Privacy Policy
Last updated: March 9, 2026
1. General provisions
This Privacy Policy (the "Policy") describes how Gacha Tracker (the "Operator") collects, uses, and protects personal data of users of the website gacha-tracker.com (the "Site").
This Policy is intended to align with generally accepted data protection principles, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where applicable to the user.
By registering on the Site or using its functionality, the User agrees to the terms of this Policy. If you do not agree, please discontinue use of the Site.
2. Personal data we collect
When using the Site, the Operator may collect and process the following personal data:
- Username (login)
- Email address
- Password, stored encrypted (hashed)
- Data provided via Google sign-in (name, email, Google account ID, avatar)
- Gacha pull data imported by the user from Honkai: Star Rail, Genshin Impact, and Zenless Zone Zero
- IP address
- Cookie and analytics data (see Section 5)
- Device and browser information (User-Agent)
3. Purposes of processing
Personal data is processed for the following purposes:
- Registering and identifying users on the Site
- Providing access to Site features (import, analysis, and display of pull statistics)
- Providing user support and feedback channels
- Improving the quality and functionality of the Site
- Collecting aggregated, anonymized visit and behavior statistics
- Ensuring security and preventing fraudulent activity
4. Legal basis for processing
Personal data is processed on the following legal bases:
- Consent of the data subject
- Performance of the contract (Terms of Service) to which the user is a party
- Legitimate interests of the Operator in operating and securing the Site
5. Cookies and analytics
The Site uses cookies and third-party analytics services to collect anonymized statistics:
- Google Analytics — visit and behavior analysis
- Google Tag Manager — analytics tag management
- Yandex.Metrica — visit and behavior analysis
- Firebase Authentication — user authentication
You can disable cookies in your browser settings, though this may affect Site functionality.
6. Data protection
The Operator takes reasonable organizational and technical measures to protect personal data:
- Password encryption (hashing)
- Use of secure HTTPS protocol
- Restricted access to personal data
- Regular software updates
- Use of Firebase Authentication for secure sign-in
7. Data sharing with third parties
The Operator does not sell or share personal data with third parties, except:
- When using the third-party services listed in Section 5 to operate the Site
- When required by applicable law
- With the user's explicit consent
8. Data retention
Personal data is retained for as long as the user maintains an account, and is deleted upon user request or account deletion.
9. User rights
Depending on your jurisdiction, you have the right to:
- Obtain information about your personal data processed by the Operator
- Request correction, restriction, or deletion of your personal data
- Withdraw consent to processing
- Delete your account and all associated data
- Lodge a complaint with your local data protection authority
To exercise these rights, please contact us via the "Support" section on the Site.
10. Children's privacy
The Site is not intended for individuals under 14 years of age. The Operator does not knowingly collect personal data from children under 14. If we become aware that we have collected data from a child under 14, we will promptly delete it.
11. Changes to this Policy
The Operator may update this Policy from time to time. The new version takes effect upon publication on the Site, unless stated otherwise. Continued use of the Site after changes are published constitutes acceptance of the revised Policy.
12. Contact information
For questions related to the processing of personal data, please contact us via the "Support" section on the Site.
Site address: https://gacha-tracker.com