Privacy Policy

Your privacy matters. Here's how we protect and handle your personal information.

Effective: Jan 12, 2026Version 2.0

TL;DR - Quick Summary

We use Yostar OAuth to sync your game data - we never see your password and don't store your email address. We do keep your Yostar token, encrypted, so re-syncing doesn't need a new email code every time; you can delete it yourself any time from Settings. We collect only what's needed to provide our tools. We never sell your information. You control your profile visibility and leaderboard participation. You can delete your account and all data anytime.

Our Privacy Principles

Minimal Collection

We only collect what we absolutely need to provide our services.

Full Transparency

We're upfront about what data we collect and why we collect it.

Your Control

You decide what's visible and can delete your data at any time.

Yostar Account Integration

How we sync your Arknights game data

Myrtle uses Yostar's official OAuth system to sync your Arknights account data. Here's how it works:

How Authentication Works

When you log in, you enter your email address in our app. Yostar sends a verification code directly to your email. You enter that code to authenticate. We never see or store your Yostar password - authentication is handled entirely by Yostar's servers. Your email address is only used during the authentication process and is not stored in our database.

What We Receive from Yostar

Upon successful authentication, Yostar provides us with a session token that allows us to fetch your public game data: operator roster, levels, promotions, skill masteries, modules, stage progress, base layout, inventory, and account statistics. This is the same data visible in your in-game profile.

We keep that token so re-syncing works without emailing you a new code every time. It is stored encrypted, never leaves our server, and is never shown to you or to anyone else. It stays until you disconnect your game account or delete your Myrtle account.

We are not affiliated with Hypergryph or Yostar. We access your data through the same APIs the official game client uses. You can revoke that access yourself at any time: Settings → Account & data → Disconnect game account deletes the stored token, and your synced data stays on your profile. To remove the data too, Settings → Danger zone → Delete my data deletes your account and everything in it. If you can't sign in anymore, email [email protected] instead.

Information We Collect

Understanding what data flows through our system

Informacje o koncie

Gdy tworzysz konto przez Yostar OAuth, przechowujemy:

UID w grze oraz nazwę użytkownika - twój identyfikator (ID) w grze, oraz nazwę użytkownika
Ustawienia profilu - preferencje Myrtle: motyw kolorystyczny, kolor akcentu, widoczność profilu, udział w rankingu graczy i ustawienia powiadomień.

Note: Nie zapisujemy ani nie przechowujemy adresu e-mail użytkownika. Służy on jedynie w procesie autoryzacji przez Yostar do przesłania jednorazowego kodu weryfikacyjnego. E-mail nie trafia do naszej bazy danych.

Game Data (Synced from Arknights)

When you sync your account, we fetch and store:

Operator roster - all operators you own, including level, promotion, trust, potential, skill levels, masteries, and equipped modules
Stage progress - mainline, sidestory, and activity stage completion status
Roguelike & Reclamation Algorithm progress - Integrated Strategies themes, endings, buffs, and Reclamation Algorithm data
Base layout - Konfiguracja obiektów bazy RIIC oraz dane dotyczące ich wydajności
Medals and achievements - your collection of in-game medals

Saved Configurations

DPS calculator configurations - saved operator setups and comparison configurations

Technical Data

Error logs - diagnostic data to help us fix bugs, stored temporarily

Note: Your IP address is not collected or stored. All API requests are routed through our server, which handles communication with our backend internally. Rate limiting is applied at the server level, not based on individual user IPs.

How We Use Your Information

The purposes behind our data collection

Service Provision

To operate and maintain your account, sync your data across devices, and provide the core functionality of our tools and calculators. This includes displaying your operator roster, calculating account scores, and enabling profile features.

Leaderboards & Community Features

If you opt in to public visibility, your account scores and rankings may appear on our leaderboards. This allows the community to compare account progress across multiple dimensions (operators, stages, roguelike, Reclamation Algorithm, medals, base). You can opt out at any time in your settings.

Improvement & Development

To understand how users interact with features, identify bugs, optimize performance, and develop new functionality based on usage patterns. We use aggregated, anonymized data for these purposes.

Security & Abuse Prevention

To protect against unauthorized access, detect suspicious activity, and maintain the integrity of our platform. Rate limiting is applied at the server level to prevent abuse - your individual IP address is not tracked or stored.

