Data minimization is the default.

No accounts, emails, save files, logs, inventories, museum progress, or diagnostic answers are collected. The analytics adapter sends nothing, and advertising is disabled.

Site search runs in the browser against a build-generated index. Search terms are not sent to a third-party search provider.

Gift inventory, Museum progress, and selected mod-diagnostic answers may be stored in localStorage with versioned schemas, validation, safe fallback, and clear controls. Diagnostic state contains only dropdown choices—never logs, paths, saves, or free text—and does not sync to a server.

Visiting an external source subjects you to that service's own privacy practices. External links are visibly presented as sources rather than embedded trackers.