Privacy Policy

Last updated: August 7, 2026

Sprites Vault is a free, fan-made tool for tracking your Fortnite sprite collection. It is available as a website, as a Telegram Mini App, and together with a companion Telegram bot that shows which members of your Fortnite squad are online. All three surfaces are developed and operated by Aleksandr Berlin, an independent developer based in Spain ("we", "us", or "our"), who acts as the data controller for the personal data described here (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over it.

1. Information We Collect

You can use the tracker on the website without any account — in that case your collection is stored only in your browser's local storage on your device and never reaches our servers. Beyond that, we collect:

  • Sign-in and account information. Depending on which sign-in methods you use:
    • Telegram — when you open the Mini App or sign in with Telegram on the website, we receive your Telegram ID, username, first/last name, and language setting from Telegram.
    • Email — if you sign in with or connect an email address, we store that address to send you one-time sign-in codes and identify your account.
    • Epic Games — if you choose to sign in with or connect an Epic Games account, we receive your Epic account identifier and Epic display name through Epic's official sign-in service (Epic Account Services / OAuth). We never see or store your Epic Games password. You can disconnect any sign-in method at any time from the account menu.
  • Collection data. The sprites you mark as owned or mastered, and progress derived from them, stored against your account so they sync between the website and the Mini App.
  • Team and group data (Telegram bot). If you use the companion bot, we store the teams you create: team names and the Telegram usernames of the members a team owner adds. If the bot is linked to a group chat to post a status board, we store that group's chat ID and related settings. We also store your language preference.
  • Epic Games session (Telegram bot). If you connect your Epic Games account in the bot to enable online-status checks, we store an encrypted Epic session token. The bot uses it, on request, to check which of the Epic friends on your team are currently playing Fortnite. That presence information is processed transiently to answer the request and is not stored. Logging out of the bot deletes the session token.
  • Usage and technical data. Like most services, our infrastructure providers automatically log technical information such as IP address, browser type, and access times in order to operate and secure the Service.

We do not use advertising or analytics trackers.

2. How We Use Your Information

  • To provide, maintain, and improve the Service, including syncing your collection across devices and surfaces (performance of our contract with you);
  • To authenticate you and keep your account secure (performance of our contract; legitimate interests);
  • To show team rosters and, on request, which team members are online in Fortnite (performance of our contract);
  • To display your name or username on your account, your teams, and collection pages you choose to share (performance of our contract);
  • To communicate with you about your account or important changes to the Service (performance of our contract; legitimate interests);
  • To detect, prevent, and address fraud, abuse, and technical issues (legitimate interests).

3. Cookies and Local Storage

We use browser local storage and similar technologies only for essential functionality: keeping you signed in and saving your collection and preferences on your device. We do not set advertising or analytics cookies. You can clear this data at any time through your browser settings, though doing so may sign you out or remove locally saved progress.

4. Third-Party Services

We rely on the following providers to operate the Service. Your information is processed by these providers subject to their own privacy policies:

  • Supabase — authentication and database hosting for account, collection, and team data (hosted in the European Union).
  • Cloudflare — hosting and content delivery for the website and Mini App.
  • Google Cloud — hosting for the Telegram bot.
  • Telegram — the platform the Mini App and bot run on; Telegram's own processing is described in the Telegram Privacy Policy.
  • Epic Games — sign-in via Epic Account Services and, if you connect Epic in the bot, online-status lookups. Epic's handling of your data is described in the Epic Games Privacy Policy.
  • Google Fonts — the fonts on this site load from Google's servers, which receive your IP address when fetching them.

Sprites Vault is not affiliated with, endorsed by, or sponsored by Epic Games, Inc. or Telegram.

5. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

  • When you share your collection. If you create a share link, anyone who has that link can view your display name or username and the contents of your sprite collection. Share links are public URLs — only share them with people you want to see your collection.
  • Within your teams. A team's owner and its members can see the team name, the members' Telegram usernames, whether a member has a Sprites Vault collection, and — when the owner runs a status check — who is currently online in Fortnite. If your Telegram username was added to a team and you want it removed, ask the team owner or contact us.
  • In group chats. If a team owner links the bot to a group chat, the team's status board (member usernames and online status) is visible to that chat.
  • With service providers who process data on our behalf to run the Service (see Section 4).
  • For legal reasons, if required to comply with applicable law, regulation, legal process, or a governmental request, or to protect the rights, property, and safety of our users and the public.

6. Data Retention

We retain your account, collection, and team information for as long as your account is active or as needed to provide the Service. The bot's Epic session token is kept until you log out of the bot or disconnect your Epic account, and online-status results are not stored at all. You may request deletion of your account and associated data at any time — the account menu includes a "Remove account" option, or you can contact us — after which we remove it except where retention is required by law.

7. Your Rights

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar protections, you have the right to access, correct, export, or delete the personal data we hold about you; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. To exercise these rights, use the in-app account options or contact us using the details below. You also have the right to lodge a complaint with your local data-protection supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

8. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Data Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), access controls on our databases, and encryption at rest for stored Epic session tokens. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Transfers

Account, collection, and team data is stored with Supabase in the European Union. Some providers (such as Cloudflare, Google, Telegram, and Epic Games) may process technical data in countries outside the European Economic Area, where data-protection laws may differ. Where that happens, we rely on safeguards such as the European Commission's Standard Contractual Clauses entered into by our service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time — for example, if we add new features that change what data we process. When we do, we will revise the "Last updated" date above, and for significant changes we will provide a more prominent notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

Sprites Vault is operated by Aleksandr Berlin. If you have questions about this Privacy Policy, how we handle your information, or want to exercise your rights, contact us at info@spritesvault.com.