Privacy policy

Who is responsible

AO Manager is made by LEVEQUE François, who is responsible for the data described on this page. Contact: leveque.fra@gmail.com.

Without an account

Your lists, prices, characters, settings and Live history are saved on your device only: in the browser on the website, in the app's data folder on the desktop. None of it is sent to AO Manager.

The app only contacts these services, which, like any website, see your IP address:

• the Albion Online Data Project (albion-online-data.com), for market and gold prices: it receives the items, cities and qualities asked for;
• render.albiononline.com, for item and spell icons: it receives the ids of the items and spells shown;
• the game info service of Sandbox Interactive, for the player, guild and battle pages: it receives the names and ids you look up. The website reaches it through a relay that passes the request on;
• GitHub, where the desktop app checks for updates and downloads them.

The desktop app's Live capture reads the game's network traffic on your computer. With Private mode on (the default), it sends nothing. If you turn Private mode off, the market prices and orders you browse, market history and gold prices are shared anonymously with the Albion Online Data Project, without character names or ids.

With an account

The account is optional. It keeps a copy of your data on the AO Manager server, so your browsers and computers share it. You sign in in one of three ways:

• with your email address: the server emails you a 6-digit code, valid 10 minutes and stored only in hashed form. Your address identifies your account.
• with Discord (permissions "identify" and "email"): Discord gives the server your Discord id, your name, your avatar and your email address if Discord has verified it. The server also keeps the access keys Discord returns at sign-in.
• with Google (permissions "openid", "email" and "profile"): Google gives the server your Google account id, your name, your profile picture and your email address if Google has verified it. The server also keeps the access keys Google returns at sign-in.

What the account stores

Only what you save in the app. The server stores it and sends it back to your devices; it does not read it.

• the settings you changed from their default, except the device settings below;
• your characters, their specializations and crafting settings;
• your saved templates, launched crafts and their progress;
• your watched items, price alerts and price checkpoints;
• your market flips: tracking rules, purchases and sales, and the purchases waiting for your answer or that you declined;
• your Live sessions (summaries and details) and dungeon runs.

What never leaves your device

Drafts (the crafting, refining, laborer and farming tables in progress and the prices typed in them), the settings of each device (language, region, theme, menu, Live capture), what the Live capture keeps on the computer (the session in progress, the trades it saw) and caches (market prices, daily sales) stay on the device, with or without an account.

Sessions and security

A sign-in lasts 30 days and is renewed each day you use the app. For each sign-in, the server stores the IP address and the browser or app it was made from.

The desktop app keeps its sign-in in your system's keychain.

To stop abuse, the server counts requests per IP address and per email address. These counters are kept in memory only and are forgotten when the server restarts.

The server's logs hold no personal data.

How long data is kept

• Your account and its records: until you delete them.
• A record you delete leaves a deletion marker, so your other devices delete it too. Markers are erased after 180 days.
• Live session details: 30 days after the session ends. Dungeon runs: 30 days after the run. Live session summaries stay with the account.
• Flip purchases you declined: 90 days.
• Sign-in codes: 10 minutes.
• A sign-in session, with its IP address and browser: deleted within an hour after it expires (30 days without use).
• Backups: a nightly copy of the database, kept 30 days, is planned. It is not in place yet.

Export and delete

In Settings, the account section lets you download everything your account holds as a JSON file, at any time.

It also deletes your account: the server erases at once your account, its sign-in sessions, its links to Discord and Google, and all its records.

Services involved

• The server and its database run at a host in the European Union, not chosen yet.
• Sign-in codes are sent by an email service in the European Union, not chosen yet. It receives your address and the code.
• Discord, if you sign in with it.
• Google, if you sign in with it.

Legal basis

The account's data is processed to provide the service you sign up for (performance of a contract, GDPR Article 6(1)(b)).

Your rights

Under the GDPR you may access your data, have it corrected or erased, restrict its use and take a copy of it. Export and deletion are in the app; for anything else, write to leveque.fra@gmail.com. You may also complain to the data protection authority of your country.