Privacy Policy

Who we are

D2RHub (d2rhub.com) is a fan-made trading marketplace and wiki for Diablo II: Resurrected, run by Emil Johansson, Sweden, who is the data controller for the personal data described here. Questions or requests about your data: [email protected].

What we collect

When you sign in with Discord, Google or GitHub we receive and store your account ID at that provider, your email address, your display name (used to create your D2RHub username) and your profile picture URL. We only request the basic identity scopes: Discord identify and email, Google profile and email, GitHub user:email. We never receive your password and cannot access anything else in those accounts.

When you register with email we store your email address, the nickname you choose, and your password as a one-way bcrypt hash — we never store or see the password itself.

What you add yourself: profile details (bio, BattleTag, Discord tag, timezone), characters, listings, offers, messages, reviews, forum posts and images, likes, followed users, watchlists and saved searches.

Automatically: when you were last active, and trade history created when trades are completed. Like any website, our network provider processes your IP address to deliver pages and block attacks.

How we use it

• To run your account and the marketplace: showing listings, sending offers and messages, ratings.
• To keep the site safe: preventing abuse and scams, enforcing our Terms of Service, banning accounts.
• To understand overall usage through privacy-friendly, aggregated statistics.

The legal bases under the GDPR are performance of our agreement with you (providing the service) and our legitimate interest in keeping the site secure and improving it. We do not sell your data, show ads or use your data for advertising.

What other users can see

Your username, avatar, profile, listings, reviews, trade rating, forum posts and the images you upload to the forum are public. Characters appear on your profile only if you choose to show them. Your BattleTag and Discord tag are shown only if you enable them in your settings. Messages are visible only to the people in the conversation; we may look at them only to investigate reported abuse. Your email address is never shown to other users.

Who we share it with

We use a small number of service providers, only for the purposes above:

• Cloudflare — network, security and delivery of the website.
• Resend — sends account emails (email confirmation, password reset) to your address.
• Umami Analytics, which we run on our own server: cookie-free, aggregated visitor statistics (pages viewed, referring site, country, browser and device type). It does not store your IP address or personal data, track you across sites, or share anything with third parties.
• Discord, Google and GitHub — only when you choose to sign in with them.
• YouTube and Twitch — blog videos are embedded players from these services. YouTube embeds use its privacy-enhanced mode; when you play a video, YouTube or Twitch receives your IP address and may set their own cookies under their privacy policies.

The site and its database run on our own server in Sweden. We disclose data to authorities only when legally required.

Google user data

D2RHub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email and profile picture only to sign you in and show your profile, and never transfer them to others except as described above.

Cookies and browser storage

We do not use advertising or tracking cookies. Your browser's local storage keeps your login session and trade preferences so you stay signed in; signing out removes the session.

How long we keep it

We keep your data for as long as you have an account. When you ask us to delete your account, we delete your personal data within 30 days. Messages you sent may remain visible to the other participants in anonymised form, and backups are overwritten within a further 30 days.

Your rights

You have the right to access, correct, export and delete your personal data, and to object to or restrict its processing. Email [email protected] and we will respond within one month. You can also revoke D2RHub's access from your Discord, Google or GitHub account settings at any time. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

Children

D2RHub is not intended for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell signed-in users on the site about significant changes.