Privacy Policy
rebelinc.wiki keeps information about you only when you sign in or send something to your account.
Signing in
When you sign in with Google, Discord, Twitch or Steam, the site stores the account ID that service returns, the display name it provides, the service's name and the date your account here was created. Steam provides no name, so the site makes one from the last six digits of your Steam ID. The site also stores the email address Google, Discord or Twitch provides, so it can contact you about your account; Steam provides none.
A session cookie keeps you signed in for 100 days; the site stores only a hashed copy of it. A second cookie lasts 10 minutes and protects the sign-in step.
What you send
When you are signed in, the site stores what you send it: saved plans and cards, ratings, field notes, correction suggestions, website feedback, screenshots, and your player profile with its link name, bio, artwork and the plans you publish.
Field notes, correction suggestions and screenshots appear on the site with your display name after a moderator approves them. Website feedback and moderators' replies are visible only to you and the moderators. A public profile and the plans you publish are visible to everyone until you hide them.
In your browser
Plans, saved records and settings you keep without an account stay in your browser's local storage and are not sent to the site. The site also stores its own pages in your browser so they open offline.
The site runs no analytics and shows no advertising.
Assistant apps
When you use this site's app in ChatGPT or another assistant, the assistant sends this site the tool it calls and that tool's inputs: a search phrase, an entry ID, an entry kind, a rule set, a language and a result page. The site uses them only to answer that request and does not store them. The request carries no account, so the site cannot tie it to you.
Server logs and retention
Requests reach the site through Cloudflare. Every request, an assistant app's included, is recorded in the web server's access log: the sending address, the time, the requested path, the response status and size, the referring page and the client name. Request bodies are not logged. Access logs are deleted after 15 days.
When a change fails to save, the application log records the action and the error, never your name or account.
Your account and what you sent stay until you ask for them to be deleted.
Your choices
You can sign out at any time, change your display name on your account page, and hide your profile and published plans. Clearing this site's data in your browser removes what is kept there.
To get a copy of what the site holds about your account, or to have it deleted, email [email protected] and name the service you signed in with.