Privacy

Leonardo Agostini runs this instance and decides what happens to the data described below. Write to the address at the bottom of this page for anything on this page.

Your email address, your password as an Argon2id hash, the display name you choose and, if you enter one, your player ID. Everything you record: tournaments with their date, format, store and notes, and the rounds and games inside them. If you sign in with Google, Google tells us your name and your email address, and nothing else. If you connect Patreon, your Patreon account id, whether your membership is active, and a token that lets this site ask Patreon those two things again.

Opponents are recorded as decks, never as people: there is no field for an opponent's name. Notes are free text, so please do not write other players' names in them.

To provide the service you signed up for — that is the whole of it. Sessions, password hashing and a limit on login attempts exist to keep the account yours; that last one briefly handles your IP address, in memory only, and it is never written to the database. A session also notes when it was last used, to the minute, so the site can show how many people are connected at once: only that number leaves the database, never who is behind it. Community figures are computed across all players, but only ever as totals: no name, store, note or date of anyone else leaves that query. The same goes for decks: the complete lists saved with a deck's pilots count, one per player, towards the share of each card in that deck's common list, which is shown only once at least five players have one and never shows a single list or who made it.

Your account and what you record are kept until you delete them, which you can do yourself from Settings at any moment. Sessions expire on a fixed schedule and password reset links last one hour and work once.

Deleting your account removes it and everything in it at once: decks, tournaments, notes, sessions. What is kept is the play itself, with nothing left that points back at you — which deck beat which, who was on the play, who won the die. Those rows lose their tournament, their date and their notes, and become part of the community figures that belong to nobody.

Deleting a single tournament works the same way: the event goes — its name, date, store, placing and notes — and the matchups played in it stay, anonymous, in the community figures. Deleting one round instead removes it outright, so a round recorded by mistake can be taken back before the tournament is deleted.

Nobody it is sold or rented to, because it never is. Patreon receives and returns your identity and membership status if you choose to connect it, and it is a US company. The provider hosting this instance necessarily stores the data on its machines. There is no analytics provider, no advertising network and no third-party script on any page. Other players see nothing of yours unless you turn on your public profile in Settings: then anyone with the link sees your display name, the preset picture and the channels you chose, how many decks, decklists and tournaments you have made, your placements as you recorded them and the medals they earn, and your most liked published decks and tier lists; anyone can also find you in the Players list (which is kept out of search engines) and see the decks and tier lists you choose to publish. The Supporter medal, which says you support Pilot Lab on Patreon, is shown only if you turn it on separately. Turning it off makes all of them private again. Likes you give are only ever shown as totals. If you are a Master Supporter and turn on the credits option in Settings, your display name, and nothing else, is listed on the public credits page; it comes off when you turn the option off or your membership ends. When you register for an event run here, the other players see your display name in its pairings and standings, and once the event is over everyone signed in can see the colours and pilots of your deck; the list you registered is seen only by the organizer, never by the other players. You agree to this when you register. For the tournaments played on Discord (webcam and simulator) you link your Discord account: we keep its id and name, only the organizer sees the name, and a bot gives you a role on the Discord server while you are registered. You can unlink it in Settings at any time. If you delete your account, your results stay in that event's standings under "Former player", without your name or your list.

You can ask for a copy of your data, for it to be corrected, or for it to be deleted, and you can object to how it is used. Two of those you can do yourself from Settings, without asking anybody: download everything as a JSON file, and delete your account. For anything else, write to the address below and you will get an answer within a month.

For anything that changes or reveals an account, you will be asked to confirm you are its owner. That is not a formality: deleting one person's data because someone else asked would itself be a breach.

No cookie on this site tracks you. The only two exist to keep you signed in and to make the Patreon sign-in safe, which is why there is no cookie banner to click away. Nothing here profiles you and no decision about you is taken automatically.

If you think your data has been mishandled you can complain to your national data protection authority — in Italy, the Garante per la protezione dei dati personali.