Privacy notice
Last updated 14 October 2026 (added profile picture, administrator access and support log)
This site is a free fan-made calculator for Star Wars Galaxies crafting. It is run by the operator of this site (the “data controller”). You can reach us at the contact address shown on this site.
The short version: you can use the calculator without an account, and then nothing about you is stored on our server. If you sign in with Discord, we store your Discord ID, display name and avatar ID, plus the calculator data you enter. That's all. There are no ads, no analytics and no tracking.
What we hold and why
| Data | Why | Legal basis (UK/EU GDPR) | Kept for |
|---|---|---|---|
| Discord user ID | To recognise you when you sign in again | Contract: providing the account you asked for (Art. 6(1)(b)) | Until you delete your account, or 2 years without signing in |
| Discord display name | To show who is signed in | Contract (Art. 6(1)(b)) | As above |
| Discord avatar ID (a short code identifying your current profile picture; the picture itself isn't stored) | To show your profile picture in the account menu | Contract (Art. 6(1)(b)) | As above; updated each time you sign in |
| Your calculator data: build plans, resource inventory, components in stock, prices and settings | To save your work and sync it across your devices | Contract (Art. 6(1)(b)) | As above |
| Sign-in sessions: a one-way hash of your session token, with creation and expiry times | To keep you signed in securely | Contract (Art. 6(1)(b)) | 30 days, or until you sign out |
| Support log: when an administrator downloads, resets or deletes an account, or signs it out (date, action, the account's Discord ID, a short note) | To show requests were handled properly, e.g. that a deletion was carried out | Legal obligation and legitimate interests (Art. 6(1)(c) and (f)) | 12 months, also after the account is deleted |
| Technical request logs kept by our host: IP address, time and the page requested | Security and keeping the service running | Legitimate interests (Art. 6(1)(f)) | Our host's standard log retention |
We do not receive or store your email address, servers, friends, messages, or your Discord password. Sign-in asks Discord only for the basic identify permission. The token Discord gives us is used once to read your ID and name, then revoked and thrown away.
Cookies and browser storage
- Session cookie (
__Host-sid): keeps you signed in for up to 30 days. It is strictly necessary for the sign-in you asked for, so no consent banner is needed. - Sign-in state cookie: protects the Discord sign-in against forgery. It lasts 10 minutes.
- Local storage: your calculator data is cached in your own browser so the app works quickly and offline. When you sign out, the cached copy is removed from that browser.
We don't use any analytics, advertising or third-party tracking cookies. Fonts are served from this site, not from Google.
Who else processes your data
- Railway Corporation hosts the website and its database, acting as our data processor. If data is transferred outside the UK/EEA, it is protected by Railway's Data Processing Agreement, which includes Standard Contractual Clauses.
- Discord handles the sign-in screen. When you sign in, you deal with Discord directly under Discord's privacy policy. Your profile picture is fetched from Discord by our server and shown from this site, so your browser doesn't contact Discord while you use the calculator.
We never sell or share your data with anyone else.
Who can see your data
Only the operator, through an administrator dashboard that only listed Discord accounts can open. It shows each account's Discord name and ID, sign-up and last-active dates, and how much data is saved. It is used to answer support and privacy requests: for example, to send you a copy of your data, sign out a lost device, or delete an account when asked. Every one of these actions is recorded in the support log described above.
Security
All traffic is encrypted (HTTPS). Session tokens are random 256-bit values, and only a one-way hash of each is stored. Cookies are HttpOnly, Secure and SameSite. Requests that change data from another website are refused. Your data is only ever returned to you.
Your rights
- Access and portability: use Download my data in the account menu. You get everything we hold about you as a JSON file.
- Correction: edit your data in the calculator at any time. Your display name updates each time you sign in.
- Erasure: use Delete my account in the account menu. Your account, sessions and saved data are deleted straight away. Copies in our host's encrypted backups expire within their normal backup cycle.
- Restriction and objection: contact us using the address above.
- Getting help: Contact support in the account menu shows your account reference. Including it helps us find your account quickly.
- Complaints: you can complain to a data-protection authority, such as the ICO in the UK or the authority in your EU country. We'd appreciate the chance to sort things out first.
Inactive accounts are deleted automatically after 2 years without a sign-in.
Children
This service isn't aimed at children. Discord requires users to be at least 13 (older in some countries).
Changes
If we change how we use personal data, we'll update this page and the date at the top.