Privacy policy

Legendry is run by [Operator name] (ABN [ABN]) in Australia. We follow Australia's Privacy Act and the Australian Privacy Principles. For anything about your information, email safety@legendry.gg.

When you sign up: your email address, date of birth and country (the country is suggested from your connection, and you can change it), your username and display name, and a password if you choose to set one (stored scrambled, so nobody can read it).

Your profile: the pictures you upload, your bio, pronouns, title, social links (the usernames you add), layout and the items you've equipped.

Linked games (only if you link them):

• Steam: your Steam ID and what your Steam profile shows publicly (level, games, hours, achievements, what you're playing).
• Roblox: your Roblox ID and username, your badges, friends and followers counts, when your account was made, and whether you're in a game.
• Riot Games: your Riot ID and Riot's player id, and your VALORANT and League of Legends ranks.
• Xbox: your gamertag and Xbox user id, your gamerscore, and your achievements with how rare each is.
• PlayStation: your online ID and account id, your trophy level, and your trophies with how rare each is.
• Genshin Impact, Honkai: Star Rail and Zenless Zone Zero: your UID and in-game nickname, and what your in-game profile shows everyone (level, achievements, and endgame progress like the Spiral Abyss).

We never see your passwords for these: you sign in on their own sites, or (for PlayStation and the HoYoverse games) prove the account is yours by putting a code on your profile there. We don't keep sign-in tokens either (Roblox's is cancelled as soon as your badges are counted). PlayStation trophies are read using Legendry's own PlayStation account, so only what you've made visible to everyone is read. The HoYoverse games' public profiles are read through Enka.Network, a service that shows them; we never ask for your HoYoverse login.

Purchases: what you bought, when and for how much. Card details go straight to Stripe; we never see or store them. If you buy a gift, we keep its code so you can find it again, and whether it's been used (not who used it).

Codes: which codes your account has redeemed and what they gave, so each one is only used once and refunds can be handled.

Streaks: which days you visited Legendry or were seen playing a linked game (just the latest day and your streak, not a history), and your device's time zone, so your day starts at your own midnight.

Crews: which crew you're in and your role there, crews you've asked to join, and how much Legend XP you've added to your crew each week. Crews and their members are public; requests to join are only seen by that crew's leader and officers.

Events: how much Legend XP you gained during each event, where you placed and what you won. Event standings show your display name, username, picture and score.

Notifications: messages for you on Legendry (crew news, event results and notices about your account), and whether you've seen them. They're only shown on the site, never emailed, and deleted after 90 days.

Views: when someone visits a profile, we note it once a day so view counts and Crowns are fair. For signed-in visitors that's their account; for everyone else it's a random code stored in a cookie, not who they are. We also note the visitor's country (from their connection, country only) and which of the profile's links they tap. LEGACY members can see these as totals for their own profile (views per day, link taps, countries), never who visited. Visit details are deleted after a year.

Safety: reports you send (and, if you're signed in, that it was you; we never tell the person you reported), copyright notices (your name and email), and what's been done about an account.

Technical: your internet address, used to slow down spam and bots. Where we keep it, we only keep a scrambled version that can't be turned back into the address.

• To run your account and show your profile.
• To work out your Legend Level and rarity from your linked games.
• To check ages (13 and up, 16 and up in Australia).
• To keep Legendry safe: scanning uploads, handling reports and stopping bots, cheating and abuse.
• To take payments and give you what you bought.
• To email you sign-in codes, a welcome when you join, receipts with the codes for gifts you buy, important messages about your account, and streak reminders only if you switch them on (every one has an unsubscribe link). We don't send marketing emails.

Legendry has no ads. We never sell your information, and we don't use it to build advertising profiles.

Your profile is public: anyone with the link can see your username, display name, picture, bio, pronouns, title, social links, badges, crew, linked game stats and ranks, Legend Level, rarity, view count (you can hide the view count) and how many followers you have and follow. It's also shown in link previews when your link is shared. Profiles are kept out of search engines.

Never public: your email, date of birth, country, password, purchases, reports, and who you follow or who follows you (only you can see those lists).

We only share what each service needs to do its job for us:

• Supabase: our database, log-in and image storage.
• Stripe: payments.
• Cloudflare: the bot check on sign-up, log-in and reports.
• Sightengine: checks uploaded images for unsafe content before they're saved.
• Our website host (Vercel) once Legendry is live.
• Resend: sends our emails (your email address and the email itself).
• Valve (Steam), Microsoft (Xbox), Sony (PlayStation), Roblox and Riot Games: when you link an account, we ask their services for your stats.
• Enka.Network: when you link Genshin Impact, Honkai: Star Rail or Zenless Zone Zero, we ask it for your public in-game profile by your UID.

Some of these services store information outside Australia (for example in the United States or Europe). We choose services that protect it properly. We'll also share information if the law requires it, or to protect someone from serious harm, including reporting child abuse material to the authorities.

Most people on Legendry are teenagers, so we keep things simple: no ads, no direct messages or comments, no age or location on profiles, and profiles stay out of search engines. We don't knowingly let anyone under 13 (or under 16 in Australia) sign up. If you're a parent or guardian and think your child is too young or want their account deleted, email safety@legendry.gg.

We only use what Legendry needs to work. No advertising or tracking cookies.

• Log-in cookies, to keep you signed in.
• A random code for counting views fairly (kept for a year).
• Short-lived cookies (10 minutes) while you link a game account, so nobody else can finish linking for you.
• Your cart and whether case sounds are muted, saved in your browser.

As long as your account exists. When you delete your account in Settings, your profile, uploads, linked games, purchases and everything else on it are deleted straight away (backups are cleared shortly after). Visits you made to other profiles stay only as a count, no longer linked to you. Stripe keeps its own payment records as tax law requires.

• See and change most of your information in Settings and on your profile.
• Unlink a game at any time; its stats leave your profile straight away.
• Delete your account and everything on it in Settings.
• Ask us for a copy of your information, or to correct it, by emailing us.

If you're unhappy with how we've handled your information, tell us first at safety@legendry.gg and we'll reply within 30 days. You can also complain to the Office of the Australian Information Commissioner, or to the privacy regulator where you live.

Everything is sent encrypted, private details can only be read by Legendry's own server, every change is checked on our side (never trusted from your browser), and keys to other services are never sent to browsers. No system is perfect: if something goes wrong that puts you at risk, we'll tell you and the regulator as the law requires.

If we change this policy in a way that matters, we'll update the date at the top and let you know on the site or by email. See also our terms of service.