User Settings & Profile Visibility

Control how your information is displayed

Your settings page gives you full control over how your data is shared with others:

Profile Visibility

Choose whether your profile is public (anyone can view), friends-only, or completely private.

Leaderboard Participation

Opt in or out of appearing on public leaderboards. Your scores are still calculated but won't be displayed publicly if you opt out.

What's Publicly Visible (when profile is public)

Your Arknights nickname and UID
Your operator roster and account scores
Your leaderboard rankings (if opted in)
Your profile avatar and selected assistant

What's Always Private

Your authentication tokens and session data
Your settings and preferences
Your saved DPS calculator configurations
Your email and authentication methods

Data Security & Storage

How we protect your information

We implement security measures to protect your personal information:

Encryption

All data transmitted over HTTPS with TLS encryption

JWT Authentication

Secure token-based sessions with automatic expiration

Server-Side Rate Limiting

Rate limits applied at server level without tracking user IPs

Redis Caching

Game data cached with a 1-hour TTL for performance. Your Yostar token is not kept here - it is stored encrypted in the database.

Database

Your data is stored in PostgreSQL with proper constraints and transactions. Game data is fetched fresh from Yostar's servers when you sync - we store a copy so you can access your profile and leaderboard features without re-authenticating.

While we strive to protect your information, no method of transmission over the internet is 100% secure. Our code is open source on GitHub, so you can review our security practices.

Your Rights & Choices

Control over your personal data

You have the following rights regarding your personal information:

Access & Export

Request a copy of all data we hold about you in a portable format. You can view most of your data directly on your profile page, including your synced game data, scores, and settings.

Correction & Re-sync

Update your preferences through your account settings. If your game data is out of date, you can re-sync at any time to fetch the latest information from Yostar's servers.

Visibility Control

Choose who can see your profile and roster (public, friends-only, or private). Control whether you appear on public leaderboards. All visibility settings can be changed at any time in your settings page.

Account Deletion

Delete your account and all its data yourself from Settings → Danger zone → Delete my data. It removes your profile, synced game data, scores, gacha history, plans, grids, the tier lists you made, your settings, and the saved Yostar login, right away and for good. Official tier lists and translations you worked on stay up without your name. If you can't sign in, email [email protected] and we'll do it for you.

Third-Party Services

We interact with the following third-party services:

Yostar / Hypergryph: We use Yostar's OAuth system to authenticate you and fetch your game data. We are not affiliated with Yostar or Hypergryph - Myrtle is an independent fan project.
Arknights game servers: We fetch game data from official servers (EN, JP, KR, CN, TW, Bilibili) to provide up-to-date operator information, assets, and your synced account data.
Hosting infrastructure: Our servers and databases are hosted on secure cloud infrastructure.

We do not sell, trade, or rent your personal information to third parties. We do not run ads or use your data for marketing.

Ochrona prywatności małoletnich

Serwis nie jest przeznaczony dla osób, które nie ukończyły 13 roku życia. Nie pozyskujemy świadomie informacji osobowych od osób poniżej tego wieku. W przypadku uzyskania informacji o przekazaniu nam danych osobowych przez dziecko, prosimy o niezwłoczny kontakt w celu usunięcia tych danych.

Zmiany w polityce prywatności

Niniejsza Polityka prywatności może być okresowo aktualizowana w celu odzwierciedlenia zmian w naszych praktykach lub wymogach prawnych. O wszelkich istotnych zmianach poinformujemy użytkowników poprzez opublikowanie nowej treści na tej stronie oraz zaktualizowanie nagłówka „Data wejścia w życie” u góry strony.

Zalecamy okresowe przeglądanie niniejszej Polityki prywatności. Kontynuowanie korzystania z Usługi po zamieszczeniu aktualizacji jest równoznaczne z akceptacją nowej treści Polityki.

Contact Us

Questions about your privacy?

Get in Touch

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Privacy & GDPR requests

[email protected]

For access, rectification, erasure, portability, or objection requests under the GDPR (or comparable data-protection laws).

General contact

[email protected]

Source code

github.com/Eltik/myrtle

In-app

Manage your privacy in settings

Your Privacy is Our Priority

We're committed to transparency and giving you control over your data. If you have any questions or concerns, we're here to help.

Manage your privacy settings