Privacy Policy

Last updated: March 2025

WaypointDock ("we", "us", or "our") is a Chrome extension designed to assist Diablo II: Resurrected players with trade management on Traderie (traderie.com). This Privacy Policy explains how we collect, use, and protect your information when you use our extension and related services.

1. Information We Collect

Account Information (via Google OAuth)

When you sign in via Google OAuth, we receive your Google account email address, display name, and profile picture.
We do not receive or store your Google password.
This information is used solely for authentication and premium license verification.

Trade Data from Traderie

The extension collects publicly available trade listing data from Traderie (traderie.com), including item names, trade offers, prices, and listing details.
For premium users, collected trade data (currency price data for runes and gems) may be uploaded to our server to provide shared price analytics.

Terror Zone Data

The extension fetches real-time Terror Zone rotation data from the D2Emu API (d2emu.com) to display current and upcoming Terror Zones.

Locally Stored Data

User preferences, settings, saved trade links, and favorites are stored locally in Chrome's built-in storage (chrome.storage.local).
Collected trade history data is stored in IndexedDB within your browser.
Language preference is stored in Chrome storage (not as a cookie).
All locally stored data remains on your device and is not transmitted unless explicitly stated above.

Backend Data (Supabase)

We use Supabase as our backend service for user authentication and premium license management.
Premium users' shared price data is stored on Supabase servers to enable community-wide currency price analytics.
No personal browsing history, passwords, or sensitive data is stored on our servers.

2. How We Use Your Information

To authenticate your identity via Google OAuth and verify premium subscription status.
To display, filter, and manage trade listings from Traderie.
To provide real-time Terror Zone and Uber Diablo tracking information.
To save your preferences, favorites, and settings locally.
To provide desktop notifications for Uber Diablo events and Terror Zone changes.
To analyze and display currency (rune/gem) price trends for premium users.
To improve and maintain the extension.

3. Data Sharing

We do not sell, rent, or trade your personal information to third parties. Specifically:

We do not transfer user data to third parties except for approved use cases.
We do not use or transfer user data for purposes unrelated to the extension's core functionality.
We do not use or transfer user data for creditworthiness determination or lending purposes.

Your data may be shared only in the following limited circumstances:

Service Providers: We use Google (for OAuth authentication) and Supabase (for backend infrastructure). These services operate under their own privacy policies.
D2Emu: The extension fetches publicly available Terror Zone data from d2emu.com. No user data is sent to D2Emu.
Legal Requirements: We may disclose information if required by law or in response to valid legal processes.

4. Permissions and Host Access

The extension requires the following permissions and host access:

traderie.com: To inject trade overlay UI, favorites sidebar, price collection tools, and link-saving functionality.
d2emu.com: To fetch real-time Terror Zone rotation data.
*.supabase.co: For user authentication and premium data synchronization.
storage: To save user settings, trade links, and favorites locally.
tabs: To open Traderie pages via Quick Navigation.
sidePanel: To display the extension's main UI in the browser side panel.
activeTab: To read the current Traderie page URL for link saving.
scripting: To inject UI elements into Traderie pages.
notifications: To send Uber Diablo and Terror Zone alerts.
alarms: To schedule periodic data updates.
identity: For Google OAuth sign-in.

5. Data Storage and Security

Most of your data is stored locally in your browser via Chrome storage and IndexedDB. Server-side data is stored on Supabase, which provides encryption at rest and in transit. We take reasonable measures to protect your data, but no method of electronic storage is 100% secure.

6. Data Retention

Local data persists until you clear your browser data or uninstall the extension.
Server-side account data is retained as long as your account is active.
You may request deletion of your account data at any time by contacting us.

7. Your Rights

You have the right to:

Access, correct, or delete your personal data.
Withdraw consent for data processing at any time by uninstalling the extension or signing out.
Request a copy of the data we hold about you.
Request deletion of all server-side data associated with your account.

8. Children's Privacy

Our extension is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the extension after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]