Privacy Policy
Last updated: August 6, 2026
This page explains what TrackMySprites.com collects, why, and what we do (and don't do) with it. We keep this to the minimum needed to run the Site.
1. What we collect
- Account info: your username, password (stored as a one-way bcrypt hash — we never see or store your actual password), and email address if you choose to provide one (it's optional)
- Collection data: which Sprites and variants you've marked owned or mastered
- Login security logs: IP address, browser user-agent string, and timestamp for each login attempt (successful or failed) — used to detect and block brute-force attacks, and automatically deleted after a set number of days (see Section 4)
- Preferences: your chosen display language, if you set one
2. Cookies
We use cookies to make the Site work — not for advertising or tracking you across other sites:
- A session cookie that keeps you logged in while you browse
- An optional "remember me" cookie, only set if you check that box at login, so you don't have to log in every visit
- A CSRF token that protects forms from being submitted by other websites without your knowledge
No third-party advertising, analytics, or tracking cookies are used.
3. What we don't do
We don't sell your data, share it with advertisers, or hand it to third parties except where the law requires it. There are no ads on this Site and no third-party trackers.
4. How long we keep data
Login security logs are automatically deleted after a set retention period (7 days by default). Your account and collection data are kept as long as your account exists. If you want your account and data deleted, contact us (Section 7) and we'll remove it.
5. Security
Passwords are hashed with bcrypt and never stored in plain text. Login attempts are rate-limited and monitored for brute-force patterns. That said, no website can guarantee perfect security — use a password you don't reuse elsewhere.
6. Children's privacy
This Site is not directed at children under 13, and we don't knowingly collect personal information from anyone under that age. If you believe a child has created an account, contact us and we'll remove it.
7. Your rights / contact
You can ask us what data we hold about you, or ask us to delete your account and associated data, any time: ^^
8. Changes to this policy
If this changes, we'll update this page and the "last updated" date above.