Politique de confidentialité

Fenrir — Privacy Policy

Last updated: [DATE] · Data controller: [DATA CONTROLLER] · Contact: [E-MAIL]

Fenrir is a desktop program that automates your game account on your own computer. While it runs, it sees and processes the screen on your computer. While it runs, the bot sends no game-related data to the internet (exceptions: a daily license check, section 2; phone notifications if you turn them on, section 3a; the urgent fix check, section 3b). This document explains when and which data leaves your computer.

1. Data that stays on your computer (never sent to us)

Settings, event logs, statistics, error screenshots, screenshots collected for training, account profiles (player name, power, city coordinates read from the screen). They stay on your computer and are gone when you uninstall the program or delete its folder.

2. License

To check that your license is valid, at activation and then once a day (also while the bot runs) the following is sent to our server over an encrypted (HTTPS) connection: your license key, a device ID (a one-way hash made from the Windows machine ID and the system disk's serial number; those numbers themselves are not sent) and the program version. The server stores only a one-way hash of the key, never the key itself; the device ID, last check time, program version and device changes are stored with the license record (to bind the license to one computer and to enforce the limit of 2 device changes per month). No game, screen, account or coordinate data is sent. The server does not log IP addresses for the program's requests; IP addresses appear only in the security logs of administrative login attempts to the server and are kept for at most 5 weeks. Payments are processed by the payment provider; your card details never reach us. The e-mail address you give for license delivery is stored with the license record. If you bought the license with a discount code, the code and the discount rate are also stored with the license record (for the contribution discount see section 4).

3. Support tickets (only if you start one)

When you press "Open a support ticket" we receive: your description, program version, your settings (without the license key), the last 200 log events, recent error summaries and the latest screenshot with chat and governor details blurred. The ticket goes to a private support channel on Discord; if you linked your Discord account, your Discord user ID is attached. Retention: 12 months after the ticket is closed.

3a. Phone notifications (only if you turn them on)

If you enter a channel under Settings → Notifications → "Phone notifications", a short text is sent for the events you choose (e.g. the bot got stuck, the game updated). Apart from this, only the daily license check (section 2) and the urgent fix check (section 3b) go to the internet while the bot runs. - Sent: the short event text and the emulator name; the player name only if "Player name in messages" is on. No screenshots, coordinates or account details are sent. - Where: directly to the Discord channel (webhook) or Telegram bot you entered; those services' own privacy terms apply. If you turn on "Direct message on Discord", the text goes with your license to the Fenrir server and is forwarded to your linked Discord account; the server does not store the message. - Secrets (webhook address, Telegram token) stay only on your computer, in a separate file; they are not sent to us and are not included in settings export or support information.

3b. Update checks

While the bot is stopped, Fenrir downloads the signed update list and packages from the Fenrir server. While the bot runs, Fenrir only looks at the same update list every 30 minutes; if it contains an update marked as an "urgent fix", the package is downloaded, the bot pauses briefly at a safe moment, Fenrir installs the update and reopens, and the bot continues where it left off. When the update list is downloaded, the server only sees standard connection data (IP address, program version). Only valid license holders can download update packages: when a package is downloaded, your license key and the hash of your device ID (section 2) are sent; the server uses them only to check that the license is valid and bound to this computer and keeps no download log (the anti-abuse counter has no IP address and lasts at most an hour). No account or game data is sent. The installation ID used for staged rollout is evaluated on your computer and is not sent to the server. If you turn off automatic updates under Settings → Update, these checks are not made.

