Privacy Policy

Overwatch Account Share ("we," "our," or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service for sharing Overwatch game account credentials.

By using our Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

We collect information that you provide directly to us and information automatically collected:

Account Information:

• Username and email address for account registration
• Encrypted password for authentication
• Profile information you choose to provide

Overwatch Account Data:

• Battle.net account tags (Battletags)
• Battle.net email addresses associated with game accounts
• Encrypted account passwords
• Account rank and hero preferences
• Account sharing permissions and access logs

Google Account Integration:

• Google account email addresses you link for OTP retrieval
• OAuth refresh tokens for maintaining access
• Limited email access scope for reading Battle.net emails only

Technical Data:

• IP addresses and browser information
• Device identifiers and operating system
• Usage patterns and interaction data
• Login timestamps and session information

IMPORTANT: Our use of Google API Services is strictly limited to extracting One-Time Password (OTP) codes from Battle.net emails.

What We Access:

• We request read-only access to your Gmail messages with the scope limited to searching for Battle.net OTP emails
• We specifically search for emails from "noreply@battle.net" containing verification codes
• We extract only the 6-digit OTP code from these emails

What We DON'T Do:

• We DO NOT store the content of your emails
• We DO NOT read, access, or process any emails other than Battle.net OTP messages
• We DO NOT share your email content with any third parties
• We DO NOT use your email data for advertising, marketing, or any purpose other than OTP extraction
• We DO NOT modify, delete, or send emails from your account

Data Retention:

OTP codes are temporarily held in memory only during the authentication process and are immediately discarded after use. No email content is permanently stored in our systems.

Google API Compliance:

Our use of Google API Services complies with the Google API Services User Data Policy, including the Limited Use requirements. We undergo regular reviews to ensure continued compliance with Google's policies.

We use the collected information for the following purposes:

• To provide and maintain our Service
• To authenticate users and manage accounts
• To enable secure sharing of Overwatch accounts between users
• To extract OTP codes from Battle.net emails for account verification
• To detect and prevent fraudulent or unauthorized activities
• To communicate with you about service updates and security alerts
• To improve and optimize our Service based on usage patterns
• To comply with legal obligations and enforce our Terms of Service

We implement appropriate technical and organizational security measures including:

• Encryption: All sensitive data including passwords are encrypted using industry-standard encryption algorithms
• Secure Transmission: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Access Controls: Strict access controls and authentication mechanisms to prevent unauthorized access
• Regular Security Audits: Periodic security assessments and vulnerability testing
• Secure Infrastructure: Use of Supabase's secure cloud infrastructure with built-in security features

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize sharing account access with other users
• Service Providers: With trusted third-party services (like Supabase) that help us operate our Service under strict confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental regulation
• Protection of Rights: To protect our rights, property, safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained as long as your account is active or as needed to provide services
• Overwatch Account Credentials: Until you explicitly delete them or close your account
• Google OAuth Tokens: Refreshed as needed and revoked upon unlinking the account
• OTP Codes: Temporarily stored in memory only, never persisted to database
• Usage Logs: Retained for 90 days for security and performance monitoring
• Legal Compliance: Some data may be retained longer if required by law

Upon account deletion, we will delete or anonymize your personal information within 30 days.

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a structured format
• Withdraw Consent: Revoke Google account access at any time through your account settings
• Opt-out: Opt-out of non-essential communications

To exercise these rights, please contact us at gameslayer.inc@gmail.com. We will respond to your request within 30 days.

We use cookies and similar tracking technologies to:

• Maintain user sessions and authentication status
• Remember user preferences and settings
• Analyze usage patterns to improve our Service
• Detect and prevent security threats

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our Service.

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at gameslayer.inc@gmail.com.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

By using our Service, you consent to the transfer of your information to these countries. We will take appropriate steps to ensure your information receives an adequate level of protection.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending an email notification to registered users for significant changes

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.