Privacy Policy

Welcome to Snowcloak!

This document serves as the privacy policy for both the account management portal, and Snowcloak itself. It is divided into sections for easy perusal, and hopefully letting you find the section you want quickly enough.

Snowcloak is a utility designed to share your appearance with other players you choose to sync with.

To achieve this functionality, Snowcloak reads and transmits your data from the following mods:

• Penumbra
• Glamourer
• Moodles
• SimpleHeels
• Honorific
• Customize+
• PetNicknames
• Brio

Snowcloak also reads and transmits any mod files you have active. Other users of the service will be able to see your mods and any active information used by the mods listed above. Snowcloak will show you the mods and associated data of other players you choose to sync with.

Snowcloak accesses your character name and home world to associate a locally stored secret key with you, and transmits the same as part of the character login sequence when using XIVAuth.

Snowcloak supports two methods of syncing - direct pairs and syncshells.

Direct pairs require sharing a User ID (UID) with other players, and receiving theirs. UIDs are randomly generated by the server at account registration time, and do not contain identifying information. Vanity IDs are an alternative to UIDs, and are user-specified. These may contain identifying information if the user it belongs to has placed such information in it.

Syncshells are a mass-pair utility that will automatically snc you with nearby players who are in the same syncshell. Unlike direct pairs, syncshells do not require your explicit consent for someone to share their appearance data and mods with you.

Syncshell Chat

Snowcloak integrates functionality to allow chat with people in syncshells that you are a member of. You can opt out of this functionality in the settings window.

Syncshell chat is encrypted, and cannot be viewed by Snowcloak staff. No chat data is stored.

Mod Files

Mod files are stored in perpetuity, or until the system needs to free up space by deleting the least frequently used mods.

Snowcloak stores the UID of the user who uploaded the mod for the first time.

Any player you sync with receives a copy of your mods in order to display them. These files are stored on their computer, and may be used by the other player if they choose to do so.

Secret Keys

A secret key is the token used to "log in" to your UID.

The server stores a hashed version of the secret key. The full secret key is never transmitted.

If you choose to associate a character in the management portal with an existing secret key, your key is hashed locally by your browser. The full key is not transmitted.

DO NOT share your secret key with third parties. Snowcloak staff will never ask for your secret key.

XIVAuth

Snowcloak uses XIVAuth to provide verification of characters and recovery of UIDs when the secret key is lost.

XIVAuth is an external service operated by KazWolfe.

When logging in with XIVAuth, you choose which characters you want Snowcloak to have access to.

Snowcloak will recieve the name, home world, lodestone ID, datacentre, and avatar URLs of the character(s) you choose to share. XIVAuth also generates a "persistent key" for use by services.

Of the above information, only the persistent key is stored by Snowcloak permanently. This key acts as a unique identifier for your character.

Snowcloak does not request any information about your user account from XIVAuth outside of whether you have any verified characters. Data other than the persistent key is deleted when you log out, or after 30 minutes of inactivity on the web portal.

The persistent key is stored in the database associated with a hashed version of your secret key to allow for recovery and management.

No data is transmitted from Snowcloak to XIVAuth beyond what is needed to retrieve your characters.

General Privacy

When you use any service on the Internet, your IP address is inherently revealed to them. Snowcloak and its staff have no interest in your personal data, including your IP address.

Under normal conditions, IP addresses are rotated out of standard server logs within 24 hours. If logs are required to be kept for longer for security or law enforcement purposes, they are discarded as soon as they are no longer required.

Snowcloak's servers are based in Germany, with the adminstrator based in the United Kingdom. By connecting to or using any Snowcloak service, you agree that the laws of these countries apply.

Should you wish to delete your Snowcloak account, you may do so from the settings page of the plugin.