Introduction
This Privacy Policy explains how we collect, use, process, and disclose your information when you use our service.
Information we collect
We collect information in the following ways:
- Information you provide to us directly: Information that you submit through our service, including registration information, profile information, and any other information you choose to provide.
- Usage information: We collect information about your interactions with our service using PostHog analytics, including:
- Pages you visit
- Features you use
- Actions you take
- Time spent on pages
- Technical information about your device and internet connection
How we use your information
We use the collected information for various purposes:
- To provide and maintain our service
- To notify you about changes to our service
- To provide customer support
- To monitor usage of our service
- To detect, prevent, and address technical issues
Data storage
We use a secure database provider. Your data is stored securely and processed in accordance with security standards and practices.
Cloud save (beta)
If you turn on cloud save, we store your scores in your account so your devices can share them: for each chart, your result and where it came from (for example an import from maimai DX NET, LXNS or Diving-Fish, a file, or an entry you typed in), with the account ID that provider gives you, such as your friend code. We also keep a log of each import (its source, time, counts and a hash of the data received) and the rating snapshots your devices save after syncing.
When you import from maimai DX NET, your SEGA ID password is used only to sign in for that import. It is never stored or logged.
Cloud saves are kept until you delete them or your account. Each chart keeps up to 20 earlier results, and each save up to 100 rating snapshots. Deleted records are remembered for 90 days so your other devices remove them too, and a record of each sync request from your devices is kept for 30 days so that a request sent twice is applied once. A save you delete is erased for good 30 days later.
Analytics
We use PostHog, an open-source analytics platform, to understand how our service is used. PostHog collects anonymous usage data that helps us improve our service. You can learn more about PostHog's privacy practices on their website.
AI assistants (MCP server)
When an AI assistant uses our MCP server (mcp.dxrating.net), we record the tool called and its arguments, including search text, the client app (name, version and User-Agent), your IP address and approximate location (country). These records go to our error and monitoring provider, Sentry, and are kept under its retention. We also send anonymous usage analytics to PostHog without the IP address and without person profiles; there, search text is cut to 64 characters, email addresses and long numbers are removed, and scores are never included.
Cookies and tracking
We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Data retention
We will retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
Account deletion
You can permanently delete your account from the account screen in the DXRating app. Deletion removes your profile, comments, tags and tag attachments, aliases, sessions, passkeys, linked sign-in methods, linked LXNS credentials, and your cloud saves with their score history, import logs and rating snapshots. Linked OAuth grants are revoked when supported by the provider. After deletion, you can create a new account using the same email address or sign-in provider.
Account data is removed from our active systems immediately. Residual copies may remain in encrypted backups until those backups are automatically deleted, or when retention is required by law.
Your rights
You have the following data protection rights:
- The right to access, update, or delete your information
- The right to rectification
- The right to object
- The right of restriction
- The right to data portability
- The right to withdraw consent
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.