Controlled pilot · Updated 18 September 2026

Your privacy matters.

This notice explains the personal data involved when you use BG Toolkit’s connected pilot. You can also use local parts of the App and Builder without signing in; local drafts, imported or downloaded packs, and sessions remain on your device unless you choose a connected operation.

Who is responsible?

EDOL Tech S.L. operates BG Toolkit and is the controller for the connected pilot. For privacy questions or requests, email privacy@edol.tech or write to:

EDOL Tech S.L.
Av. Icaria 149, 4o-2a
08005 Barcelona
Spain

What do we use, and why?

  • Invited accounts. Microsoft Entra External ID handles sign-in and recovery information, including your email and credentials. BG Toolkit stores an internal user ID, the directory ID mapping, enabled status, and pilot/creator permissions. We use these to provide the connected pilot service you choose to use; the basis is performance of our agreement with you. BG Toolkit does not store your identity-provider password.
  • Packs and publication. If you create and publish a pack, we store its files, title, game association, version, ownership, validation outcome, and publication history so we can provide that service. A public pack can be downloaded by anyone; a pilot pack is limited to eligible users. Please avoid placing other people’s personal information in pack content without an appropriate basis.
  • Security and administration. We keep limited operator and publication audit records to administer the pilot, investigate misuse, and protect the service. Our basis for this is legitimate interests.
  • Operational diagnostics. We collect request route and time, outcome and duration, correlation IDs, dependency and error details (which may include exception messages and stack traces), and technical context such as masked-IP-derived coarse location, browser, and device type. This data is not anonymous. We do not intentionally add account names, emails, passwords, tokens, request bodies, pack content, URL query strings, or SQL values to telemetry. We use it for reliable, secure service operation under legitimate interests—not advertising or behavioral profiling.

Who can see the data?

Microsoft provides identity, Azure hosting, storage, and monitoring services for BG Toolkit. Designated EDOL Tech operators have the access needed to run and support the pilot. Publicly published pack content is available to anyone; pilot packs are available only to eligible users. We do not sell your information or use operational telemetry for marketing. Our application and monitoring resources are in Spain Central; Microsoft’s EU Data Boundary has documented limited-transfer exceptions, so we do not promise that every processing step remains in the EU.

How long is it kept?

We keep account and permission records while you have pilot access. Accepted pack versions and publication or audit history may remain after a pack is withdrawn: withdrawal stops new discovery and download, but does not itself delete those records or bytes. We review deletion requests case by case, including whether limited records must remain for security, other users’ rights, or legal obligations. We do not currently promise automatic deletion of accepted packs or audit history on a fixed date.

Operational telemetry has a configured 30-day retention policy; expiry processing may take additional time. Verified encrypted recovery snapshots are normally retained for 30 days, but the latest verified set is protected from automatic deletion until a replacement exists. Local data stays on your device until you remove it using its browser or device controls. Signing out does not delete local drafts, packs, or sessions.

Your choices and rights

You can use local features without signing in. Connected publishing and restricted pilot access require an invited account. You can ask us about access, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests at privacy@edol.tech. We may need enough information to verify your request and locate the relevant records; a trace ID and approximate time can help with diagnostic records that are not indexed by account. You may also complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

This information site

This simple site has no contact form or site-owned analytics scripts. The App, Builder, and Microsoft sign-in experience use technical browser storage for local data and authentication as needed. We will update this notice if the pilot’s processing changes materially.