Privacy notice

Updated 1 October 2026

Clint Salandanan, trading as Albion Atlas Trade, is the controller for Atlas account, application, marketplace and support data. Contact details appear below. Email us or use account support for privacy questions.

What we use and why

• Accounts and requested features: email, account ID, authentication records, specialization levels and cloud watchlists provide your account and the features you request. The basis is performing our agreement with you, or taking steps you request before an agreement.
• Marketplace: listings, in-game name, Discord contact information and online visibility that you choose to publish enable player contact. These fields are public to marketplace visitors; your account email is not a public profile field. This processing supplies the listing service you request.
• Support: your message, replies, timestamps and request status help us resolve your request and perform our agreement. Privacy and consumer requests also involve legal obligations.
• Safety and operation: connection data, authentication logs, private blocks, reports, listing evidence and moderation decisions protect accounts and the service. Our legitimate interests are preventing abuse, investigating incidents and operating a reliable service. Reports are available to their submitter and authorized moderators; reporter identities are not disclosed to reported players.
• Billing: Stripe customer and subscription references, status and invoice information verify software access and handle billing support under our agreement and applicable record-keeping obligations. Card entry takes place on Stripe-hosted pages.

Information comes from you, your use of the service, player reports and our payment and service providers. Without required account or billing information, we cannot supply the corresponding feature. Basic local market tools do not require an account.

Local files and browser storage

Crafting plans, trade records, workspace settings and backups remain on your computer unless you export or share them. Desktop account sessions use Windows encryption. The website uses browser storage for sign-in and temporary email-link verification state. Its build contains no advertising or marketing analytics scripts. Stripe-hosted checkout has its own privacy and storage information.

Market data and optional capture

Market requests reach Atlas's shared cache and the Albion Online Data Project (AODP). Item icons load from Albion's render service. If you enable the optional collector, captured market observations are uploaded to AODP and can enter its public dataset. Turning collection off stops future uploads; it does not recall observations already published. External services receive the connection information needed to respond.

Recipients and international transfers

Supabase supplies accounts and application hosting, Vercel hosts the website and downloads, and Resend delivers account emails. The operator and authorized moderators access information needed for their work. Stripe and Onelink handle transactions, fraud checks and tax, and act independently for their own payment-service purposes. Their notices apply to that processing. Discord, AODP and Albion's render service are separate services when you use their features.

Processing can take place outside the UK, including the United States and other countries used by these providers and their subprocessors. Provider agreements include transfer safeguards where required: standard contractual clauses with UK provisions, or an applicable adequacy mechanism. See the Supabase, Vercel, Resend and Stripe data-processing terms, and Onelink's privacy notice. Contact us for relevant safeguard information. We do not promise UK-only storage.

How long information is kept

Account profiles and cloud selections are kept while the account is used, until you remove them or complete account deletion. Listings can be removed by their owner. Support and moderation information is retained while needed to resolve the issue, handle appeals, prevent repeated abuse or establish and defend legal claims. Billing and security records may need separate retention for accounting, fraud prevention or legal obligations.

Deletion is reviewed by the operator; there is no automatic deletion timer for support or moderation evidence. We assess whether records remain necessary using the unresolved issue, applicable record-keeping duties, dispute periods and privacy rights. During a deletion review we remove or anonymize unnecessary records and explain any justified retention. Provider logs and backup cycles have their own retention controls; local files and copies other players saved cannot be erased remotely.

Your rights and choices

You can change marketplace contact and visibility settings, remove your listings, sign out, stop collection and export local records. Depending on the processing and applicable law, you may request access, correction, erasure, restriction or portability of personal data.

You may object to processing based on legitimate interests. Contact us to explain your circumstances; we will review the request and any grounds for continued processing. Where processing relies on consent, you can withdraw it without affecting prior lawful processing. Atlas does not use solely automated decisions that have legal or similarly significant effects on you; payment providers may apply their own fraud checks.

Send a “Privacy or data request” through your account or email the operator. We may check ownership proportionately and explain applicable exceptions. You may complain to the Information Commissioner's Office or your local supervisory authority. Requesting account deletion does not immediately cancel billing or erase data: we confirm the scope, complete the billing review and confirm completion separately.