RaiderBuddy Extension Privacy Policy

Last Updated: February 2026

Overview

The RaiderBuddy browser extension ("Extension") is designed to securely connect your Embark Games account to the RaiderBuddy web application. This privacy policy explains what data the Extension accesses and how it is used.

Data Collection

What We Access

The Extension accesses the following data during the authentication process:

1. Embark Session Token: A temporary access token provided by Embark Games after you log in. This token allows RaiderBuddy to fetch your game data (inventory, statistics, etc.) from Embark's servers.
2. Embark User ID: Your unique identifier on Embark's platform.
3. Display Name: Your public display name and discriminator (e.g., "PlayerName#1234") as shown on your Embark account.

What We Store Locally

The Extension stores the following data in your browser's local storage:

• Session status (connected/disconnected)
• Temporary PKCE tokens (for secure OAuth flow, automatically deleted after use)
• Basic profile information for display in the extension popup

What We Send to RaiderBuddy

When you connect your account, the Extension facilitates sending the following to RaiderBuddy's secure servers:

• Authorization code (exchanged for access tokens)
• PKCE verifier (for secure token exchange)

RaiderBuddy's servers then securely store your access tokens to fetch your game data.

Data We Do NOT Collect

• We do NOT collect your Embark account password
• We do NOT collect your Steam, Epic, PlayStation, or Xbox credentials
• We do NOT track your browsing history
• We do NOT collect any data from websites other than raiderbuddy.com and id.embark.games
• We do NOT sell or share your data with third parties

Permissions Explained

Storage

Used to store your connection status and temporary authentication data locally in your browser.

Tabs

Used to navigate you through the OAuth login flow and redirect you back to RaiderBuddy after authentication.

DeclarativeNetRequest

Used to intercept the OAuth callback URL and redirect it to RaiderBuddy. This is required because Embark's OAuth system redirects to a local URL that we need to capture.

Host Permissions

• id.embark.games: Required to detect when you've logged in and capture session data
• raiderbuddy.com: Required for the extension to communicate with the RaiderBuddy web app
• 127.0.0.1:49171: The OAuth callback URL that we intercept

Data Security

• All communication with RaiderBuddy servers uses HTTPS encryption
• Authentication uses the OAuth 2.0 PKCE flow, which is the industry standard for secure authentication
• Tokens are stored securely and are never exposed to other websites
• You can disconnect your account at any time, which clears all stored data

Your Rights

You have the right to:

• Disconnect: Remove your Embark connection at any time through the extension popup or RaiderBuddy website
• Delete Data: Request deletion of your data by contacting us at support@raiderbuddy.com
• Access Data: View what data is stored by checking your RaiderBuddy account settings

Third-Party Services

This Extension interacts with:

• Embark Games (id.embark.games): For authentication. Their privacy policy applies to data on their platform.
• RaiderBuddy (raiderbuddy.com): Our web application. See our main privacy policy at https://raiderbuddy.com/privacy

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last Updated" date.

Contact

If you have questions about this privacy policy or the Extension's data practices, please contact us at:

• Email: raiderbuddyapp@gmail.com
• Website: https://raiderbuddy.com

Open Source

This extension's source code is available for review to ensure transparency about our data practices.