Privacy policy
Revised September 27, 2026
Who is responsible
GenshinFlex is run by its owner as a personal, noncommercial fan project. It is not affiliated with HoYoverse. You can reach us through the feedback form, our Discord server, or an email address if one is shown below.
Using the site without an account
You do not need to register. Your browser keeps your theme, server region, favorites, roster and calculator data, wish history and UID, guide drafts, recently viewed pages, and sign-in session (gf:auth) in localStorage. These stay on your device except in the cases below. You can clear them in your browser settings. We use no analytics, ad trackers, or tracking cookies.
Game services
If you load a character showcase by UID, our proxy requests it from enka.network. Cloudflare caches the response by UID without linking it to you. If you import wish history, the link containing authkey passes through our proxy to HoYoverse; we neither store nor log it.
Feedback and guide submissions
Cloudflare D1 stores the text, page, optional contact details, and a hash of your IP address for rate limiting. We do not store the IP itself. Feedback and submissions are forwarded to a private team channel on Discord. Bug reports and ideas go to public server forums without contact details or IP. Ask us through the form or Discord to remove your message.
Optional account
Email sign-in uses your email and password; Supabase stores only a password hash. Discord or Google sign-in provides your email, name, and avatar; Telegram provides your ID, name, username, and photo. Your profile holds a username, display name, avatar, private game UID, region, language, bio, and profile visibility setting. Your roster, wishes, favorites, and settings will be synced when syncing becomes available. We use this information to provide sign-in and account features, based on the consent you give at registration.
Service providers
Supabase handles the database and sign-in on EU servers; Cloudflare hosts the site and API and provides Turnstile bot protection; Sanity manages site content without user data; Resend sends confirmation and password-reset emails; Discord receives feedback. Discord, Google, or Telegram are involved in sign-in only when you choose them. We do not sell data or share it for advertising.
How long data is kept
Account data remains while your account exists and is erased when you delete it. Supabase backups may remain for a limited period under its policy. We keep feedback and submissions while they are useful for running the site and remove them on request.
Your choices and rights
You can download your data or delete your account from the account page. Profile editing is planned; for now, ask us to correct your data. You can withdraw consent or complain to your country’s data protection authority. GDPR applies in the EU.
Age
You must be at least 13 to register. If your country requires a higher age to consent to data processing (up to 16 in the EU), you need parental consent.
Changes
The revision date appears above. We will announce significant changes in the site’s news.