3c. Website

Our website uses no ads or visitor analytics, and the server keeps no access logs. The site language you choose and links to orders you placed in this browser are stored only in your browser. A cookie is used only if you sign in: a single session cookie (needed to sign in, no tracking, kept for 30 days or until you sign out). - Site account (optional): If you create an account, we store your e-mail address, when the account was created and last used, and the licenses you add to it. There is no password: to sign in, a 6-digit code valid for 10 minutes is sent to your e-mail. Codes and sessions are stored only as one-way hashes. We use your e-mail only for sign-in codes and essential notices about your license; we send no marketing e-mails. Account → "Delete account" immediately deletes your account, e-mail address and license links (the license itself is not deleted; it leaves the nightly backups within 14 days at most). - Downloads: The installer is given only to accounts with an active license; your session and license are checked on every download. - Connecting the app to your account (no key needed): If you choose "Approve on the site" in Fenrir, the app sends the server a hash of your device ID and the app version, and an approval page opens in your browser. The page shows the computer's short ID and version. We store: hashes of the short code and of the app's secret number, the device ID hash, the version, the approving account and the license you chose; the request is deleted within one day. If you approve, the app receives a key for that computer only; the server keeps only its hash, together with your license and device ID hash, for as long as your license exists. - License lookup without an account: If you enter your license key, it is sent to the server only for that lookup and is not stored; you see your plan, expiry date and whether a computer is linked (the device ID is not shown). - Buying (bank transfer or Wise): If you place an order, we store the plan, amount, payment method, page language, order code and the e-mail address if you choose to enter one; for an extension, only a one-way hash of your license key, never the key itself. The secret number in your order page's address is stored only as a hash. Once your payment is confirmed, your license key is kept with the order for 30 days so it can appear on your order page, then deleted. The site never asks for or stores card, bank or identity details. When you pay from your bank or with Wise, the sender's name and account appear in our bank statement so we can match the payment to your order; we use this only to verify payments, for refunds and for legal accounting and tax duties, and keep it for the legally required period. - To prevent abuse, attempt and code-sending counts are kept for at most an hour, without IP addresses.

4. Anonymous data sharing (optional, OFF by default)

If you turn on Settings → "Share anonymous data" and accept the consent dialog (the date of consent is stored), you help Fenrir recognize game screens better for everyone. - Contribution discount: If you bought your license with a discount code marked "data sharing required" (contribution discount), you agreed when using the code to keep sharing on; in Fenrir sharing is turned on and "This license was bought with the contribution discount" is shown. Sharing is still not locked: you can turn it off at any time. If you do, the discount ends and your remaining license time is shortened by the discount rate (e.g. with a 30% discount, 30% of the remaining time is removed); for this the program sends the server your license key, the hash of your device ID and the version (the data in section 2), and the change is written to the license record. If sharing is turned off outside the program (in the settings file), Fenrir asks you; if you do not decide within 3 days, the discount ends the same way. Your right to "Delete my data" always applies and does not affect the discount. - Sent: samples of the game part of the screen (1280×720), the positions of buttons and icons the bot found on them, civilization, game language, resolution, game and program version. - Cleaned on your computer before sending: the chat area, the governor details at the top left and all text other than the buttons the bot recognizes (including player and alliance names) are blurred. - Never sent: game account details, passwords, player ID, device serial number, other files on your computer. - Identity: samples are linked to a randomly generated installation ID that you can reset. Your license is used only to authenticate the upload and is not stored with the samples (with the contribution discount, too, samples are not linked to your license). - When: only while the bot is stopped, in small batches, at most 200 samples per day. - Use and transfer: samples are used to improve and test Fenrir's screen recognition. During this work they are temporarily copied to a rented computing server abroad and deleted there when the work ends. - Retention: until you ask for deletion, at most 24 months. - Deletion: the "Delete my data" button deletes all samples you sent from the server immediately and irreversibly and renews your installation ID. You can turn sharing off at any time. Individual samples cannot be removed from a screen recognition update that was already released; deleted samples are not used in later work.

5. Who we share data with

Your data is not sold and not used for advertising. Service providers: server hosting (Türkiye), Discord (support channels, notifications if you enabled them), Telegram (notifications if you enabled them), an e-mail delivery service (sign-in codes, if you have a site account), the payment provider, our bank and Wise (only if you pay that way; you send the payment from your own account), a rented computing server provider (only while screen recognition is being improved).

6. Your rights (KVKK art. 11, GDPR art. 15–22)

You have the right to know whether your data is processed, to request information, rectification, erasure, to object and to complain (in Türkiye to the Personal Data Protection Authority, in the EU to your local data protection authority). Use "Delete my data" for shared samples and [E-MAIL] for any other request.

7. Changes

If this policy changes, the text in the program and on the website is updated; for changes that affect anonymous data sharing, your consent is asked again.