Privacy — what Grepobot stores, and what it never sees

What we never have

Your Grepolis password. There is nowhere to enter it and no mechanism that would use it. Grepobot runs inside the Grepolis page you have already logged into and acts as that tab. It cannot log in on your behalf, which is also why automatic re-login does not exist in it.

Your card or bank details. Payments go through Mollie, who handle them entirely. We receive a payment identifier and whether it succeeded — never the instrument.

What this website collects

Google Analytics 4, and only if you accept it. The tag runs in a denied-by-default consent state, so until you press Accept it writes no cookie and sends no identifier. If you decline, or simply ignore the bar, nothing is stored and nothing is sent.

Your choice itself is kept in your browser's local storage so you are not asked again. That never leaves your machine.

The pages are static and served from our own server. There is no advertising, no tracking pixel, no social widget and no third-party script other than the analytics tag described above.

What the bot stores

An account, identified by your in-game player id and world, created the first time the bot runs. It carries your subscription and trial state.

Your per-town settings for each module. These are stored against the account rather than in the browser, which is what lets them follow you to another computer.

Activity timestamps — when the bot was last running — used to show your own status and to know a session is live.

Contributions to the world map index: which towns exist where, who owns them, and when that last changed. This is public information the game client already shows to everybody on the world; it is pooled so that the Intel layer can tell you who has stopped playing. It contains no private data about you and is not linked to your account in what other players see.

Payments

Handled by Mollie B.V. When you buy a subscription you are sent to Mollie, pay there, and are returned. We store the payment's identifier, its amount, its status, and the subscription time it bought. Mollie's own privacy policy covers what they hold.

We keep payment records as long as tax law requires us to.

Who else sees it

Nobody. Your data is not sold, rented or shared with advertisers, and there is no third party receiving it beyond Mollie for the payment itself and Google for analytics you have consented to.

We will disclose data if a law actually compels us to, and not otherwise.

Your rights, and how to use them

Under the GDPR you can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to info@joostvanberkel.com from the address associated with your account and say which you want.

Deleting the account removes your settings and your subscription state. Payment records are kept where tax law requires it, and the world map index is not deleted because it is not personal data about you — it is the public map.

You can withdraw analytics consent at any time by clearing this site's data in your browser, which puts the bar back.

Contact

Questions about any of this: info@joostvanberkel.com.