Privacy Policy

1. Introduction

Welcome to AskJenkins ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered gaming assistant service at askjenkins.eu (the "Service").

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is AskJenkins, operated from the European Union. For any privacy-related inquiries, please contact us at the email address provided in the Contact section below.

3. Data We Collect

We collect the following types of data:

a) Account Information

• Email address and username (when you register)
• Authentication tokens (Google, Battle.net, or Apple OAuth)
• Hashed password (if using email/password login)

b) Game Character Data

• Character name, realm, class, specialization, and level
• Equipped gear and item level (imported via Blizzard Battle.net API)
• This data is provided by you through Battle.net OAuth authorization

c) Conversation Data

• Messages you send to our AI assistant
• AI responses generated for you
• Files or images you upload for analysis

d) Technical Data

• IP address and approximate location (for security and rate limiting)
• Browser type and device information
• Cookie preferences

4. How We Use Your Data

• Provide the Service: Process your messages through our AI system to generate personalized gaming advice
• Character Analysis: Use your imported character data alongside our AI to provide tailored recommendations for your specific class, gear, and playstyle
• Authentication: Verify your identity and manage your account
• Security: Detect and prevent abuse, fraud, and unauthorized access
• Improvement: Analyze usage patterns to improve our service (with your consent)

5. Legal Basis for Processing (GDPR)

• Contract Performance (Art. 6(1)(b)): Processing necessary to provide the Service you requested
• Legitimate Interest (Art. 6(1)(f)): Security measures and abuse prevention
• Consent (Art. 6(1)(a)): Analytics cookies and marketing communications

6. Data Sharing

We do not sell your personal data. We may share data with:

• Google (Gemini AI): Your messages are processed by Google's Gemini AI to generate responses. Google processes this data according to their AI terms of service.
• Blizzard Entertainment: We use the Battle.net API to import your character data with your authorization. We do not send your data back to Blizzard.
• Infrastructure Providers: Microsoft Azure (hosting), Neon.tech (database) — as data processors under GDPR-compliant agreements.

Your character data is never displayed publicly. Each user can only see their own data within their private session.

7. Data Retention

• Account data: Retained while your account is active
• Conversation history: Retained while your account is active; you may clear it at any time
• Character data from Battle.net: Refreshed or deleted within 30 days per Blizzard API Terms of Use
• Deleted accounts: 7-day grace period to cancel, then permanently purged within 30 days

8. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access: Request a copy of all data we hold about you
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format (JSON)
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for analytics/marketing at any time

You can exercise most of these rights directly through the Privacy Settings panel in the application sidebar (export data, delete account, manage cookie preferences).

9. Cookies

• Essential cookies: Required for authentication and security (always active)
• Analytics cookies: Help us understand usage patterns (opt-in)
• Marketing cookies: Used for relevant communications (opt-in)

You can manage your cookie preferences at any time through the cookie consent banner or Privacy Settings.

10. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted database connections
• JWT authentication with secure token handling
• Rate limiting and abuse detection
• Secrets management via Azure Key Vault
• Passwords hashed with bcrypt

11. Children's Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.