Privacy Policy

Who is responsible for this data

TibiaStash is run by a private individual, Gabriel Fernando Immich, based in Brazil. There is no company, no partner and no team behind the site.

For anything concerning your data (deletion, a request about what exists, or a question about this policy), the address is [email protected], and I am the one who answers.

There are no accounts

TibiaStash has no accounts, logins or passwords. I never ask for your name, e-mail or any identifying detail, and I have no way of knowing who uploaded a screenshot.

What is stored, and for how long

Uploaded screenshots: kept in a private bucket, unreachable by the public, and deleted automatically after 30 days together with the matching analysis. No page on the site displays the original file.

Analysis results (recognised items, quantities and values): kept for the same 30 days, so a shared analysis link keeps working while it is still useful.

Sprite corrections: when you correct an item I store the pair "image crop + chosen name", with no expiry. That record holds no image and nothing that ties back to you, and it is what makes recognition improve with use.

Preferences (your chosen world, for example) and the list of your previous analyses stay in your own browser, in localStorage, and are never sent to the server.

Aggregate statistics

When an analysis finishes, I add what it found to a counter per world and per item: how many stashes that item appeared in, in what quantity, and worth how much. That is what I intend to publish as a picture of what players actually keep.

That counter holds no link to your analysis or to you: there is no identifier, no upload date, and no column pointing back. It is only a total, and that is precisely why it can outlive the 30 days without keeping anything of yours.

Audience measurement

I use Cloudflare Web Analytics, which sets no cookies and builds no visitor identifier. I do not use Google Analytics.

Advertising and affiliate links

The site shows ads and links to partner shops in order to stay online. Ad networks, including Google AdSense, may use cookies to measure and personalise what you see; on a first visit, anyone in the European Union, the United Kingdom or Switzerland is shown a consent notice and may refuse personalisation.

You can manage Google ad preferences at adssettings.google.com. Affiliate links may earn the site a commission when they lead to a purchase, at no extra cost to you, and every such link is labelled as one.

Your rights, and on what basis the data is handled

The basis is simple: you upload a screenshot because you want the analysis, and producing that analysis is the only thing the image is used for. Nothing is sold, shared or cross-referenced with any other source. The one thing that depends on consent is ad personalisation, and it is asked for separately from anyone in the European Union, the United Kingdom or Switzerland.

Since there are no accounts, the way to have an analysis deleted before its 30 days are up is to send its link to [email protected]. I also answer requests about what data exists for a given screenshot.

If you are in the European Union and believe I have handled your data improperly, you have the right to complain to the data protection authority in your country. I would rather you talked to me first, of course, but the right is yours and does not depend on that.