Privacy Policy

SpriteVault ("we", "us", or "our") operates the website at sprites-vault.com (the "Service"). SpriteVault is a fan-made Fortnite sprite collection and trading platform. We are not affiliated with, endorsed by, or sponsored by Epic Games, Inc.

For privacy questions, contact us at hello@spritevault.gg or through our support page.

Account information. If you register, we collect your display name, email address, and a hashed password. You may optionally add a profile picture, banner settings, creator code, and privacy preferences (such as whether your profile is public).

Epic Games account linking.If you choose to link your Epic account, we receive your Epic account ID and Epic display name through Epic's OAuth service. With your permission, we may also store OAuth tokens on our servers to refresh your session and attempt to sync public Fortnite stats or collection data associated with your account. We do not receive your Epic Games password.

Discord account linking.If you link Discord, we receive your Discord user ID and Discord username from Discord's OAuth service.

Gameplay and platform data. We store information you create on SpriteVault, including sprite collection progress (owned/mastered status), trade offers and messages, vouches, wishlists, support tickets, and leaderboard-related statistics derived from your activity.

Usage analytics. We collect basic usage data such as pages visited, referrer, browser language, screen size, and anonymous visitor/session identifiers stored in your browser. If UTM campaign parameters are present in the URL, we may record them.

Local storage.We store items such as your login session token, theme preference, and OAuth state in your browser's local storage to keep you signed in and to complete third-party logins securely.

• Create and manage your SpriteVault account
• Verify your Epic or Discord identity when you choose to link those accounts
• Display your profile, sprite collection, trades, and leaderboard standings
• Sync Fortnite stats or locker data when you request it and when Epic permits our application
• Operate live features such as trade rooms and notifications
• Respond to support requests and protect the Service from abuse
• Measure aggregate traffic and improve the Service

Where applicable law requires a legal basis, we process personal data based on: (a) performance of our contract with you when you use the Service; (b) your consent, such as when linking Epic or Discord; and (c) our legitimate interests in operating, securing, and improving the Service, balanced against your rights.

We do not sell your personal information. We may share information only in these situations:

• Service providers that host our website, database, email, or analytics infrastructure, under confidentiality obligations
• Other players, when you choose to make your profile public or participate in trades, vouches, or leaderboards
• Epic Games and Discord, when you initiate account linking through their OAuth flows (governed by their respective privacy policies)
• Legal requirements, if we believe disclosure is required by law or necessary to protect rights, safety, and security

The Service integrates with third parties that have their own privacy practices, including:

• Epic Games (account linking and Fortnite data)
• Discord (optional account linking)
• Fortnite-API.com (public Fortnite cosmetics, news, map, and stats data)

We are not responsible for the privacy practices of third-party websites or services.

We keep your account information for as long as your account is active or as needed to provide the Service. If you delete your account or ask us to remove your data, we will delete or anonymize personal information within a reasonable period, except where we must retain certain records for legal, security, or backup purposes.

Epic and Discord OAuth tokens stored on our servers are retained only as long as needed to maintain linked account features and are removed when you unlink those accounts or delete your SpriteVault account.

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), hashed passwords, and access controls on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you
• Withdraw consent for optional processing such as Epic or Discord linking
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Lodge a complaint with your local data protection authority

You can update many profile settings in your account settings. To exercise other rights, email hello@spritevault.gg.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it. Use of Epic Games services is also subject to Epic's own age and parental control requirements.

We may process and store information on servers located outside your country. Where required, we rely on appropriate safeguards for cross-border transfers of personal data.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Service after changes become effective means you accept the updated policy.

SpriteVault
Email: hello@spritevault.gg
Website: https://sprites-vault.com