Privacy

Roster files and pasted lists are read in your browser and saved only in your browser's local storage, along with:

• your settings (theme, language, the calculator's options, the detachment you picked for each army)
• the units you saved or picked lately, the last matchup you looked at, and any nicknames you gave your squads
• which tours and notices you've already seen
• the figures you draw in the pixel editor
• the lists you build in the list builder, and the one in progress

The lists and figures themselves are never uploaded: we only count the unit names in them (see Our own counts below).

A list builder share link carries the list itself after the # in the address, a part browsers never send to a server: only whoever opens the link reads it.

Your browser also keeps a copy of the site's own files and of the datasheets it has loaded, so the site opens quickly and works offline. Clearing your browser data removes all of this.

Our small server (a Cloudflare Worker) keeps anonymous daily tallies of how the site is used, to show fan favourites and build our own picture of the game: which units are pitted against which (and whether they shoot, fight or go to the death), which units are picked, the detachments picked, winning lists loaded, results shared and units whose card is opened. When you load a list, it counts the list's faction, what kind of file it was, and the names of the units in it, once per list: never the list itself, its points, or anything you typed. When one of our pages hits a script error, it counts that too, once a visit: the error's message with any numbers, addresses and quoted text taken out, which of our files and lines it came from, and which part of the site it was on, so we can fix what breaks on your device. Only names and totals are kept, with no address, cookie or ID, so none of it can be tied to you. We keep these tallies indefinitely, and publish each week's top units and matchups as the meta report. When you share a matchup, its settings (units, wargear, modifiers and the result) are saved on the same server under a short code, so the link stays short and goes on working; nothing about you is saved with them, and anyone with the link can open that matchup. A shared link passes through the server on its way here, so chat apps can show its result as a picture; nothing about the visit is kept.

Rating units isn't open now. While it was, your browser made a random voting number, kept in its local storage, so each device had one vote per unit; we keep the scores given with a scrambled (keyed-hash) form of that number, never the number itself, and nothing else about who gave them. To have yours removed, contact us. Before each vote, Cloudflare Turnstile checked that a person was voting (Cloudflare saw your IP address and some browser signals for that check). To stop floods, the server counts each network's requests for an hour under a scrambled form of its address and the hour, and forgets them daily.

We use Plausible Analytics, which does not use cookies and does not collect personal data. It counts page views and a few anonymous events to show which features people use: which button or screen was used, with at most an army or unit name, a side, a file type or a choice (for example "roster imported" with the faction and file type), and which links to other sites are followed (the link's address). The search on our pages sends only whether it found a unit, an army or nothing, never what you typed. No event carries your lists, your ratings or anything that identifies you.

The form on our Contact us page (and the feedback form in the calculator) sends what you type, your email only if you give it, the page you were on and, if it was one of ours, the one you came from, your matchup's link, the data version, your browser, screen size, theme and language to a Google Form that only we read (see Google's privacy policy). Nothing is sent unless you press Send.

Datasheets load in your browser from this site's own saved copy of the community BSData project's public files. Like any website, our host (Cloudflare) sees your IP address when your browser requests them. If that copy can't be reached, your browser tries BSData's own addresses on GitHub (raw.githubusercontent.com) and the jsDelivr mirror, which see your IP address the same way. Nothing about you or your lists is sent.

Some pages link to other sites: creators' videos on YouTube, Stat Check's published win rates, tournament results on MiniHeadQuarters, Listhammer and ChampionsHub, the BSData project on GitHub and the list tools our exports open. Nothing is sent to them until you follow a link, and then you're on their site, under their own privacy policy.