Privacy Policy
This Privacy Policy explains how Navy Toolkit (“we”, “us” or “our”) collects, uses and protects information when you visit or use this website (the “Site”). Navy Toolkit is an unofficial fan-made tool and is not affiliated with or endorsed by Game-Labs.
We collect only what we need to operate and improve the Site. We do not use advertising or tracking cookies, and we do not sell your personal information.
Information we collect
Usage information
When you visit the Site, with or without an account, we automatically collect the following for each page you view:
- the page address, including any settings in it (such as the selected recipe or port), and the page title;
- the referring website and any campaign parameters in the link (such as utm_source);
- your approximate location at country level, derived from your IP address by our hosting provider;
- your device type, browser, operating system and screen width;
- how long the page was open and actively used, and any links you follow to other websites.
We do not store your IP address. To count unique visitors without cookies, we combine your IP address and browser details with a random value that changes daily and is deleted after two days. The resulting identifier cannot be reversed to reveal your IP address and cannot be used to recognise you across days or on other websites.
Account information
Creating an account is optional. If you sign in with Discord, Discord provides us with your user ID, username, display name and avatar. We request the “identify” scope only and never receive your email address, servers or messages. We also store when your account was created and when you last signed in, along with any preferences you choose to save, such as your home port, fleet, ship fits, starred items and filters.
While you are signed in, your usage information is associated with a pseudonymous identifier derived from your account (not your Discord ID), so that visits across days and devices are counted once.
Performance data
We use Vercel Speed Insights to measure page load performance (Core Web Vitals), together with the page, device type and browser. It does not use cookies or identify you.
How we use your information
We use the information we collect to:
- provide the Site and the features you request, including keeping you signed in and saving your preferences;
- understand how the Site is used, so we can maintain and improve it;
- monitor performance and diagnose technical problems;
- protect the Site and its users against abuse, fraud and security threats.
Legal bases for processing
If you are in the European Economic Area or the United Kingdom, we process your information on the following legal bases under the GDPR:
- Performance of a contract: to provide your account and the features you request.
- Legitimate interests: to operate, secure and improve the Site using minimal, privacy-preserving usage statistics.
- Legal obligation: where we are required to retain or disclose information by law.
Cookies and local storage
We use only the following strictly necessary cookies and browser storage:
- na_session: keeps you signed in for up to 30 days. Set only when you sign in.
- na_oauth: protects the Discord sign-in process against cross-site request forgery. Expires after 10 minutes.
- Local storage: saves some tool inputs (such as trade planner edits, perk points and filters) in your browser for your next visit. This data remains on your device unless you are signed in.
We do not use analytics, advertising or third-party tracking cookies. You can clear cookies and local storage at any time through your browser settings, although some features may then not work as expected.
How we share your information
We do not sell your personal information or share it for targeted advertising. We share information only:
- with service providers that host the Site and store its data on our behalf, under their data processing terms;
- with Discord, which handles sign-in under its own privacy policy;
- where required by law, or to protect the rights, safety or security of the Site, its users or others;
- in connection with a merger, acquisition or transfer of the Site, in which case your information will remain subject to this Privacy Policy.
Data retention
- Usage information is retained for 400 days and then permanently deleted.
- Account information and saved preferences are retained until you delete your account. On deletion, your profile and saved preferences are removed immediately, and your past usage information is disassociated from you so that only anonymous totals remain.
Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it;
- correct inaccurate information or request its deletion;
- object to or restrict how we process your information;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority.
Signed-in users can review and delete their account and saved data at any time from the Account page. For other requests, contact us using the details below. Usage information collected without an account cannot be linked back to you, so we are unable to identify it in response to a request. We will not discriminate against you for exercising any of these rights, including under the California Consumer Privacy Act (CCPA/CPRA).
International data transfers
Our service providers may process your information in countries other than your own, including the United States. Where required, such transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) and signed session cookies. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children's privacy
The Site is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Continued use of the Site after changes take effect means you accept the updated policy.
Contact us
If you have questions about this Privacy Policy or wish to make a request regarding your personal information, contact Clink123 on Discord.