Privacy Policy
This page explains what the Enshrouded save editor collects, why, for how long, and how to have data deleted. Short version: editing happens locally; the only data that can reach us is an anonymized sample you explicitly choose to send, plus anonymous usage statistics — on by default on English and Chinese pages, opt-in on German pages.
Your save file stays in the browser
Opening, parsing, editing and exporting a save file happens entirely in your browser. No file, no character name and no save content is uploaded — not by the editor, and not by analytics. There are no accounts. You can load the page, go offline, and the editor keeps working.
Analytics: on for English and Chinese, opt-in for German
This site uses Google Analytics 4 to learn which pages and which parts of the editor are actually used. Which default applies depends on the language you are reading:
- English and Chinese pages: analytics runs from the first visit.
- German pages: analytics stays off until you accept the banner shown on first visit.
When analytics runs, Google Analytics sets cookies (“_ga”, “_ga_*”) and receives: the pages you open, your interface language, a coarse device category, and the steps you take in the editor — that a file was chosen (its size range, and whether it came from the picker or drag-and-drop), whether parsing succeeded or failed (with the error category and save format version), which kind of field you edited (level, XP, skill rank, item count, item level, or that the character name was changed), whether you exported or discarded your changes, and whether you sent an optional sample.
We never send file names, character names, item names, save contents, or exact file sizes. Google acts as our processor; data may be processed outside the EU under the EU–US Data Privacy Framework. On German pages the legal basis is your consent (Art. 6(1)(a) GDPR). On English and Chinese pages, where analytics starts without a prompt, it relies on our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR) — and you can switch it off at any time.
You can turn analytics off at any time through “Analytics settings” in the footer of any page. The choice is stored in your browser and applies to every page from then on — declining on one page is never undone by switching language.
While analytics is off (German pages before consent, or after you decline), no analytics cookies are set. The page may still send a cookieless, aggregated signal through Google Consent Mode so that a visit is counted at all; it carries no identifier and cannot be linked back to you.
What a sent sample contains
When a save fails to parse, a collapsed panel offers an optional sample upload. Only if you expand it, tick the consent box and press Send, the browser posts: the file’s bytes (with the character name replaced by "Anonymous" whenever it can be detected — you are told when it cannot), the file size, the error category, and a short label of the browser family derived from a hashed user-agent string. The server also records a SHA-256 of the bytes, a SHA-256 of the raw user-agent string (never the string itself), and the country code your request arrived from.
The upload never includes your file name, your Steam ID, or any account information. We have no way to link a sample back to you.
Why we collect it, and the legal basis
Samples are used for one purpose: making this editor support save formats it cannot read yet. They are not shared with third parties, not sold, and not used for anything else. The legal basis under the GDPR is your consent (Art. 6(1)(a) GDPR) — given per sample by ticking the box and pressing Send. You can decline silently: every part of the editor works without it.
How long we keep samples
Samples and their metadata are deleted 30 days after receipt. Anything not needed to improve format support is removed with them.
How to withdraw consent or have a sample deleted
You can withdraw consent at any time with effect for the future — simply stop using the sample upload; nothing needs to be configured. To have a specific sample deleted before the 30 days are up, keep the sample ID shown in the confirmation message and email privacy@enshroudedsaveeditor.com — we act on deletion requests within 30 days.
Processors and third parties
The site and the sample endpoint are hosted on Cloudflare infrastructure, which processes requests as any web host does (including the country code derived from your connection). No other third party receives sample data. There are no ads and no tracking pixels; analytics cookies are set only by Google Analytics as described above and never receive sample data.