Last updated: 23 July 2026

Chiz.Pink is an independent, fan-made companion app and isn't affiliated with or endorsed by the game's publisher. This page explains, in plain language, what data the app handles and where it goes.

The short version: everything you do in Chiz.Pink stays on your device by default. If you choose to sign in with Google to sync across devices, your data is encrypted before it ever leaves your device, using a key that's stored only in your own Google Drive. Chiz.Pink and the database that backs it up (Convex) never see your data in a readable form - only you can decrypt it.

What's Stored On Your Device

Your planner progress, inventory counts, and settings are saved in an IndexedDB database in your browser, along with a timestamp of your last change. None of this leaves your device unless you sign in with Google.

Signing in With Google

Signing in is completely optional. If you do, Chiz.Pink uses Google Sign-In solely to:

  • Identify your account: your Google account ID links your encrypted backup to you. We store your account email alongside your backup solely so you can see which account you're signed into; we never send marketing emails, track you across sites, or share your email with third parties.
  • Store an encryption key in your Google Drive: during your first sync, Chiz.Pink generates a random AES-256 encryption key and saves it into your Google Drive's appDataFolder. This is a hidden, application-specific storage space that only Chiz.Pink can access - Chiz.Pink cannot read, modify, or see any of your personal files, Google Docs, photos, or anything else in your Drive.

The appDataFolder scope is the narrowest access Google offers for app storage. We ask for nothing more.

How Cloud Backups Work

When cloud sync is active, your planner, inventory, and settings are backed up using end-to-end encryption:

  • Before any data leaves your device, it is encrypted locally with your key using AES-GCM (256-bit).
  • The encrypted data is stored in a cloud database hosted by Convex. Convex only ever receives ciphertext. Neither Convex nor Chiz.Pink has your key, so neither can read your data.
  • When you open Chiz.Pink on another device and sign in with the same Google account, the app retrieves the key from your Google Drive, downloads the encrypted backup from Convex, and decrypts it locally.
Third-Party Services

Chiz.Pink relies on the following third-party infrastructure:

  • Google Identity & Google Drive API: handles authentication and stores your encryption key in your private appDataFolder. Governed by Google's Privacy Policy.
  • Convex: stores the encrypted backup blobs and sync metadata. Governed by Convex's Privacy Policy.
  • Vercel: hosts the application and serves static assets. Standard web server access logs (IP addresses, request paths) may be collected by Vercel for operational and security purposes, governed by Vercel's Privacy Policy.

There are no advertising trackers, analytics SDKs, or behavioral monitoring scripts on Chiz.Pink.

Deleting Your Data

You have full control over your data at any time:

  • Local data: click "Erase Data" in Settings to wipe all locally stored planner progress, inventory counts, and preferences from your browser.
  • Cloud data: click "Unlink & Delete Cloud Data" in Settings while signed in. This deletes your encrypted backup and account record from Convex immediately and clears your session.
  • Google Drive app data: you can delete Chiz.Pink's hidden configuration and encryption key directly from your Google account at any time by visiting Google Account Connections, selecting Chiz.Pink, and clicking "Delete all data that you shared with Chiz.Pink".
Changes to This Policy

If any practices described on this page change, the "Last updated" date at the top will be updated. Continued use of Chiz.Pink after changes are posted constitutes acceptance of the updated policy.