Privacy Policy

JososLab is a small, free tool built by a Tibia player, not a company. This page explains exactly what we collect, why, and how to get it removed — in the same plain language we'd want if we were reading someone else's policy.

What we collect

• Hunt data you paste. Your Hunt Analyser and Input Analyser text, along with character info, equipment, preys and charms you enter, are stored locally in your browser (localStorage). If you use JososLab as a guest, we never see this unless you actively join a party hunt (see below).
• Your account, if you create one. Accounts are optional. If you sign in with Discord, Google or an email link, we receive a unique account ID, your display name, your profile picture and (for Google and email) your email address. From then on, the data you save in the Dashboard (characters, hunts, builds, parties, teams and debts) is also stored in our database under your account, so it syncs across your devices. Only you can read it. If your account has an email address, we may send you a few emails about getting started and what's new, and we keep the date you last opened the Dashboard to know when (every email has an unsubscribe link). From Discord we only ask for your basic profile (the "identify" permission): never your servers, messages or friends.
• Party hunt data. When you create or join a live party hunt, your session data briefly syncs through our database (Firebase/Firestore) so teammates can see updates in real time. This is only for hunts you actively participate in.
• Questions you ask Oracle. When you use Oracle, our in-app assistant, the text of your question and the last few messages of that conversation are sent to our server and to the AI provider that powers Oracle, so it can understand what you're asking. We don't store your conversations, and they aren't linked to your characters or hunts. To keep Oracle free, we count how many questions each connection asks (using a one-way hashed version of your IP address, never the IP itself), and those counts are deleted after 24 hours.
• Your email, if you join the waitlist. Just the email address you submit and the date you submitted it. Nothing else. We use it to tell you when JososLab opens and to send occasional product updates — every email has an unsubscribe link.

What we never ask for

We never ask for your Tibia account, password, or any form of game login. There is no "log in with Tibia" anywhere on this site — every input is text you copy and paste yourself.

Third parties

We use Firebase (a Google Cloud product) for sign-in, to store the data of people who create an account, to sync live party hunts and to store waitlist emails, and Resend to send you waitlist and product emails. If you choose Discord or Google to sign in, that service confirms who you are to us under its own privacy policy.

Oracle runs on a third-party AI provider's free service. Under that provider's terms, the questions sent to it may be reviewed and used to improve their products and services. Please don't include personal information (real names, emails, passwords or account details) in your questions — Oracle only needs your in-game question.

To know how many people visit the public pages, we use Cloudflare Web Analytics. It doesn't use cookies, doesn't fingerprint your browser and doesn't follow you across sites: it only counts page loads, with the page, country, browser and referring site, all aggregated. It isn't loaded in the Dashboard or on shared hunts.

We don't use ad networks or tracking cookies, and we don't sell data to anyone — there's no business model here that involves your data.

Cookies & local storage

We use your browser's local storage to remember your characters, hunts, and theme preference (light/dark). This is functional, not tracking — as a guest it never leaves your device except for the party-sync and waitlist cases above. With an account, it's copied to your account as described above. Signing in also keeps a session in your browser so you stay logged in.

Data retention & deletion

Local data stays on your device until you clear it yourself (or your browser does). When you sign out, the account's data is removed from that browser but stays in your account. You can delete your account and everything synced to it at any time from the Dashboard (You → Delete account). If you want your waitlist email or any synced party data removed, email us and we'll delete it.

Changes to this policy

If this changes, we'll update the date at the top of this page. We won't quietly expand what we collect without saying so here first.

Contact

Questions, concerns, deletion requests — email hi@jososlab.app.