Privacy Policy

BDOWorkshop.com ("BDOWorkshop", "we", "us") is a free set of tools for Black Desert Online players: enhancement, gear-progression, crafting and market calculators, and screenshot scans of your in-game inventory, storage and gear. This policy explains which personal data we collect when you use the website, why we collect it, who can see it, how long we keep it and what your rights are.

Who is responsible for your data

BDOWorkshop is operated by SIA Ochir, a company established in Latvia, which is the data controller for the personal data described in this policy. Its registered details are available on request. For anything about your data, e-mail bairog.business@gmail.com.

What data we collect

Account data from your sign-in provider

You create an account by signing in with Discord, Google, Steam or Twitch; there is no password on BDOWorkshop. When you sign in, the provider you chose sends us:

• your name or username and your profile picture;
• your e-mail address, when the provider shares it (Discord, Google and Twitch do; Steam does not provide one);
• the provider's account ID for you, which we store so that we can recognize you on later sign-ins;
• your language preference, when the provider sends one;
• for Discord and Twitch, a sign-in token that lets us renew the connection. Twitch's token is used to check your subscription (see "Supporter data"). We do not keep Google or Steam tokens after sign-in.

You can connect more than one provider to the same account, and disconnect any of them, from your account settings.

Google user data

When you sign in with Google we ask only for Google's basic sign-in permissions (openid, email and profile). Through them we receive your name, e-mail address, profile picture and Google account ID. We use this information solely to create your BDOWorkshop account, sign you in, and show your name and picture in your own account menu. Specifically:

• we do not sell Google user data and we do not share it with anyone;
• we do not use it for advertising, and we do not use it to develop, improve or train AI or machine-learning models;
• we keep it only for as long as Google stays connected to your account. Disconnecting Google in your account settings, or deleting your account, removes it;
• you can also withdraw BDOWorkshop's access at any time from your Google account permissions.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Things you save on the website

The tools let you save your work: gear and crystal presets, gear-progression and crafting plans, enhancement projects and records, the contents of your storage and inventory read from your scans, custom prices and settings such as your preferred game server and language. When you are signed in this is stored against your account. When you are not signed in it stays in your browser's local storage only, and is imported into your account if you later sign in.

Screenshots you upload

Several tools read a screenshot of the game you upload (your inventory, storage, gear, DPS widget or account profile page) to recognize the items and figures on it. Uploaded screenshots and the recognition result are kept in a review log so that misreads can be checked and the recognition improved. They are never shown to other visitors and are used for nothing else.

Supporter data

If you connect a Twitch account we check whether it currently subscribes to our Twitch channel, and store the date until which supporter benefits apply to your account. We never receive your payment details: Twitch only tells us that a subscription exists, never how it was paid for.

If you buy a supporter upgrade, the purchase is made from Paddle.com, our reseller and Merchant of Record (see the Terms of Service). The checkout is Paddle's: the name, e-mail address, billing country and payment details you enter there go to Paddle directly, never to us, and Paddle uses them to take the payment, work out the tax and issue your invoice under its own privacy policy. To match the order to your account we give Paddle your BDOWorkshop account ID and the tier you chose, and Paddle tells us when the payment is complete together with its order reference, the amount paid and the tier. We record those against your account so that supporter status and titles can be applied, and so that a purchase can be found again if you ask about it or request a refund. Paddle's seller dashboard also lets us see the customer details Paddle holds for an order, such as the e-mail address and country; we look at them only to handle support and refund requests.

Technical data

Like every website, our servers log the IP address, browser and requested page of each visit. These logs are used to keep the site secure, to rate-limit abuse and to troubleshoot errors, and are rotated after a short period.

Usage statistics (Google Analytics)

If you accept analytics cookies in the cookie notice, we use Google Analytics to see which pages and tools are used, how visitors arrive, and on what kind of device and browser, so that we know what to improve. Google Analytics runs only after your consent: until then no analytics code is loaded and no analytics cookie is set. It is configured with IP anonymization, so your IP address is truncated before it is stored. The statistics we look at are aggregated and do not identify you, and we never link them to your account. Google processes this data as our service provider under its own privacy policy, which may involve servers outside the European Union under the safeguards described there. You can decline analytics in the cookie notice, change your choice later (see "Cookies"), or block Google Analytics on every website with Google's opt-out browser add-on.

How we collect it

Most data comes directly from you, when you:

• sign in with Discord, Google, Steam or Twitch, or connect another provider in your account settings;
• save presets, plans, records or settings, or upload a screenshot for scanning;
• ask us to check your Twitch subscription;
• buy a supporter upgrade through Paddle's checkout;
• browse the website, through the cookies described below.

