run the Service (hosting, database, payment processing, email if enabled). They process data only on our instructions. We may disclose information if required by law or to protect rights and safety.
7. Retention
Account data is kept while your account is active and for a reasonable period afterward for legal, tax, and dispute resolution purposes. Session and activity logs may be trimmed or aggregated over time.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. Contact us through the website to exercise these rights. You may also lodge a complaint with your local data protection authority.
9. International transfers
Data may be processed in countries where our providers operate. We rely on appropriate safeguards where required by law.
10. Children
The Service is not directed at children under 16. We do not knowingly collect their data.
11. Changes
We may update this Notice. Material changes may require renewed acceptance in the desktop application. The version identifier stored on your account reflects what you accepted.
12. Contact
Privacy questions may be sent through the contact method published on the website.