Privacy Policy for Tapped Rune Recorder

This Privacy Policy explains what data the extension handles, what is stored locally, what is sent to TappedRune, and what rights you have under applicable data protection law, including the EU General Data Protection Regulation (GDPR).

Controller

Controller: dacx_dev

What the extension does

Tapped Rune Recorder lets you:

• start and stop a recording of the current Rift Atlas browser tab;
• save the recording as a local WebM file through Chrome's download feature;
• store an optional TappedRune.com API key in Chrome extension local storage;
• validate that API key with TappedRune.com;
• submit a confirmed match log to TappedRune.com after a match, if you choose to do so.

The extension is designed for use on https://play.riftatlas.com/. It does not monitor unrelated websites.

Data processed locally in your browser

When you use the extension, the following data may be processed locally in Chrome:

• video and audio from the browser tab you choose to record;
• recording status, elapsed recording time, and download filename;
• page information needed to show the recorder on Rift Atlas;
• detected game information from the Rift Atlas page, such as room code, player legend, opponent legend, and visible score information;
• your optional TappedRune API key;
• API key validation metadata, such as validity status, last four characters of the key, and validation time.

Recordings are kept in browser memory while recording is active and are saved to your device only when you choose Stop Recording & Save. The extension does not upload recordings to TappedRune or to any third party.

Your optional API key is stored in Chrome extension local storage on your device until you remove it in the extension, clear extension data, or uninstall the extension.

Data sent to TappedRune

The extension sends data to TappedRune only for the user-facing features described below.

API key validation

If you save an API key, the extension sends it to:

POST https://tappedrune.com/api/api-key/validate/

The API key is sent as a bearer token over HTTPS so TappedRune can confirm whether the key is valid.

Match log submission

If you choose to log a match, the extension sends the following match log fields to:

POST https://tappedrune.com/api/match-logs/

Submitted fields may include:

• match date/time;
• result;
• match type;
• player legend;
• opponent legend;
• source value of extension.

The extension does not submit the recorded video file as part of match logging.

Purposes and legal bases

We process data for the following purposes:

• to provide the tab recording feature requested by you;
• to save recordings locally on your device when you request a download;
• to store and validate your optional API key;
• to submit match logs to TappedRune when you choose to do so;
• to maintain security, prevent abuse, and operate the TappedRune service.

Where GDPR applies, the legal bases may include:

• your consent, where you choose to start a recording, save an API key, validate an API key, or submit a match log;
• performance of a contract or pre-contractual steps, where processing is necessary to provide the extension and TappedRune account features you request;
• legitimate interests, where necessary for service security, abuse prevention, debugging, and reliable operation, provided those interests are not overridden by your rights and interests;
• compliance with legal obligations, where applicable.

You can withdraw consent-based processing by stopping use of the relevant feature, removing your API key, uninstalling the extension, or contacting us.

Retention

Recordings are not retained by us through the extension. They are saved only to your device if you choose to download them.

API keys stored by the extension remain in Chrome extension local storage until you remove them, clear extension data, or uninstall the extension.

Match logs submitted to TappedRune are retained as part of your TappedRune account or match history until they are deleted according to TappedRune account controls or until you request deletion, unless we must retain certain information for legal, security, or abuse-prevention reasons.

Server logs related to API requests may be retained for security, debugging, and abuse-prevention purposes for 90 days, unless a longer period is required to investigate abuse, enforce terms, or comply with law.

Sharing and transfers

We do not sell your personal data.

We do not use your data for personalized, retargeted, or interest-based advertising.

We do not transfer extension user data except as necessary to provide the extension and TappedRune features, comply with law, maintain security, or operate the service.

Data sent by the extension is transmitted over HTTPS. If service providers process data for TappedRune, they may do so only for hosting, infrastructure, security, analytics, support, or similar operational purposes and only under appropriate data protection terms.

If personal data is transferred outside the European Economic Area, we will use an appropriate transfer mechanism where required, such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard.

Chrome Web Store Limited Use disclosure

Tapped Rune Recorder uses Chrome extension permissions and user data only to provide or improve its single purpose: recording Rift Atlas match tabs and optionally submitting confirmed match logs to TappedRune.

The extension's use and transfer of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

We do not use or transfer user data for personalized advertising. We do not allow humans to read user data except where necessary with your consent, for security purposes, to comply with law, or for aggregated and anonymized internal operations.

Permissions used by the extension

The extension requests the following Chrome permissions:

• tabCapture: to capture audio and video from the current Rift Atlas tab after you start recording;
• downloads: to save the finished WebM recording to your device;
• offscreen: to run recording and WebM processing in an offscreen extension document;
• activeTab: to allow the user-initiated recording flow for the active tab;
• scripting: to show the recorder controls on supported Rift Atlas pages;
• storage: to store the optional API key and validation status locally.

The extension also requests host access for TappedRune API calls and runs its content script on Rift Atlas game pages.

Your rights

If GDPR applies, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data protection authority.

If you are in Austria, the supervisory authority is:

To exercise your rights, contact us at TappedRune.com.

Children's privacy

Tapped Rune Recorder is not intended for children under the age required to use the relevant TappedRune or Rift Atlas services. We do not knowingly collect personal data from children through the extension.

Changes to this policy

We may update this Privacy Policy when the extension, TappedRune service, legal requirements, or Chrome Web Store requirements change. The updated policy will be posted with a new "Last updated" date.