Privacy Policy

Last updated: September 2026

GenshinSync ("we", "our", or "the extension") is a Chrome extension and web application that syncs your Genshin Impact build data from HoYoLAB to a personal dashboard. This policy explains what data we collect, how we use it, and your rights.

1. What data we collect

• HoYoLAB session cookies — read locally from your browser to authenticate API requests to HoYoLAB on your behalf. These are never stored on our servers; they are used only to fetch your Genshin Impact data in real time.
• Google account information — your Google account ID, email address, and display name, obtained via Google OAuth, to link your Google identity to your Genshin UID and allow website login without re-entering credentials.
• Genshin Impact game data — character builds, abyss clears, player notes, and related data retrieved from HoYoLAB's public API using your authenticated session. This data is stored on our servers to power your personal dashboard.
• A unique user identifier (UID) — your Genshin Impact UID, used as the primary key for your account.

2. How we use your data

• To display your personal Genshin Impact build dashboard at genshinsync.web.app/u/{your-uid}.
• To link your Google account to your Genshin UID so you can log in from any device.
• We do not sell, share, or monetise your data in any way.
• We do not use your data for advertising or analytics platforms.

3. Data access and visibility

Your dashboard is private by default. Only you can view your profile page — access requires authentication with your Google account. No other user can access your data. Future opt-in public ranking features will require explicit consent before any data becomes visible to others.

4. Data storage and security

• Game data is stored in a PostgreSQL database hosted on Railway (US region).
• All communication between the extension, website, and backend uses HTTPS.
• Authentication tokens (JWTs) are stored only in your browser's localStorage and are never logged server-side.
• HoYoLAB cookies are used only in memory during a sync; they are never persisted to our servers.

5. Data retention and deletion

Your data is retained as long as your account exists. To request deletion of all your data, contact us at the email below. We will permanently delete your account and all associated game data within 7 days.

6. Third-party services

• HoYoLAB API (HoYoverse) — game data source. Subject to HoYoverse's own terms.
• Google OAuth 2.0 — for identity verification only. We do not access Google Drive, Gmail, or any Google service beyond your basic profile.
• Railway — backend hosting provider.
• Firebase Hosting (Google) — frontend hosting.

7. Children's privacy

GenshinSync is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy as the extension evolves. The "last updated" date above will reflect any changes. Continued use of the extension after changes constitutes acceptance.