Privacy Policy

This policy explains what Exiled Bench collects and why. The short version: we collect the minimum needed to run your account and licence, and nothing about your gameplay.

What we collect

• Account details — the email address you register with, a securely hashed password, and whether you’ve confirmed the email. Used to sign you in and show your keys and subscription status.
• Licence & PC fingerprint — when you activate the app, a one-way hash of your Windows installation’s ID (or, if that can’t be read, of hardware serials) is stored to bind a key to one PC, with the time it was activated. The hash can’t be turned back into those IDs and does not identify you personally.
• Subscription records — from Buy Me a Coffee, the email you paid with, the amount, and whether the subscription is running; from Boosty, when you link a subscription, your Boosty name and email, your subscription level and your next payment date, read from our own list of subscribers. Card and payment details stay with those platforms.
• Discord link — only if you connect Discord on your dashboard: your Discord user ID and display name, to give you the Supporter role on our server while your licence is active and to show which account is linked. Discord confirms them once when you connect; we keep no Discord login tokens. Disconnecting deletes both.

What we do not collect

• We never ask for or store your Path of Exile or platform login.
• We do not track your characters, items, or play sessions.
• The app sends no gameplay data on its own; automation happens locally on your PC. The one exception is a bug report you choose to send from the app: it carries what we need to reproduce the problem, such as the copied item text, a screenshot of the app’s window and recent logs.

Cookies

Two keep you signed in, both removed when you sign out and otherwise kept for 30 days: eb_session (your signed sign-in, unreadable by scripts) and eb_signed_in (lets the header say “Dashboard” instead of “Sign in”). While you connect Discord, a third, eb_discord_connect, protects that step and expires within 10 minutes. No analytics, advertising or tracking cookies, which is why there is no cookie banner.

Who else handles your data

• Payments — Buy Me a Coffee and Boosty. You pay on their sites, under their privacy policies, and we receive only what’s described above.
• Email — Resend sends our emails (your key, confirmation and password links).
• Hosting — this website runs on Vercel and the licence server on Railway; downloads and our encrypted backups are stored on Cloudflare R2. When the sign-up form shows a human check, it is Cloudflare Turnstile.
• Bug reports — a report you send from the app passes through a Cloudflare relay into our Discord server.

Data retention & your rights

We keep account and licence records for as long as your account exists so your keys keep working. You can request deletion of your account and associated data by contacting support@exiledbench.com. Deleting your account deactivates your keys.

Contact

Questions about this policy? Email support@exiledbench.com.