Privacy policy
What Raid Optimizer keeps about you, why, and how to have it deleted. Last updated 18 October 2026.
Who we are
Raid Optimizer is a fan-made guide and desktop app for RAID: Shadow Legends, run from the Czech Republic (EU). Write to [email protected] about anything on this page.
Reading the guide
The guide needs no account. Visits are counted without cookies: a visitor is a random pseudonym that changes every day, and no IP address is kept. The server's own log records which page was asked for and when.
Your account
If you create an account we keep:
- Your email address - to sign you in and to send you confirmation and password-reset links.
- Your password, as a one-way hash (scrypt) - we cannot read it back. Accounts made with Google have no password.
- With Google sign-in: your Google account ID, email address and name, which Google sends us when you choose "Continue with Google". We do not get your Google password or anything else from your Google account.
- Sign-in sessions (stored as hashes, ended after 30 days or when you sign out), the date the account was made and when you last signed in.
- Your beta key link - which beta key belongs to your account (we never keep the key itself, only a hash and its last four characters).
We use this only to run your account and your beta access, and later to let you pay for a subscription. We do not sell it, show you ads, or share it with anyone except the services that deliver our emails.
The desktop app
The app reads your RAID account on your own PC and sends it to our server to build its views and run the simulator; the server keeps no copy. AI requests use your own API key, which the server passes on for that one request and never stores. The app reports which actions are used (an import, a Sim click, an update, an error) with your beta key's nickname to PostHog, on its EU servers - never your account, your keys or your IP address.
Cookies
We set cookies only when you use an account, and only the ones it needs to work: ro_session keeps you
signed in, ro_in lets the site show "Account" instead of "Sign in", ro_csrf protects our
forms, and ro_oauth lives for ten minutes during a Google sign-in. No tracking or advertising cookies.
Where it is kept and for how long
On our own server in the Czech Republic. Account data stays until you delete the account; email links expire after one hour (password reset) or 48 hours (confirmation).
Your rights
You can see what we keep on your Account page, and delete your account there at any time - this removes your data and switches off a beta key on it. You can also ask us by email for a copy of your data, a correction or the deletion. If you think we handle your data wrongly, you can complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz).