Privacy Policy

1. What COMPA Is

COMPA is a browser extension that serves as a strategic companion for the game Conflict of Nations. It provides timer tracking, event classification, calculators, reference guides, and (for subscribers) an AI strategic assistant. COMPA is an independent, community-made tool and is not affiliated with Bytro Labs GmbH, DOG Productions Ltd. (Dorado Games), Stillfront Group AB, or any of their subsidiaries.

2. What Data COMPA Collects from Your Game

When you use COMPA on a Conflict of Nations page, the extension reads the following visible information from the game UI:

• Game event text displayed in the event log panel
• Timer countdown text displayed in the game UI
• Resource values displayed in the game's top bar
• Your nation name (from visible flag images)
• Game ID (from the page URL)

COMPA also stores data you manually enter:

• Manual timers you create
• Calculator inputs
• Settings and preferences
• AI chat history (PRO subscribers only)
• Notes (PRO subscribers only)

Game data never leaves your device. All of the above is stored in your local Chrome extension storage (chrome.storage.local) and is not transmitted to any server, including ours.

3. What Data COMPA Does NOT Collect

• COMPA does not access your Conflict of Nations account credentials
• COMPA does not read your password or game payment information
• COMPA does not intercept network traffic between your browser and game servers
• COMPA does not access the game's internal JavaScript API
• COMPA does not track your browsing activity on any website other than conflictnations.com
• COMPA does not use cookies on game pages or game tracking technologies
• COMPA does not collect analytics, telemetry, crash reports, or usage statistics

4. License Activation & Billing Data PRO Subscribers Only

If you choose to subscribe to a paid tier, the following data is transmitted off-device:

Subscription purchase (handled by Paddle — our Merchant of Record)

• You complete checkout via Paddle's hosted checkout overlay at compaconww.com
• Your name, email, billing address, and payment method are collected and stored by Paddle, not by COMPA
• Paddle acts as the legal seller of record, handles payment processing, charges applicable taxes (VAT/GST/sales tax) in your jurisdiction, and issues your invoice
• Paddle processes the payment under its Privacy Policy
• We never see or store your credit card number

License activation in the extension

• You enter the email address used at checkout
• The extension sends that email to https://compaconww.com/api/validateLicense (our Firebase Functions backend)
• The backend returns a license token, status, and expiration date
• The email, token, status, and expiration are cached in chrome.storage.local on your device

Ongoing license validation

• Every 24 hours (when the extension is open), it re-validates the cached license against compaconww.com/api/validateLicense
• The request body contains only your subscription email; no game data is included
• If validation fails for more than 72 hours (e.g., subscription canceled, network issues), the extension automatically degrades back to the free tier and clears the cached license

Billing management

• Clicking "Manage Billing" opens Paddle's hosted Customer Portal in a new tab, where you can update payment methods, change plan, view invoices, or cancel
• All actions there are performed against Paddle; COMPA does not see or modify your billing details

Source License purchases additionally collect your GitHub username as a Paddle checkout custom field, used by our backend to grant you read access to the private EuGenio1FreeLa/compa GitHub repository after purchase confirmation.

5. AI Chat Data PRO Subscribers Only

PRO subscribers can choose between two AI tiers when configuring the AI strategic assistant:

5a. BYOK Tier (Bring Your Own Key)

• You provide your own Anthropic API key, stored only in chrome.storage.local on your device
• Your typed chat messages are sent directly from the extension to https://api.anthropic.com using your key
• Messages are processed by Anthropic under their Privacy Policy
• COMPA never sees your API key, never sees the contents of your messages, and never proxies the request

5b. Managed Tier

• You do not provide an API key; COMPA hosts one
• Your typed chat messages are sent to https://compaconww.com/api/aiChat (our Firebase Functions backend), along with your license token for authentication
• Our backend validates the token, then relays the message to the Anthropic API on your behalf
• The backend processes the request in memory and does not log or persist the contents of your messages
• The Anthropic API processes the message under their Privacy Policy

In both tiers:

• Only the text you type is sent. No game data, events, timers, resources, or other extension state is ever included in the request
• Chat history is stored only in your local extension storage
• You can clear chat history at any time via the AI tab

6. Data Sharing

COMPA does not sell, trade, or share any of your data for advertising, marketing, or any third-party purpose. The only data ever leaving your device is the data described in sections 4 and 5, sent only to the named services (Paddle, our Firebase Functions backend, Anthropic, and — for Source License buyers — GitHub) and only for the explicit functions described.

We do not embed third-party analytics SDKs, advertising trackers, or social media pixels.

7. Data Retention

On your device

• Local extension data remains until you uninstall the extension, clear it manually, or delete specific items through the COMPA interface
• Completed timers are automatically cleaned up after 24 hours
• Archived timers are retained for 7 days before automatic deletion

On our backend (Firebase Functions + Firestore)

• License records (email, subscription status, expiration, GitHub username for Source buyers) are retained for the duration of your active license plus the legal records-retention period required by tax law (typically up to 7 years)
• AI chat messages are not persisted by our backend — they exist only in memory during the request relay to Anthropic
• No logs containing message contents are retained

On Paddle

• Billing and payment data is retained per Paddle's own retention policy, separate from COMPA

On GitHub (Source License buyers only)

• Collaborator association with the COMPA repository is retained until you revoke access or we offboard you

You can request deletion of your license record at any time by emailing the address in section 11.

8. Permissions Used

9. Children's Privacy

COMPA does not knowingly collect data from children under 16. The extension is intended for players of Conflict of Nations, which itself requires users to be of appropriate age per its own Terms of Service. PRO subscriptions require a valid payment method and are not available to children under 18.

10. Changes to This Policy

Any changes to this Privacy Policy will be posted at this URL and the "Last updated" date will be revised. Material changes affecting how subscriber data is processed will additionally be announced in the extension on next launch.

11. Contact

For questions about this Privacy Policy, license deletion requests, or any privacy concern, contact: matteus@eugeniodigital.com