Cephalon Sokoban Privacy Policy

This Privacy Policy explains how the developer and operator of Cephalon Sokoban ("Cephalon Sokoban," "we," "us," or "our") collects, uses, discloses, retains, and deletes information when you use the Cephalon Sokoban Overwolf application, its web application, and its inventory-sharing services (collectively, the "Service"). This policy is between you and us, not Overwolf.

1. Information We Process

Warframe inventory data. The Overwolf application receives inventory data made available by Warframe through the Overwolf Game Events Provider. Depending on the categories you choose to share, this may include Warframes, weapons, equipment, modifications, resources, currencies, account progression, loadouts, crafting information, and other inventory fields supplied by the game.

Warframe session information processed locally. The application reads relevant portions of Warframe's EE.log file to detect the logged-in Warframe username and squad member names/platforms. This log is parsed on your device. We do not upload the EE.log file itself.

Overwolf account information. If you use authenticated permanent sharing, the application uses Overwolf authentication and may process your Overwolf username, display name, avatar, machine identifier, and a short-lived authentication token. Our server verifies the token with Overwolf and stores the verified Overwolf username as the owner identifier for a permanent share. We do not receive your Overwolf password.

Share and service information. We process a generated temporary share ID or your selected permanent URL slug, upload timestamps, expiration timestamps, compressed payload size, schema version, and a machine identifier used to limit duplicate or excessive temporary uploads.

Settings stored on your device. Language, theme, notification, reminder, overlay, help-tip, category-selection, item-history, and background preferences are stored locally in your browser or Overwolf storage. A custom background image selected by you remains in local storage and is not intentionally uploaded by the Service.

Infrastructure data. We do not add application code that independently collects your IP address or derives your geographic location. However, Cloudflare and other network infrastructure providers may automatically process IP addresses, user-agent information, request timestamps, and similar security or delivery logs when requests are made to our website, API, or content delivery network.

Advertising data. The Overwolf application uses the Overwolf Ads SDK. Overwolf and its advertising partners may process device, advertising, consent, and usage information under Overwolf's privacy notices. We do not operate a separate third-party advertising iframe or independently receive precise geolocation from the Ads SDK.

Optional uninstall feedback. When you uninstall the Overwolf application, it may open an optional survey in your browser. The survey is anonymous: we collect only the reason you select, the free-text answers you type, the interface language of the survey page, submission timestamps, and a randomly generated identifier created in your browser for that page view, which exists solely to keep a partially completed answer and the final answer from being counted as two responses. It is not linked to your account, your machine identifier, or any inventory data. If you select a reason and then leave without submitting, that reason alone is sent so that we can still see why people uninstall. We do not ask for your name or email address, and answering the survey is entirely optional. Responses are stored on our Cloudflare infrastructure and may be forwarded to a private developer messaging channel for review.

2. How We Use Information

• Display and organize your Warframe inventory on your device.
• Create temporary or permanent inventory shares at your direction.
• Authenticate ownership of permanent shares and prevent unauthorized changes.
• Apply upload limits, protect the Service, troubleshoot failures, and prevent abuse.
• Provide reminders, status indicators, squad widgets, and other features you enable.
• Serve Overwolf advertising in accordance with Overwolf's platform rules.
• Comply with legal obligations and enforce our EULA.

3. Your Sharing Choices and Public Disclosure

Inventory sharing is optional. Before upload, the application lets you select which supported inventory categories to include.

A share is public to everyone who has its URL. Viewing a shared inventory requires no account, password, or authentication of any kind: possession of the URL is the only thing that controls access. Anyone you send a link to can forward it, publish it, or allow it to be indexed or archived by third parties, and a copy that has already been retrieved cannot be recalled.

Permanent share URLs are built from the name you register, which makes them predictable. A third party may reach your permanent share by guessing that name rather than by receiving your link, and the Service will confirm without authentication whether a given name has a published inventory.

Shared inventory objects are encrypted at rest so that a stored file is not readable on its own. That protects the stored object; it is not an access control and it does not limit who may view a share through the application.

Do not share a URL, or include a category, containing information you do not want to be public.

4. Legal Bases

Where applicable law requires a legal basis, we process information as necessary to provide the Service you request and perform our agreement with you; based on your choices when you upload, authenticate, enable notifications, or select settings; for our legitimate interests in securing and operating the Service; and as necessary to comply with law. You may stop optional sharing or delete a permanent share as described below.

5. How We Disclose Information

• Cloudflare: hosts our web application, API, D1 database, R2 object storage, and content delivery services.
• Overwolf: provides the application platform, profile authentication, game events, machine identification, notifications, and advertising services.
• People with your share URL: receive the inventory categories you chose to publish.
• Legal and safety recipients: where reasonably necessary to comply with law, protect users, investigate abuse, or defend rights.

We do not sell your personal information. We do not share your inventory with Digital Extremes except through interactions initiated by Warframe or its existing game interfaces.

6. Retention and Deletion

• Temporary shares: are configured to expire one hour after upload. The associated inventory object and metadata, including the machine identifier used for upload limiting, are deleted by an automated cleanup process after expiration. A short operational delay may occur.
• Permanent shares: remain until you replace or delete them. You can delete a permanent inventory and its slug from the permanent-sharing controls while authenticated with the owning Overwolf account.
• Slug changes: old object references may be retained briefly in a cleanup queue until the superseded object is removed.
• Local data: remains on your device until you reset the relevant setting, clear application/browser storage, or uninstall the application, subject to platform behavior.
• Uninstall survey responses: are retained in aggregate for product-improvement purposes. Because they are anonymous, they cannot be traced back to an individual and therefore cannot be individually deleted on request.
• Provider logs: Cloudflare and Overwolf retain infrastructure and advertising information under their own retention policies.

7. Security

We use reasonable technical and organizational measures designed to protect information, including short-lived Overwolf authentication tokens, authenticated write operations for permanent shares, AES-GCM encryption of shared inventory objects at rest, compressed transport, upload size limits, and limited database metadata. As described in Section 3, that encryption protects the stored object and is not a restriction on who may view a share. No network transmission or storage system is guaranteed to be completely secure.

8. International Processing

The Service and its providers may process information in countries other than your own. Those countries may have different data-protection laws. Where required, applicable providers use legal safeguards for international transfers.

9. Your Rights and Requests

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing is based on consent. To make a privacy or deletion request, email [email protected]. We may need to verify that you control the relevant Overwolf account, share, or identifier before fulfilling a request.

You may also delete a permanent share directly in the application. Temporary shares expire automatically after one hour.

10. Children

The Service is not directed to children below the minimum age required to consent to data processing in their jurisdiction. Do not use the Service if you are not permitted to agree to this policy and the EULA.

11. Third-Party Services and Links

The Service depends on or links to Overwolf, Cloudflare, Warframe/Digital Extremes, and other third-party services. Their own terms and privacy policies govern their processing. We are not responsible for third-party sites or services.

12. Changes to This Policy

We may update this policy to reflect changes to the Service, providers, or law. We will update the effective date and provide additional notice where required.

13. Contact

Privacy and data requests: [email protected]