Privacy Policy

Effective date: July 17, 2026

Tarnished Tools ("we", "us") operates the Elden Ring weapon calculator at tarnished.tools (the "web app") and the Elden Ring Calculator MCP server at https://tarnished.tools/mcp (the "connector"). This policy describes what data each service processes. The short version: we run a game-math calculator, we store as little as possible, and we never sell data.

Data the web app processes

Builds and preferences are stored locally in your browser (localStorage). They are not sent to our servers unless you create a share link, in which case the build is encoded in the URL itself.
Anonymous usage analytics via Vercel Web Analytics (page views, aggregated by page and referrer). Vercel Analytics does not use cookies or track individuals across sites.
Standard server logs from our hosting provider (Vercel), such as IP address, user agent, and request timestamps, kept for operations and abuse prevention under Vercel's standard retention.

Data the MCP connector processes

Sign-in identity. The connector is protected by OAuth via WorkOS AuthKit. When you connect it to an AI client (such as Claude), we receive the basic identity from your sign-in (such as your email address) to authenticate requests. We do not use it for marketing.
Tool requests. Requests from your AI client — build parameters, stat spreads, and small JavaScript programs written by the model — are processed to compute results and returned to your client. Programs execute in an isolated sandbox with outbound networking disabled. Requests are processed in memory to serve your session; we do not build profiles from their content.
Operational logs (request metadata, errors, timestamps) via Vercel, kept for operations, debugging, and abuse prevention.

What we never do: we do not sell or rent your data, we do not run ads, we do not access your game account (the calculator works entirely from published game data — it never connects to Elden Ring, Steam, PlayStation Network, Xbox Live, or Bandai Namco accounts), and we do not use your data to train AI models.

Third-party services

Vercel — hosting, serverless functions, sandboxed program execution, and anonymous analytics (privacy policy).
WorkOS AuthKit — OAuth authentication for the MCP connector (privacy policy).

Conversations with an AI assistant that uses this connector are governed by that assistant's own privacy policy (for Claude, see Anthropic's privacy policy). We only receive the tool requests the assistant sends to our server.

Data retention and deletion

We keep no user database of our own: web-app builds live in your browser and can be cleared by clearing site data; connector sign-in records live with our authentication provider (WorkOS); operational logs expire under our providers' standard retention windows. To request deletion of authentication records associated with your email, contact us at the address below.

Children

Our services are not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

We will post any changes to this policy on this page and update the effective date above.

Contact

Questions, support, or data requests: guythomas721@gmail.com

Tarnished Tools is an unofficial fan project. It is not affiliated with, endorsed by, or sponsored by FromSoftware or Bandai Namco Entertainment. Elden Ring is a trademark of its respective owners.