Privacy Policy

A DarkerDB account is a shared KATFORGE Account. KATFORGE may use Account information across its identity, security, billing, wallet, support, and Realm systems to provide DarkerDB and other KATFORGE Services you use.

Account information may include:

• Email address, username, display name, avatar, locale, and timezone
• Password hash, verification, session, security, role, and permission information
• OAuth-provider identifiers, usernames, emails, avatars, and Discord guild information when authorized
• DarkerDB Realm membership, entitlements, settings, and communication preferences

DarkerDB and KATFORGE are not separate companies sharing a customer list. They are services operated by the same company.

When you use the DarkerDB Services, we may collect:

• API keys, scopes, permitted origins, usage, credits, limits, and request logs
• Saved DarkerDB, dashboard, overlay, tooltip, and GrimVault settings
• Item, market, trade, quest, map, and other requests and interactions
• Connected applications, authorization grants, and revocations
• Support messages, feedback, errors, diagnostics, and crash information
• IP address, browser, device, operating system, language, timestamps, referring pages, and navigation

GrimVault is the DarkerDB companion and overlay application. It may capture part of the Dark and Darker display at your request to identify item tooltips. Screen analysis and optical character recognition are designed to occur locally. Extracted tooltip text, item attributes, analysis requests, settings, and diagnostics may be sent to DarkerDB to provide price, market, quest, upgrade, and related results.

GrimVault is not intended to upload unrelated screen content. Avoid displaying sensitive personal information when using any capture or diagnostic feature.

KATFORGE uses Stripe to process DarkerDB payments. A Stripe customer record may be created when you create a KATFORGE Account, before you purchase a Plan. KATFORGE may provide Stripe with your email, KATFORGE user identifier, Realm, Plan, product, and transaction metadata.

Card details entered through Stripe Elements go directly to Stripe. KATFORGE generally receives Stripe identifiers, billing details you provide, card brand, last four digits, expiration date, billing status, invoices, subscriptions, taxes, refunds, disputes, and fraud or authentication signals. We do not receive or store the complete card number or security code.

We retain checkout acceptance records that may include the Realm, Plan, displayed price, tax, interval, legal-document versions, refund-policy version, time, IP address, user agent, and acceptance source.

Payment methods and invoices are associated with the shared KATFORGE Account and may appear on KATFORGE and DarkerDB billing pages. Stripe may also process data for fraud prevention, security, authentication, and its legal obligations. See Stripe's Privacy Policy.

We use essential technologies including:

• HTTP-only KATFORGE refresh and access-control cookies
• A session hint and local storage used to maintain sign-in state
• Local or session storage for language, pending settings, and interface state
• A darkerdb:analytics local storage entry recording whether you allowed or declined optional analytics, so your choice is honored on later visits

We also set optional, non-essential analytics cookies:

• Google Analytics _ga and _ga_* cookies, used to distinguish visitors and retained for up to 2 years. Where applicable law requires prior consent, these are set only after you allow analytics

DarkerDB uses Google Analytics to measure traffic and improve the Services. Google may receive device, browser, interaction, IP-derived, and similar analytics data. Where applicable law requires prior consent, Analytics remains off until you allow it. Elsewhere, it may operate by default unless you decline. CloudFront supplies a coarse IP-derived country code so DarkerDB can apply the appropriate regional default; your browser receives only the resulting consent requirement. You may allow, decline, or later withdraw optional analytics through the privacy notice or the Manage analytics control in this Policy.

We disable Google advertising storage, advertising personalization, advertising user-data signals, and Google Signals. We also treat an enabled browser Global Privacy Control signal as an analytics decline.

We use information to:

• Provide and secure Accounts, DarkerDB, the API, and GrimVault
• Process plans, payments, renewals, invoices, and entitlements
• Perform item, market, quest, trade, and related analysis
• Apply API scopes, origins, credits, rate limits, and abuse controls
• Synchronize settings and connected applications
• Respond to support and improve reliability and usability
• Send required transactional and selected marketing communications
• Prevent fraud, cheating, misuse, and security incidents
• Comply with law and enforce applicable Terms

We may send transactional messages for Account verification, security, billing, subscriptions, support, outages, legal changes, and other necessary service matters.

Marketing preferences are separate. A DarkerDB member may select KATFORGE updates, DarkerDB updates, both, or neither. Where applicable law permits an opt-out model, enrollment may occur after clear notice and an opportunity to refuse. Where affirmative consent is required, we request it separately.

You may change preferences through your KATFORGE Account or use an unsubscribe link. Marketing opt-out does not stop necessary transactional messages.

We may disclose information to:

• Stripe, banks, card networks, and payment partners
• Hosting, infrastructure, storage, security, email, and support providers
• Google Analytics when optional analytics is enabled
• OAuth providers when you authenticate or link an account
• Professional advisers, authorities, or transaction participants when legally or operationally necessary

We do not sell personal information, share it with third parties for cross-context behavioral advertising, or use it for targeted advertising.

We retain DarkerDB information only as long as reasonably necessary for the purposes above, including security, support, fraud, tax, accounting, dispute, and legal needs. Operational logs and diagnostics are retained for limited periods appropriate to their purpose.

Account deletion removes or anonymizes Account-linked DarkerDB data where appropriate. Payment, invoice, tax, refund, dispute, suppression, security, or anonymized records may remain when needed or required. Stripe and OAuth providers retain information under their own policies.

Depending on where you live, you may have rights to access, correct, delete, restrict, object, withdraw consent, obtain a portable copy, opt out of marketing, or appeal a privacy decision.

Contact privacy@katforge.com. We may verify your identity before completing a request.

KATFORGE is based in the United States. Information may be processed in the United States and other countries. Where required, we use recognized safeguards for international transfers.

We use safeguards designed to protect information, including encryption in transit, access controls, network restrictions, logging, and credential protections. No system is completely secure.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information in violation of this Policy.

We may update this Policy. We will post the updated version and effective date and provide additional notice of material changes where required.

• Support: Join the DarkerDB Discord server
• Email: support@darkerdb.com
• Privacy: privacy@katforge.com