Privacy policy

Effective November 5, 2026. Fleet Command Compendium is made by Hughes Digital LLC ("we", "us"). This policy covers the Windows app and the website, including the web version at /app.

The short version

  • Windows app: your game data stays on your PC. We don't receive it.
  • Web version: we store your email (for sign-in) and the game data your Community Mod sends to your private sync link. Game data is encrypted, only you can see it, and you can download or delete it at any time.
  • We never ask for, receive or store your Scopely password. We don't sell your data, show ads or use tracking cookies.

Windows app

The app runs on your PC. The Community Mod sends your game data to the app on your own computer (address 127.0.0.1), and the app keeps it in your user folder. It doesn't send that data to us or anyone else. To show game names and pictures, the app downloads public game reference data from stfc.space and pictures from assets.stfc.space. Those requests include your IP address, like any web request. The app has no analytics or crash reporting. "Report a problem" only copies text for you to paste wherever you choose. Uninstalling the app and deleting its data folder removes everything.

Web version: what we collect

  • Account: your email address and sign-in records (time, device and browser type, IP address), handled by our sign-in provider, Clerk.
  • Game data: what the Community Mod sends to your sync link: your player ID and level, missions, buildings, research, ships, officers, resources, inventory, reputation and similar account records. We don't store battle logs.
  • Things you create here: progress snapshots for your history charts, and missions you report as "needs another mission first".
  • Sync link: we keep only a scrambled fingerprint (SHA-256) of your sync token, plus its last 4 characters so you can recognise it, and when it was made and last used.
  • Server logs: our host, Vercel, keeps short-lived request logs (IP address, time, page requested) for security and to fix problems.

Why we use it

Only to run the service: sign you in, show your tabs, keep your history, stop abuse (for example, rate limits on the sync link), and fix problems. We rely on your request to use the service (performing our agreement with you) and our legitimate interest in keeping it secure. We don't use your data for advertising, profiling or training AI models.

Where it's kept and who handles it

  • Clerk (sign-in): stores your email and sign-in records.
  • Vercel (hosting): runs the website and its server code.
  • Neon (database, United States): stores your game data, encrypted (AES with an HMAC check) with a key kept separately from the database.

These companies process data for us under their own terms and security practices. Data is stored in the United States. If you're outside the US, your data is transferred there. We don't share your data with anyone else, except if the law requires it.

Cookies

The web version uses only the cookies Clerk needs to keep you signed in. There are no analytics, advertising or tracking cookies. The rest of the website sets no cookies.

How long we keep it

We keep your game data, history and sync link until you delete them or delete your account. Server logs are kept for a short time by our host. If you stop using the web version, your data stays until you delete it. We may delete accounts that have been inactive for a long time after warning you by email.

Your choices and rights

  • Download your data: Account & data → Download my data in the web version gives you everything we store about your game account as a file.
  • Delete your data: Account & data → Delete my data removes your game data, history, reported missions and sync link right away.
  • Delete your sign-in: Account & data → Manage sign-in lets you change your email or delete your account with Clerk.
  • Stop syncing: Sync link → Turn sync off, or remove the lines from the mod's settings file.

Depending on where you live (for example, the EU, the UK or California), you may also have the right to access, correct, delete or move your data, object to its use, and complain to your data protection authority. Contact us and we'll help.

Children

The web version isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, contact us and we'll delete the account.

Security

Data is encrypted in transit (HTTPS) and your game data is encrypted at rest. Each request can only read the signed-in player's own data. Sync links can be replaced or turned off at any time. No system is perfectly secure. If we learn of a breach affecting your data, we'll tell you as the law requires.

Changes

If we change this policy, we'll update the date at the top and, for important changes, tell signed-in users before they take effect.

Contact

Hughes Digital LLC · jhughes2466@gmail.com