RocoKingdomTools Unofficial fan site

Support RocoKingdomTools

RocoKingdomTools is a one-person fan project. Every Jini page, map point and guide is researched, written and kept up to date by hand.

However you chip in (a monthly Patreon membership, a one-off PayPal tip, or just telling a friend), thank you. It all keeps RocoKingdomTools running for everyone.

Support on Patreon: every month Support via PayPal: one-time tip

Then link your Patreon account on your account page: your name card gets the golden backgrounds.

Any amount helps, and none is expected. Thank you.
EN

Privacy policy

Who runs this site

RocoKingdomTools is a free fan site for Roco Kingdom: World. It is run by Irissia, who decides what is kept and why (the data controller under the GDPR).

For any question about your data, or to use your rights, write to support@holst.network. You get an answer within one month.

Without an account

Reading the site needs no account and asks you for nothing. Your browser keeps a few things on your own device so the site remembers them, and they never leave it:

  • your light or dark theme and the map style you picked;
  • the Jinies you ticked in your collection;
  • the teams and skill sets you built in the tools, and the list you browsed last;
  • the private tickets of the messages you sent the team, so you can read their answers.

You can erase them at any time from your browser’s settings (site data for rocokingdomtools.dev).

With an account

You sign in with Discord. We keep three things Discord tells us: your Discord account number, your email address and whether it is verified, to recognise you when you come back. We never show your email to anyone. Discord also sends your Discord name and avatar; we do not keep them: a new account is called something like Trainer-1A2B until you choose your own name and the Jini that stands for you.

Your account then keeps what you do with it:

  • the name, portrait, name card and title you choose;
  • your notes, replies and screenshots on Jini pages and on the map, the notes you liked and the ones you reported;
  • your collection, when you sync it, and whether your profile shows it;
  • which answers and likes on your notes you have already seen;
  • your messages to the team and their answers;
  • your sign-in sessions, each with the browser it came from, so you stay signed in;
  • your Patreon link, if you make one (below).

Your profile page shows your name, portrait, name card, notes and, only if you switch it on, your collection. Anyone with its link can open it.

Notes and moderation

Notes and screenshots are public: anyone can read them under the Jini or the map point they belong to, with your name. Any signed-in player can report a note; after three reports it is hidden until a moderator looks at it. Moderators can hide or delete a note, and each of their actions is written in a staff-only journal.

Messages to the team

The button in the corner of each page sends us an error report or an idea. We keep your words, the page you were on and, if you choose to attach it, the state of the tool you were using. Signed in, the message is tied to your account; signed out, it is not, and a private ticket on your device lets you read our answer.

To stop floods of messages we keep a scrambled form of your IP address (a salted hash, which cannot be turned back into the address) for 48 hours, then we drop it.

Patreon Supporters

If you support the site on Patreon, you can link your Patreon account from your account page. Patreon then tells us your Patreon account number, whether you are an active member of our campaign, the tiers you hold and the amount of your pledge. We keep these, with a token (stored encrypted) that lets us check your membership again each night. We never ask Patreon for your email or your payment details. When someone becomes a Supporter, the site owner gets a private note naming them as Patreon shows them; that name is not kept. You can unlink at any time from the same page.

Cookies

The site sets no tracking, measuring or advertising cookie, and shows no ads. The account service (api.rocokingdomtools.dev) sets only what signing in needs:

  • session: keeps you signed in, for 30 days, unreadable by any script;
  • two short cookies during a Discord or Patreon sign-in, for 10 minutes: one protects the round trip against forgery, the other brings you back in your language;
  • rocokingdomtools_adfree: set only for a Supporter, for 30 days, so the site never shows them ads.

Our Discord server

Our bot greets each new member with a card showing their Discord name and avatar, posts departures in a staff-only channel, counts how many messages each member sends (the count only, never the words) to hand out activity roles, and watches a trap channel that stops hacked accounts spamming the server. Everything else on the server is Discord’s, under Discord’s privacy policy.

Why we keep it

  • to give you the account, notes, profile and sync you ask for (the service you sign up to);
  • to keep the site safe and civil: sign-in protection, flood limits, reports and moderation (our legitimate interest).

We never sell your data, and we never use it for anything else.

Who else handles it

  • Cloudflare, Inc. hosts the site, the account service, its database and the uploaded screenshots (privacy policy).
  • Discord Inc. runs the sign-in and our server (privacy policy).
  • Patreon, Inc. runs the memberships, if you link your account (privacy policy).

All three are in the United States. Your data goes there only under the safeguards the GDPR provides: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

  • your account and everything in it: until you delete the account;
  • a sign-in session: 30 days, or until you sign out;
  • a note: until you or a moderator delete it, and always with your account;
  • the scrambled IP address of a message to the team: 48 hours;
  • a Patreon link: until you unlink it or delete your account; one we cannot check again for 45 days stops counting;
  • the moderation journal: kept, but no longer tied to an account once it is deleted.

Your rights

You can see, correct, download and erase your data, object to its use or ask us to limit it. Two buttons on your account page do the most common ones at once: Download my data gives you everything your account holds in one file, and Delete my account erases the account, its notes, screenshots, saves and messages for good. Your name and portrait can be changed there too. For anything else, write to support@holst.network.

If you think we have not respected your rights, you can complain to the French data protection authority, the CNIL.

Changes to this page

When this page changes, the date at the top changes with it.