Privacy Policy

Last updated: October 4, 2026

1. What we collect

  • Your account: your email address and a username, plus either a password (stored as a one-way hash, never as plain text) or, if you sign in with Google, your Google account ID and email.
  • Your subscription: your plan, its status and renewal dates, and the customer and subscription IDs Stripe gives us. Card details go to Stripe; we never see or store them.
  • Sign-in sessions: a session token, a device ID used for the one-PC limit, the IP address the app connected from, and when it was last active.
  • What you do in the app: your raid groups, their names and the server and base location you enter, members and roles, invites, which codes were tried and by whom, and start positions. If your group uses the base-resident watch, the player names and Steam IDs your group adds.
  • Found codes: when a code opens a lock, we also keep that 4-digit code, its place in our code list and the day, with nothing that says whose it was: no account, group, server or base. We use the tally to check that our code list is in a good order.
  • The waitlist: your email and where you signed up.
  • This website: anonymous page-view statistics from our website host, Vercel.
  • Support: the emails you send us.

2. How we use it

To run CodeRaider: signing you in, enforcing the one-PC limit, keeping your group's code list in sync, handling your subscription, and answering support emails. To keep the service secure and stop abuse. To tell waitlist members when CodeRaider opens.

We don't sell your information or use it for advertising.

3. Who we share it with

Only the services we need to run CodeRaider, and only what each one needs. Everything is sent over encrypted (HTTPS) connections.

  • Stripe processes payments and sends receipts.
  • Google handles Google sign-in and our support email.
  • Vercel hosts this website.
  • Railway hosts our server and database.
  • GitHub serves app downloads and updates.
  • BattleMetrics: if you use the base-resident watch, the app loads BattleMetrics pages directly from your PC, so BattleMetrics sees your IP address as it would for any visit.

Members of your raid groups see your username, role, raiding status and the codes you tried. We'll also disclose information if the law requires it.

4. How we protect it

  • Every connection to our website and server uses HTTPS.
  • Passwords are stored as one-way hashes, and card numbers never reach us.
  • Sessions are tied to one device, and you can sign other devices out from your account page.
  • Only CodeRaider's operator can access the database.
  • No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

5. Keeping and deleting your data

We keep your account data while you have an account. Email support@coderaider.net to delete your account or your waitlist signup, and we'll delete it, except for payment records we have to keep for tax and accounting. Stripe keeps its own payment records under its privacy policy. The found-code tally has nothing that identifies you, so it stays when an account is deleted.

6. Children

CodeRaider isn't meant for children under 13, and we don't knowingly collect their information.

7. Changes to this policy

When we change this policy, we'll post the new version here with a new date.

8. Contact

Questions about your data: support@coderaider.net