Privacy Policy

Who We Are

STS2 Companion (www.sts2companion.com) is operated by M.O.B.A. Network AB, a company registered in Sweden.

For any questions about this policy or your data, contact us at: info@wearemoba.com

This site is unofficial and not affiliated with Mega Crit Games, the developer of Slay the Spire 2.

What Data We Collect

Email Subscriptions

If you subscribe to our email updates, we collect your email address and which page you subscribed from. We use this to send you updates about new guides, tier list changes, and patch notes.

Lawful basis: Consent. You can unsubscribe at any time using the link in any email, or by contacting us.

Analytics

We use Google Analytics 4 to understand how visitors use the site (pages visited, time on site, device type). Analytics cookies are only set if you accept them via our cookie consent banner.

Lawful basis: Consent. If you reject analytics cookies, no tracking cookies are set and only anonymous, cookieless data is collected by Google Analytics.

Server Logs

Our hosting provider (Vercel) automatically collects IP addresses and request data in server logs for security and debugging purposes. These logs are retained for up to 30 days.

Lawful basis: Legitimate interest (site security and reliability).

User Accounts (Coming Soon)

When we launch user accounts, we will collect your email address, display name, and optionally your Discord username (if you sign in via Discord). We will also store any content you create (votes, saved decks, comments).

Lawful basis: Contract (providing the service you signed up for).

How We Use Your Data

• To send you email updates you subscribed to
• To understand how the site is used and improve it (analytics)
• To maintain site security and prevent abuse
• To provide account features and community tools (when launched)

We do not sell your data. We do not use your data for advertising.

Who Processes Your Data

We use the following third-party services to operate the site:

• Supabase (database) — hosted in EU (Frankfurt, eu-central-1). Stores subscriber emails, game data, and future account data.
• Vercel (hosting) — US-based. Serves the website and processes requests. Covered by EU-US Data Privacy Framework.
• Google Analytics — US-based. Processes analytics data only with your consent. Covered by EU-US Data Privacy Framework.

Data Retention

• Email subscribers: Until you unsubscribe or request deletion
• Analytics data: 14 months (Google Analytics default)
• Server logs: Up to 30 days (Vercel default)
• User accounts: Until you delete your account

Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access — request a copy of all data we hold about you
• Rectification — correct any inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Data portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — withdraw consent at any time (e.g., analytics cookies, email subscription)

To exercise any of these rights, email us at info@wearemoba.com. We will respond within 30 days.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Cookies

For details on which cookies we use and why, see our Cookie Policy.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will note the updated date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

Supervisory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY).