Privacy Policy
Last updated: 7 October 2026
L2Tracker is a farm tracker for Lineage II: the website at l2tracker.cc and its optional desktop companion for Windows. It is operated by Grzegorz Popiel ("we"). This page says what L2Tracker stores about you, why, and how to remove it.
What we store
Your account.
- If you sign in with Discord or Google: your email address, display name and avatar address as that provider gives them to us, and the provider's ID for your account. We ask Discord for your identity and email only, and Google for your basic profile and email only.
- If you sign up with an email address and a password: that email address and a one-way hash of the password. The password itself is never stored.
- Your plan, Basic or Pro, and for Pro the date it runs until, if it has one.
What you log.
- Your characters: name, class, level, progress and target level.
- Your farm sessions: the spot, the date, XP, Adena, minutes played, Magic Lamp figures and any note you add.
- Your spot list and your settings.
Sign-in and companion records.
- Each sign-in: the method used, the IP address, the browser's user-agent string and the time.
- Each time the desktop companion starts while signed in: its version, the IP address and the time.
Your IP address is also used, in memory only, to limit how often the sign-in and sign-up forms can be tried.
What we do not collect
- No analytics, no advertising and no tracking cookies.
- We do not sell your data or share it for marketing.
- Screenshots stay on your device. When you import a Play Report screenshot on the website, it is read in your browser and is not uploaded.
- The desktop companion reads the Play Report from your screen, on your PC, and sends us only the session it read: its character, spot and figures. It sends no image of your screen.
What is kept in your browser
L2Tracker sets no cookies of its own. It keeps a few entries in your browser's local storage: your sign-in token, which is valid for up to 14 days, the character you last selected, how you last signed in (Discord, Google or email) and, for Discord and Google, the email address or username of that account, and a few display preferences. Signing out removes the token only: the last sign-in stays, so the sign-in page can offer it again, until you remove it with the × beside it, delete your account, or clear this site's data in your browser. On a shared computer, remove it before you leave.
The desktop companion keeps the same sign-in token on your PC, encrypted for your Windows user account, until you sign out of it.
Why we use it
- To run the service you asked for: signing you in, storing your sessions, working out your rates from them, and giving your account what its plan includes.
- To keep the service secure: the sign-in and companion records are there to spot and stop abuse of an account or of the service.
Who else handles your data
L2Tracker runs on services provided by other companies. They handle your data only to provide them.
- Oracle Cloud hosts the application server, in Frankfurt, Germany.
- Aiven hosts the database, in Frankfurt, Germany.
- Cloudflare sits between you and the site, so every request, with your IP address, passes through its network. It may set a security cookie of its own.
- Discord and Google, if you sign in with them. Your avatar is loaded from their servers.
- GitHub serves the desktop companion's downloads and its automatic updates.
- jsDelivr serves the text-recognition engine that the screenshot import downloads when you use it. Your screenshot is not sent there.
Some of these companies are based outside the European Union and may process data there under their own safeguards.
How long we keep it
Everything above is kept for as long as your account exists, the sign-in and companion records included. Deleting your account removes all of it, at once and for good.
Your choices and rights
- You can see, edit and delete your characters, sessions and spots in the app at any time.
- Settings → Delete Account deletes your account and everything stored with it.
- Where data protection law such as the GDPR applies to you, you also have the right to a copy of your data, to have it corrected, to object to its use, and to complain to your data protection authority.
Contact
For a question about this policy or a request about your data, open an issue on GitHub. Issues are public, so do not put personal data in one: say what you need, and we will arrange a private way to continue.
Changes
When this policy changes, the date at the top changes with it. See also the Terms of Service.