Privacy Policy

This site (Task Bar Hero Database, at taskbarhero.vip) is an unofficial, fan-maintained database and wiki for the game Task Bar Hero. It is not affiliated with, endorsed by, or sponsored by the game’s developers.

You can browse most of the wiki without an account. Optional user accounts, an operator admin console, and related features (such as profile settings, file uploads, and optional paid capabilities when enabled) may process personal data as described below.

Who is responsible

The site is operated by the Task Bar Hero Database maintainers. Privacy questions: contact@taskbarhero.vip (also listed on our Contact page). Security reports: see security.txt.

Information we collect

1. Information you provide

If you create or use an account, or contact us, we may process:

• Account details — email address, display name, password (stored only as a secure hash; we never store your password in plain text).
• Profile and settings — optional profile fields you choose to save, locale/theme preferences, and similar settings.
• Uploaded files — images or other files you upload when that feature is available (for example avatars or content images). Files may be stored with our object-storage provider (e.g. Cloudflare R2).
• Support and contact messages — content you send by email or through in-site channels (for example support tickets), if enabled.
• Payment-related data (only if you use paid features when they are enabled) — we use third-party payment processors (for example Stripe or other providers configured by the operators). We do not store full card numbers on our servers; the processor handles card data under their own privacy terms. We may store order identifiers, product, amount, currency, and payment status needed for fulfillment and accounting.

Browsing the public wiki without signing in does not require you to provide a name or email.

2. Information collected automatically

• Server and edge logs — IP address, requested URL, user agent, response status, and similar technical data via our hosting/CDN (Cloudflare). Used for security, abuse prevention, debugging, and aggregate traffic understanding. Retention is limited to what is needed for those purposes (typically on the order of days to a few weeks for detailed logs, subject to the provider’s defaults).
• Session and preference cookies — authentication/session cookies when you sign in; locale (en / zh) and theme preference cookies for the site to function. See Cookies below.
• Analytics (only if enabled by operators) — privacy-oriented or industry tools such as Plausible or Google Analytics. Configuration is controlled in the admin settings. You may use browser controls, Do-Not-Track, or content blockers where available.
• Advertising (only if enabled) — clearly labeled ad slots may later be filled by networks such as Google AdSense, which may set their own cookies. Control personalization via Google Ads Settings or your browser’s ad/privacy controls. Until ads are enabled, we do not set advertising cookies for that purpose.

3. Information from third-party sign-in (if enabled)

If operators enable social login (for example Google or GitHub), the provider shares basic profile data they authorize (typically email and name/avatar) so we can create or link your account. You can revoke access in the provider’s security settings.

How we use the data

• Provide and secure the wiki, accounts, sessions, and admin tools.
• Remember preferences (language, theme) and keep you signed in when you choose.
• Process uploads you request and display them where intended.
• Send transactional email when email delivery is configured (for example verification or password reset). If email is not configured, those features stay disabled.
• Fulfill optional paid features when enabled, and prevent fraud/abuse.
• Understand aggregate usage to improve content and reliability.
• Comply with law and respond to valid legal requests.

We do not sell your personal information. We do not rent your email list for third-party marketing.

Legal bases (where applicable)

Depending on your region, we rely on: contract (providing the account and site features you request), legitimate interests (security, abuse prevention, improving a free fan wiki), and consent where required (for example certain analytics or marketing cookies). You may withdraw consent where processing is consent-based without affecting prior lawful processing.

Data sharing

We share data only as needed with:

• Infrastructure providers — e.g. Cloudflare (hosting, DNS, CDN, D1 database, R2 storage) under their terms and our configuration.
• Email and payment providers — only when those features are configured and you use them.
• Analytics or ad networks — only if operators enable them.
• Law enforcement or rights holders — when legally required, or as needed to protect the site and users against abuse.

Processors act on our instructions for operating the service; they are not free to use your data for their own unrelated marketing.

Cookies and similar technologies

You can clear cookies in your browser. Disabling strictly necessary cookies may prevent sign-in from working.

Retention

• Accounts — kept while your account remains open; we may delete or anonymize after prolonged inactivity or upon a valid deletion request, subject to legal retention needs (e.g. payment records).
• Logs — short-term operational retention.
• Uploads — while associated content/account needs them, or until you/we delete them.
• Orders — as required for accounting and dispute handling when payments exist.

Security

We use HTTPS, hashed passwords, access-controlled admin roles, encrypted configuration secrets where configured, and infrastructure security features from our providers. No method of transmission or storage is 100% secure; please use a strong unique password and protect your email inbox.

Children

The site is a general-audience gaming reference. We do not knowingly collect personal data from children under 13 (or the higher age required in your region) for account registration. If you believe a child has created an account or submitted data, contact us so we can delete it.

Your rights

Depending on applicable law (for example GDPR/UK GDPR, CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict certain processing of your personal data, and to object to certain processing. You may also lodge a complaint with a supervisory authority.

To exercise rights related to your account or data we hold, email contact@taskbarhero.vip from the address on the account when possible. We may need to verify your identity before acting.

International transfers

Infrastructure may process data in multiple regions (for example via Cloudflare’s network). Where required, we rely on appropriate safeguards provided by those vendors (such as standard contractual clauses).

Unofficial site disclaimer

Game names, characters, and related assets belong to their respective owners. This privacy policy covers this website’s processing of personal data only, not the game client or any official service.

Changes

We may update this Privacy Policy from time to time. The updated_at date at the top of this page will change. Material changes may also be noted on the site. Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.

Contact

• Privacy & general: contact@taskbarhero.vip — Contact page
• Security vulnerability reports: /.well-known/security.txt