Privacy Policy

Wisplight is built to keep as little of your data as possible, for as short a time as possible. Here's exactly what is stored, why, who else sees it, and how long we keep it.

The short version

Your checklists and progress never leave your browser. We have no public accounts and ask for nothing to use the site. The only data we hold about you for more than a day is a message you chose to send us, or the Zenless Zone Zero roster you chose to look up. Advertising is the one thing on the site that sets tracking cookies, and in regions where consent is required you get asked first.

Who we are

Wisplight is an independent fan project, not affiliated with any game publisher. It is operated by LaunchNest, which is the data controller for the personal data described on this page and is accountable for it. For any privacy question or request — including the rights listed below — email support@launchnest.ca. A person, not a queue, reads that address.

What we collect, why, and for how long

What	Why	Lawful basis	How long
Checklists, goals, and which games you're playing	This is the app. It's saved in your browser on your own device.	Necessary to provide what you asked for	Until you clear it — we never receive it
The Zenless Zone Zero UID you look up, and the public showcase it returns	To fetch and rate your discs, and to remember agents from earlier lookups so your rated roster can grow past the six the game shows at once.	Necessary to provide what you asked for	Showcase cache 24 hours. Saved roster 180 days after your last lookup, or indefinitely once its page has been shared.
Feedback and build suggestions: your message, the page you sent it from, your browser's user-agent, and an email address if you give one	To read it, fix what you reported, and reply if you asked us to.	Legitimate interest in improving the site; consent for the optional email	12 months
A one-way scrambled form of your IP address	Rate limiting, so one visitor can't overwhelm the site or the services it depends on. It is scrambled before it is stored, so we cannot read it back.	Legitimate interest in keeping the site available	24 hours
Your IP address, sent to Cloudflare	Public forms run a Cloudflare Turnstile check to confirm you're not a bot. Cloudflare needs the address to score the challenge. We don't store it.	Legitimate interest in preventing spam and abuse	Not retained by us — see Cloudflare's own policy
Aggregate page views, referrer, approximate device and browser type, and Web Vitals	To see which pages people use and whether they're fast. Vercel Analytics and Speed Insights are cookieless and don't build a profile of you or identify you.	Legitimate interest in understanding and improving the site	Aggregated by Vercel; never tied to you
Advertising cookies	The site is free and funded by Google AdSense. See Advertising below.	Your consent, where consent is required	Set by Google, not by us — durations are in Google's cookie policy
Administrator accounts: name, email address, and avatar from Google	Sign-in exists only for site administrators. There are no public accounts.	Necessary to operate the site	While the account is an administrator. Expired sessions are deleted daily.

Retention isn't aspirational — a scheduled job deletes this data on the timetable above. Deleted rows may persist briefly in encrypted database backups before those backups age out.

Shared rating pages

Once a UID has been looked up, the ratings we saved for it are readable at a page addressed by that UID — /zzz/p/<your UID>. That makes the link stable and shareable, and it means anyone who knows or guesses your UID can open that page. Treat it as public. Everything on it is a copy of the showcase Enka.network already serves publicly for your UID, and nothing there is information you gave us.

We don't store your in-game display name at all — these pages say “Shared disc ratings” rather than naming you — and they're excluded from search engines, so they don't become a browsable directory of players. If you want the page for your UID deleted, email us and we'll delete it; see Your choices below.

Older share links of the form /zzz/b/<code> still work. Those were issued when pages were reachable only through an unguessable code, and they keep that property — the UID doesn't appear in the address, the page or the preview image. We no longer issue new ones.

Cookies and similar technologies

Only one thing on Wisplight sets tracking cookies: Google AdSense. Everything else is either strictly necessary or stores nothing at all.

Google AdSense — advertising cookies (including __gads, __gpi and DoubleClick's IDE). Requires your consent where consent is required. This is the only non-essential category.
Sign-in cookies — a session and an anti-forgery token, set only if an administrator signs in. Strictly necessary.
Cloudflare Turnstile — may set a short-lived challenge cookie when you open a form. Strictly necessary for spam prevention.
Your browser's local storage — your checklists, goals, chosen theme, and the last UID you looked up. Stored on your device, readable only by this site, and never transmitted to us. Clearing your browser data removes it.
Vercel Analytics and Speed Insights — set no cookies whatsoever.

Fonts are served from our own domain rather than a font CDN, so loading a page doesn't disclose your IP address to a third party before you've chosen anything.

Advertising

Wisplight is free to use and is funded by ads served through Google AdSense. Google and its partners use cookies to serve ads based on your visits to this site and elsewhere.

If you're in the European Economic Area, the United Kingdom, or Switzerland, two things apply. You are shown a consent choice, through a Google-certified consent management platform, before any personalized advertising cookies are set — and you can change that decision at any time using the “Privacy and cookie settings” link in the consent message. Separately, we ask Google for non-personalized ads only on all traffic from those regions, regardless of what you choose. Non-personalized ads are based on the page you're reading and your rough location, not on a profile of your browsing.

Anywhere in the world you can opt out of personalized advertising in Google Ads Settings, or opt out of third-party vendor cookies at aboutads.info. For more on how Google uses data from sites that use its services, see Google's partner sites policy. We never pass your checklist progress, goals, or the UID you look up to advertisers.

Who else sees your data

We don't sell your personal information, and we don't share it for cross-context behavioural advertising beyond the AdSense integration described above. These service providers process some of it on our behalf:

Vercel — Hosts the site and its server logs; provides the cookieless analytics
Neon — Hosts the database
Cloudflare — Turnstile bot checks (receives your IP address) and image storage
Resend — Delivers feedback and suggestion emails to us, and replies to you
Google — AdSense advertising, and sign-in for administrators
Enka.network — Receives the Zenless Zone Zero UID you look up, in order to return that account's public showcase

These providers are based in, or process data in, the United States and other countries outside your own. Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the transfer mechanisms in each provider's data processing terms, such as the European Commission's Standard Contractual Clauses.

Your rights

Wherever you live, you can ask us to show you what we hold about you, correct it, or delete it. Depending on where you live you may also have the right to receive a copy in a portable format, to object to or restrict processing based on legitimate interests, to withdraw consent you previously gave, and — in some US states — to opt out of the sale or sharing of personal information and to not be discriminated against for asking.

Email support@launchnest.ca and we'll respond within 30 days. Tell us what to look for — the email address you used, or the UID or share link in question — since without an account there's nothing else tying the data to you. For the same reason we may not be able to find anything if you can't give us one of those.

One asymmetry worth stating plainly: a UID on its own doesn't prove the account is yours. We'll still act on a deletion request given just a UID, because everything we hold for one is a copy of a public Enka.network showcase — deleting it takes nothing away from the person it belongs to, and a returning player rebuilds it with one lookup. To disclose anything, we may ask a question or two first, since there the cost of being wrong falls on you rather than on us.

Complaints

If you think we've mishandled your data, please tell us first — we'd rather fix it. You also have the right to complain to a regulator: in Canada, the Office of the Privacy Commissioner of Canada; in the EEA or UK, your national data protection authority.

Children

Wisplight isn't directed at children, and we don't knowingly collect personal information from anyone under 13. If you believe a child has sent us something through the feedback form, email us and we'll delete it.

Changes to this policy

Material changes are noted in the patch notes, so there's a dated public record rather than a policy that quietly shifts.