Privacy Policy

Last updated: November 9, 2026

This Privacy Policy explains what information the Token Chance calculator ("the Service") collects, how we use it, and the choices you have. The Service is an independent fan-made tool and is not affiliated with Epic Games, Inc.

1. Information we collect

• Random device identifier. When you first open the calculator, your browser generates a random UUID stored in localStorage. We use this pseudonymous ID to enforce the free daily limit and to attach your 30-day pass to your device. It contains no personal information and is not linked to your identity unless you provide an email at checkout.
• Usage counters. We store how many calculations you have used per day (a number per device per day) on Cloudflare KV. Counters expire automatically within 48 hours.
• Payment information. If you purchase a 30-day pass, our payment processor waffo collects your email address and payment details. Card numbers are handled exclusively by waffo's PCI-DSS-certified infrastructure and are never stored on our servers. We receive and store only: your email (if provided), the order ID, amount, currency, payment status and timestamps.
• Calculator inputs. The chest counts and drop rates you enter are processed entirely in your browser. We do not transmit or store your calculation inputs or results.
• Server logs. Our hosting provider (Cloudflare) may process standard technical logs (IP address, user agent, requested URL) for security and operational purposes.

2. What we do not do

• We do not use advertising trackers, third-party analytics, or advertising cookies.
• We do not sell your personal information.
• We do not require an account or password.

3. Cookies and local storage

We use browser localStorage only to store your random device ID and your daily usage count. These stay on your device and are not cookies. Clearing your browser storage resets your device ID; note that an active 30-day pass is tied to that ID, so clearing storage may detach your pass (contact support if this happens).

4. Third-party processors

• Cloudflare — hosting, content delivery, and KV storage.
• waffo — payment processing and merchant of record. Your payment data is subject to waffo's own privacy policy.

5. Data retention

• Daily usage counters: deleted automatically within 48 hours.
• Order and entitlement records: retained for 90 days after your pass expires, then deleted.
• Support emails: retained as long as needed to resolve your request.

6. Your rights

Depending on your location (including the EEA, UK and California), you may have rights to access, correct, delete, or port your personal data, and to object to or restrict processing. To exercise any of these rights, email support@tokenchance.app. We respond within 30 days.

7. Children

The Service is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children.

8. Changes

We may update this policy from time to time. The "Last updated" date above reflects the current version.

9. Contact

Privacy questions and requests: support@tokenchance.app