Some data reaches us indirectly. Twitch tells us which accounts currently subscribe to our channel so that supporter benefits can start and stop on their own; we look this up when you sign in or connect Twitch, when you press "Check subscription", when Twitch notifies us of a new subscription, and once a day for all current subscribers.

How we use your data

• to run your account and keep your saved work available on every device you sign in from;
• to show the tools with your settings, prices and game server;
• to deliver the supporter upgrade you bought, to grant and renew supporter benefits (priority screenshot processing) and titles, and to let subscription-based benefits expire when a subscription ends;
• to keep the website secure and available;
• to improve the screenshot recognition;
• to answer your questions and requests.

Under the GDPR our legal bases are: performance of the service you asked for (your account, your saved work, the supporter upgrade you bought and other supporter benefits), our legal obligation to keep accounting records of purchases, our legitimate interest in keeping the website secure and its tools working well, and your consent for analytics cookies and where you choose to make something public (below).

What other people can see

A few features are public by design: plans and records you share with a link, and the leaderboards you choose to enter. On those pages other visitors see the display name and avatar you set in your profile and any social links you added there. Your username, e-mail address and sign-in providers are never shown to other visitors.

Who we share your data with

We do not sell your personal data, and we do not share it with advertisers. It is handled only by:

• our hosting provider, on servers located in the European Union, who stores it on our behalf;
• the sign-in provider you chose (Discord, Google, Steam or Twitch), which learns that you signed in to BDOWorkshop with it, under that provider's own privacy policy;
• Paddle.com, our reseller and Merchant of Record, only if you buy a supporter upgrade: it receives your BDOWorkshop account ID and the tier you chose from us, collects your billing and payment details itself at checkout under its own privacy policy, and sends us the order reference, the amount paid and the tier (see "Supporter data" above);
• Google, as the provider of Google Analytics, only if you accepted analytics cookies (see "Usage statistics" above);
• public authorities, where the law requires us to.

How long we keep it

• Account data and everything saved on the website is kept for as long as your account exists.
• Disconnecting a sign-in provider deletes the data received from that provider (its account ID and any token).
• Deleting your account, which you can do at any time from your account settings, deletes your account and everything tied to it. Records of supporter purchases are kept for accounting but anonymized: the order reference, amount and tier stay, the link to you is removed. Paddle keeps its own records of the sale as the seller, under its privacy policy. Entries in the screenshot review log are likewise unlinked from you.
• The supporter date is overwritten on each renewal and deleted with the account. The subscriber list we receive from Twitch is used at the moment of the check and not kept afterwards.
• Server logs are rotated after a short period.
• Data kept in your browser's local storage stays there until you clear your browser data.

How we protect it

All traffic to the website is encrypted (HTTPS). Data is stored in access-restricted databases on our own servers, and only we have access to it. We hold no passwords and no payment details.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy of it;
• have inaccurate data corrected and incomplete data completed;
• have your data erased (you can do this yourself by deleting your account);
• restrict or object to our processing of your data;
• receive the data you gave us in a portable format;
• withdraw consent at any time where consent is the basis;
• lodge a complaint with the data protection authority of the country you live in.

To exercise any of these rights, e-mail bairog.business@gmail.com. We answer within one month and free of charge.

Cookies

Cookies are small text files placed on your device by the websites you visit. On your first visit the cookie notice lets you accept all cookies, only the essential ones, or choose per category. BDOWorkshop uses two kinds:

Essential cookies (always on)

• a session cookie and a security token that keep you signed in and protect forms;
• your light/dark appearance, sidebar, game-server and language choices;
• the cookie that remembers your answer to the cookie notice.

Analytics cookies (only with your consent)

Google Analytics sets its own cookies to tell returning visitors apart and to keep the page views of one visit together. They are set only after you accept analytics in the cookie notice; their names and lifetimes are listed under "Customize" in that notice.

We show no advertising and use no advertising cookies. You can change your cookie choice at any time:

Change my cookie settings

You can also set your browser to refuse or delete cookies; without the session cookie you cannot stay signed in.

Children

The website is not directed at children under 13, and we do not knowingly collect personal data from them.

Other websites

The website links to other sites, such as the sign-in providers, Paddle's checkout and our Twitch channel. This policy covers BDOWorkshop only; those sites have their own privacy policies.

Changes to this policy

We update this page when our data handling changes and put the date of the latest change at the top.

Contact

Questions about this policy, about the data we hold on you, or a request under your data protection rights: bairog.business@gmail.com.