Privacy Policy
Last updated: October 3, 2026 · version v1
In short: your HoYoverse password and cookies never leave your browser; we do not know your UID; we keep only what the service needs, for short periods; and you can delete your account whenever you want.
1. Who we are and what this policy covers
Gacha Focus is a community and a set of tools for gacha game players. This policy applies to every Gacha Focus service that handles personal data. Today it covers:
- Automatic redemption extension (Chrome and Firefox): redeems the promotional codes of Genshin Impact, Honkai: Star Rail and Zenless Zone Zero for supporters.
New services will be added to this list, together with what they collect.
Data controller: Lucas Matheus do Prado Citta Martins, Araçatuba, São Paulo, Brazil · contact: [email protected] · Discord: discord.gg/MsFWXSb63F.
Gacha Focus is not affiliated with, sponsored or endorsed by HoYoverse, COGNOSPHERE or miHoYo. Game names belong to their owners.
2. What never leaves your browser
- Your HoYoLAB/HoYoverse cookies, password and session. The extension uses the session already open in your browser and talks directly to the official HoYoverse servers. Our server never receives, stores or could use any game credential.
- Your UID and character nickname. Each game account reaches our server only as a "fingerprint" (HMAC) computed with a key that exists only in your installation of the extension. Your UID cannot be recovered from it.
3. What we collect and why
| Data | Purpose |
|---|---|
Discord: ID, username, display name and avatar. Sign-in uses only
the identify scope, with no access to e-mail, servers or messages. |
Identify you and check the supporter role |
| Supporter status: role active, in grace or expired, and when it was checked | Grant or suspend access |
| Browser: type (Chrome/Firefox), operating-system family, extension version and a device public key | Keep the session secure; one active browser per user |
| Game accounts: fingerprint, server region (e.g. America) and whether you turned that server on or off | Know where to redeem each code |
| Preferences: active games, pauses and whether you accept Discord direct messages | Respect your choices |
| Redemption history: code, account (fingerprint), result returned by HoYoverse (e.g. "already redeemed") and timestamps | Avoid repeating codes, show the history, diagnose failures |
| Technical diagnostics (see section 4): extension version, whether it is paused and whether the HoYoverse sign-in is active, every 5 minutes | Warn when the sign-in expired; spot outdated versions |
| Security events: sign-ins, sign-outs, browser changes, blocks and deletion requests | Protect accounts against misuse |
We do not collect browsing history, page content, location, contacts or payment data.
4. Technical diagnostics
On Firefox, diagnostics are sent only with your permission ("Send technical diagnostics", on the setup screen or under "Game accounts") and can be turned off at any time without affecting redemption. On Chrome, which has no such permission, they are sent on the same terms described here.
5. Who we share data with
- HoYoverse: redemption requests go from your browser to the official servers, just like on the official redemption site. We do not send your data to HoYoverse.
- Discord: for sign-in and, if you wish, direct messages from our bot.
- Infrastructure: our own server; public access goes through Cloudflare, which processes traffic in transit.
We do not sell data or use it for advertising.
6. How long we keep data
| Data | Retention |
|---|---|
| Redemption history | 90 days |
| Security events | 180 days |
| Temporary sign-in data | 1 day |
| Delivery log (rate limit) | 1 hour |
| Game accounts the extension stopped reporting | turned off after 24 hours |
| Account (Discord, preferences, browsers, game accounts) | until deletion |
7. Deleting your account
In the extension, under "Delete my account", confirm by typing the requested word. The deletion is scheduled for 2 days later: meanwhile redemption is stopped and you can change your mind with "Cancel deletion". You can also ask through Discord or by e-mail.
Deleted: our record of your Discord (ID, name, avatar), supporter status, connected browsers, game accounts (fingerprints) and your choices, redemption history, notices and notifications.
Not touched: your actual Discord account and your HoYoverse accounts; we have no access to them.
Kept: suspensions and bans already applied (so they cannot be bypassed by deleting) and security events, which expire on their own within 180 days.
"Sign out" in the extension ends the session in that browser but does not delete the account.
8. Your rights
You may ask for confirmation of and access to your data, correction, deletion, portability and information about sharing, and withdraw consent, through the contacts in section 1. These rights follow the Brazilian General Data Protection Law (LGPD) and apply to everyone, wherever you live.
9. Security
Always HTTPS; short sessions bound to a device key; digitally signed codes; rate limits in the extension and on the server. See the Security page.
10. Changes
We will announce relevant changes on Discord and in the extension.